Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
File: O4WG4n5FNo05EB_i_PU0rtHEalA.mft (raw, json)
Hash identifier: HDDCtNldNo2mTmjelhF50gm9EGouQnmTgFini2BefAU=
Subject key identifier: 7B:CD:E9:5C:C2:51:99:BF:4F:84:AC:DB:4E:92:97:0B:BC:40:A2:35
Authority key identifier: 3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
Certificate issuer: /CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Certificate serial: 019FA0A8D45DC8B5E82F5DE59BAE1A530DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
Manifest number: 0114
Signing time: Sun 26 Jul 2026 23:00:46 +0000
Manifest this update: Sun 26 Jul 2026 23:00:46 +0000
Manifest next update: Mon 27 Jul 2026 23:00:46 +0000
Files and hashes: 1: O4WG4n5FNo05EB_i_PU0rtHEalA.crl (hash: yQmaYZzx1sQTUSSOhf2BkD//+HkgxvPJSv9cpOxfQRU=)
2: kaLgu1ajbWbRTIp64nkveQ0sPI0.roa (hash: QLfMEkLnzmR9asmQ0kW7bwtEoo2GEXf4te2IsruVAL4=)
3: rZsOxkLzrWkNoLU39zK5NWcPBZ4.roa (hash: gmXylVZppIFvB02SB5eduGVSfGJU8u2Cj+PDV9pwk1s=)
4: rnWVqX9eqFovrfevk0O-IB3LWLk.roa (hash: ivGFQd6C7WoMv4mXwi+meW326o68B9VxwgqnEk1HlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:d4:5d:c8:b5:e8:2f:5d:e5:9b:ae:1a:53:0d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Validity
Not Before: Jul 26 23:00:46 2026 GMT
Not After : Jul 27 23:00:46 2026 GMT
Subject: CN=7bcde95cc25199bf4f84acdb4e92970bbc40a235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:48:6c:79:d6:03:d2:33:eb:5f:d5:24:fe:
29:1f:e7:53:f0:36:c5:2c:00:4b:ae:65:59:d5:f7:
2b:fe:48:69:23:36:a1:aa:62:68:6a:f1:f6:cb:0e:
9f:e8:0d:a4:43:9f:76:af:c1:a5:bc:b1:30:c1:ad:
b5:8c:84:74:82:83:fa:c3:93:df:9d:b9:0a:71:92:
7e:0d:66:75:00:83:5a:7c:65:88:64:6f:c0:76:eb:
8b:aa:3c:b1:f1:f2:1a:67:b1:d9:89:34:14:50:98:
1f:04:8e:b2:f8:51:cd:b1:d8:33:47:17:cf:d6:f5:
c0:24:20:0d:d6:90:5a:47:f0:ef:e9:5a:22:a7:b8:
c1:38:d2:51:f6:72:b2:7e:8a:26:ef:e3:ab:ac:92:
f7:38:65:1c:6c:b1:ee:78:64:83:55:d0:99:59:52:
f2:4c:7b:6a:cc:6d:92:e7:74:1b:c5:b9:de:26:d5:
21:d2:3b:50:55:bf:3b:62:21:eb:6c:69:2c:9b:88:
c9:cf:b0:3a:64:d3:b6:45:8e:56:c4:bc:33:48:06:
01:f4:c7:36:81:6b:9b:53:47:cf:2d:ac:60:4f:72:
4b:f5:50:f9:43:71:81:98:bd:1c:22:f6:1a:18:be:
0d:fe:51:c4:df:0b:65:3b:9b:01:e3:25:32:b6:d3:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CD:E9:5C:C2:51:99:BF:4F:84:AC:DB:4E:92:97:0B:BC:40:A2:35
X509v3 Authority Key Identifier:
keyid:3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bd:a1:e2:67:ec:5c:f1:6c:f0:7c:fc:dc:bd:b3:a3:89:85:
