Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
File: OxRinHZc4axPaIlW47kPatjEtYI.mft (raw, json)
Hash identifier: X2KLaNZRznnaqHo/MKTiQpUBKpK5L/JjERhWo4LZIj8=
Subject key identifier: 51:ED:5A:43:C3:FF:0D:DE:85:06:CF:9B:89:F1:F1:1C:42:B4:CC:4B
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Certificate issuer: /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial: 01A003CB4EE516021B2BB39FD849A31D697D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
Manifest number: 1996
Signing time: Sat 15 Aug 2026 05:00:50 +0000
Manifest this update: Sat 15 Aug 2026 05:00:50 +0000
Manifest next update: Sun 16 Aug 2026 05:00:50 +0000
Files and hashes: 1: 0yRcFcA3OBSplazAFaiD6lfC3B0.roa (hash: 2qPLWspuMTgkMxkS4l/YyisgXYynSeGYaJD2ttoyg+o=)
2: OxRinHZc4axPaIlW47kPatjEtYI.crl (hash: nZP+t3zBvs0DkFsbXpET2jyEXjBJ42z0W1tJ2Fpd1T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cb:4e:e5:16:02:1b:2b:b3:9f:d8:49:a3:1d:69:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Validity
Not Before: Aug 15 05:00:50 2026 GMT
Not After : Aug 16 05:00:50 2026 GMT
Subject: CN=51ed5a43c3ff0dde8506cf9b89f1f11c42b4cc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:10:62:ad:c2:45:82:96:62:af:03:38:59:
ee:e6:47:aa:f5:3f:3b:5d:1b:29:07:01:63:cc:0b:
12:5d:dc:6c:f4:50:28:9e:0f:6d:cc:11:54:96:08:
06:1b:5f:73:14:80:5b:de:cc:84:76:6d:58:a9:c0:
05:e4:6c:17:b9:26:12:f1:7b:b7:a1:84:ae:44:20:
ed:35:09:64:33:38:79:3f:5d:b4:fa:50:da:7a:8f:
89:49:51:f9:5e:53:9f:ac:b5:aa:20:78:8f:a1:c4:
30:af:26:bc:32:e6:f8:71:5b:24:84:d1:a2:0d:1d:
a2:ff:9e:ee:db:6e:e0:02:1d:56:9f:9c:1d:76:c3:
b9:42:98:2c:9b:b5:77:f6:ce:64:36:aa:b9:8e:80:
43:f6:ef:48:5e:2c:2b:9d:15:ae:40:5c:de:d8:46:
32:17:bb:b1:ae:02:d3:ff:de:29:fa:26:a7:05:51:
03:59:86:7d:6b:fb:28:0c:3c:03:1e:d9:de:43:e0:
4a:cb:08:1d:85:fa:4f:de:0f:15:69:4c:d1:3e:a7:
f8:26:e7:fd:e0:55:b0:99:f9:12:b1:6a:ab:42:ba:
4c:4e:c0:9c:75:f1:ac:42:4f:2c:b8:cf:6d:ec:81:
b5:53:d1:66:92:7b:d2:f8:38:e6:05:50:a5:9a:61:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:ED:5A:43:C3:FF:0D:DE:85:06:CF:9B:89:F1:F1:1C:42:B4:CC:4B
X509v3 Authority Key Identifier:
keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a5:b3:42:8d:b5:a1:e9:83:f7:d8:61:5b:d6:57:59:93:e9:
12:64:28:29:66:a6:39:06:c5:86:ce:91:00:ff:89:f4:ce:6b:
5a:1e:40:c9:4d:0e:d1:c7:cc:40:07:84:28:9a:d6:2f:c7:17:
65:66:8b:a1:9d:ab:69:fd:ef:94:4c:54:09:4c:e2:20:dc:f2:
34:be:72:9f:f9:57:fa:78:11:d4:a7:52:66:56:81:42:90:49:
1a:ad:73:2d:62:6a:1c:36:d9:7b:3f:9d:b0:05:9c:89:3d:93:
13:4c:dd:49:16:f5:ae:aa:e3:2a:97:ce:0e:81:b5:f2:0a:75:
13:61:32:b5:75:55:86:b3:ac:71:22:19:1f:e3:a4:cf:65:6f:
26:ce:bc:a1:8c:58:2d:f1:fd:ad:85:b9:f9:47:fd:b8:5f:1b:
1e:84:d9:9b:ec:58:a3:a3:7b:f4:0a:f6:8f:40:bb:7c:28:2c:
88:04:a7:a0:2e:61:8e:84:9a:e0:c7:b8:1a:2a:83:a4:2f:02:
bd:5d:b3:1a:16:c3:57:e8:50:c9:6a:34:c6:3e:96:d1:20:54:
72:1b:26:ee:33:91:55:94:16:fb:0a:b1:aa:49:e6:9d:f8:79:
5e:a4:3d:46:87:d3:38:61:ed:b7:32:fd:3e:0d:14:0d:74:d8:
78:19:58:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADy07lFgIbK7Of2EmjHWl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMTQ2MjljNzY1Y2UxYWM0ZjY4ODk1NmUzYjkwZjZhZDhj
NGI1ODIwHhcNMjYwODE1MDUwMDUwWhcNMjYwODE2MDUwMDUwWjAzMTEwLwYDVQQD
Eyg1MWVkNWE0M2MzZmYwZGRlODUwNmNmOWI4OWYxZjExYzQyYjRjYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCAQYq3CRYKWYq8DOFnu5keq9T87
XRspBwFjzAsSXdxs9FAong9tzBFUlggGG19zFIBb3syEdm1YqcAF5GwXuSYS8Xu3
oYSuRCDtNQlkMzh5P120+lDaeo+JSVH5XlOfrLWqIHiPocQwrya8Mub4cVskhNGi
DR2i/57u227gAh1Wn5wddsO5Qpgsm7V39s5kNqq5joBD9u9IXiwrnRWuQFze2EYy
F7uxrgLT/94p+ianBVEDWYZ9a/soDDwDHtneQ+BKywgdhfpP3g8VaUzRPqf4Juf9
4FWwmfkSsWqrQrpMTsCcdfGsQk8suM9t7IG1U9FmknvS+DjmBVClmmE1TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHtWkPD/w3ehQbPm4nx8RxCtMxLMB8GA1UdIwQY
MBaAFDsUYpx2XOGsT2iJVuO5D2rYxLWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3hSaW5IWmM0YXhQYUlsVzQ3a1BhdGpFdFlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hMzdmOWMtMWU2YS00NjY1LWEwZTIt
ZmUzMTEwMGQwODFmLzEvT3hSaW5IWmM0YXhQYUlsVzQ3a1BhdGpFdFlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hMzdmOWMtMWU2YS00NjY1LWEwZTItZmUzMTEwMGQwODFm
LzEvT3hSaW5IWmM0YXhQYUlsVzQ3a1BhdGpFdFlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKWzQo21
oemD99hhW9ZXWZPpEmQoKWamOQbFhs6RAP+J9M5rWh5AyU0O0cfMQAeEKJrWL8cX
ZWaLoZ2raf3vlExUCUziINzyNL5yn/lX+ngR1KdSZlaBQpBJGq1zLWJqHDbZez+d
sAWciT2TE0zdSRb1rqrjKpfODoG18gp1E2EytXVVhrOscSIZH+Okz2VvJs68oYxY
LfH9rYW5+Uf9uF8bHoTZm+xYo6N79Ar2j0C7fCgsiASnoC5hjoSa4Me4GiqDpC8C
vV2zGhbDV+hQyWo0xj6W0SBUchsm7jORVZQW+wqxqknmnfh5XqQ9RofTOGHttzL9
Pg0UDXTYeBlYzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:05:02 2026 by rpki-client