b6:c6:fc:d2:ca:4c:16:4a:b4:ab:15:5c:ff:05:1e:da:36:dd:
12:87:89:07:6b:2b:c1:72:4d:7b:b7:6e:78:48:3f:6d:76:0c:
7c:f8:e2:73:2a:2c:4a:58:9a:92:ce:f6:1d:bf:35:34:0c:eb:
dc:5c:85:c9:77:4a:48:9c:15:8d:e7:be:2f:b2:25:f8:2d:82:
81:63:bf:5e:d0:d5:3a:12:fd:f2:7d:71:ba:eb:6c:1c:31:53:
cd:77:cf:76:28:9e:96:06:e6:d9:07:68:4f:dd:80:92:f7:81:
d4:60:9a:b1:d8:f8:50:57:78:ac:e2:dc:53:7a:e9:92:5c:57:
5d:12:0f:e1:35:36:f0:2b:e5:83:ce:1c:fa:28:bb:5e:52:53:
93:4b:33:17:c8:87:6d:17:62:a6:6c:f8:01:04:4e:47:fe:5b:
ac:b2:42:b7:b1:d1:39:27:7a:5d:5f:52:35:5a:45:fc:01:2c:
8c:c9:1a:fe:5a:5c:cd:9c:e2:a3:4d:52:c2:02:68:b7:51:08:
c1:00:28:92:6b:24:c1:28:3c:c3:f3:03:45:4e:a8:1c:15:db:
05:c6:01:84:4c:ea:0e:9f:55:9c:c4:ea:5f:6d:47:db:3a:c8:
3b:0f:64:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gqNRdyLXoL13lm64aUw3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiODU4NmUyN2U0NTM2OGQzOTEwMWZlMmZjZjUzNGFlZDFj
NDZhNTAwHhcNMjYwNzI2MjMwMDQ2WhcNMjYwNzI3MjMwMDQ2WjAzMTEwLwYDVQQD
Eyg3YmNkZTk1Y2MyNTE5OWJmNGY4NGFjZGI0ZTkyOTcwYmJjNDBhMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHdIbHnWA9Iz61/VJP4pH+dT8DbF
LABLrmVZ1fcr/khpIzahqmJoavH2yw6f6A2kQ592r8GlvLEwwa21jIR0goP6w5Pf
nbkKcZJ+DWZ1AINafGWIZG/AduuLqjyx8fIaZ7HZiTQUUJgfBI6y+FHNsdgzRxfP
1vXAJCAN1pBaR/Dv6Voip7jBONJR9nKyfoom7+OrrJL3OGUcbLHueGSDVdCZWVLy
THtqzG2S53QbxbneJtUh0jtQVb87YiHrbGksm4jJz7A6ZNO2RY5WxLwzSAYB9Mc2
gWubU0fPLaxgT3JL9VD5Q3GBmL0cIvYaGL4N/lHE3wtlO5sB4yUyttNGSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvN6VzCUZm/T4Ss206Slwu8QKI1MB8GA1UdIwQY
MBaAFDuFhuJ+RTaNORAf4vz1NK7RxGpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzRXRzRuNUZObzA1RUJfaV9QVTBydEhFYWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iNTUzZmYtZjRlNi00NWM2LWI2NDIt
MjhiNTAzNzkxOWQ4LzEvTzRXRzRuNUZObzA1RUJfaV9QVTBydEhFYWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iNTUzZmYtZjRlNi00NWM2LWI2NDItMjhiNTAzNzkxOWQ4
LzEvTzRXRzRuNUZObzA1RUJfaV9QVTBydEhFYWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAar2h4mfs
XPFs8Hz83L2zo4mFtsb80spMFkq0qxVc/wUe2jbdEoeJB2srwXJNe7dueEg/bXYM
fPjicyosSliaks72Hb81NAzr3FyFyXdKSJwVjee+L7Il+C2CgWO/XtDVOhL98n1x
uutsHDFTzXfPdiielgbm2QdoT92AkveB1GCasdj4UFd4rOLcU3rpklxXXRIP4TU2
8Cvlg84c+ii7XlJTk0szF8iHbRdipmz4AQROR/5brLJCt7HROSd6XV9SNVpF/AEs
jMka/lpczZzio01SwgJot1EIwQAokmskwSg8w/MDRU6oHBXbBcYBhEzqDp9VnMTq
X21H2zrIOw9kiQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:49 2026 by rpki-client