Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
File: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json)
Hash identifier: H0SKW0Utn5vxcF51w2jamEJe2ElgoNoYVHUCbVJbmlM=
Subject key identifier: D6:1B:57:8C:3D:77:58:0C:01:FC:12:A7:DC:52:55:0D:67:2F:84:E9
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 019FA260ADEDADDA8515F50408CA0E07D372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
Manifest number: 187E
Signing time: Mon 27 Jul 2026 07:01:12 +0000
Manifest this update: Mon 27 Jul 2026 07:01:12 +0000
Manifest next update: Tue 28 Jul 2026 07:01:12 +0000
Files and hashes: 1: 1-5k5xjduxlogWOiXreI7TJnM024.roa (hash: IbwzFMhgk6SMkYxfNDiP7rzrsaMadpQ6ZIFm72M7F0g=)
2: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: b6i+JvWA0UTVtdpZQJpGCBKFAXC/H/kB5p98qrDgYu8=)
3: hoZB4uwEY_q6KMB_f7K8Wv-PN1E.roa (hash: oRaNPiY2nbAHYZp302rtEoBRBq8TpuSrhYRfxHIcF88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:ad:ed:ad:da:85:15:f5:04:08:ca:0e:07:d3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: Jul 27 07:01:12 2026 GMT
Not After : Jul 28 07:01:12 2026 GMT
Subject: CN=d61b578c3d77580c01fc12a7dc52550d672f84e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:43:08:b8:2b:4d:8e:2f:dd:8e:7c:5d:11:
c2:e3:55:7b:9a:41:1a:86:fe:ca:a9:55:c8:90:2f:
ff:13:29:35:28:dd:6c:a1:dd:b7:07:03:a3:09:b3:
e0:25:7f:c1:b5:9c:bf:16:88:d4:75:0b:af:0a:35:
68:46:a0:87:39:df:75:aa:09:ec:eb:de:16:64:15:
33:70:7b:b6:b5:a3:cf:13:e3:df:05:71:ad:0c:12:
95:7b:89:6e:ce:09:08:df:03:bc:b8:56:ce:11:e0:
ba:b4:02:1c:e3:f9:ac:e0:99:c1:04:56:49:0b:f9:
62:a2:f4:59:21:c5:f3:35:89:28:72:0c:d4:ba:89:
4a:9c:e2:2c:ad:6a:c3:80:a4:cd:61:56:54:57:ec:
16:7c:16:8a:69:b4:f6:28:d5:00:4f:0e:6e:6e:d4:
b8:aa:ba:0f:fe:30:c2:1d:d4:c6:2d:50:8f:dd:25:
6e:da:21:e3:97:8b:56:0a:b3:cd:4c:56:0f:74:76:
08:8a:67:cf:b0:54:b1:e4:d6:d9:cb:ed:27:17:e4:
14:f3:f0:93:07:b3:14:12:f0:7c:47:ef:ff:a4:2c:
1b:d7:80:a7:b5:fa:4f:7c:29:a5:89:89:ad:4b:61:
46:13:0d:88:2f:38:89:95:67:17:d0:66:7c:56:30:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1B:57:8C:3D:77:58:0C:01:FC:12:A7:DC:52:55:0D:67:2F:84:E9
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e7:5a:1a:19:a7:ab:6b:64:7f:82:1f:23:ce:7a:ea:3a:98:
78:dd:ed:48:8f:6e:77:37:53:24:1d:8e:91:ed:93:ab:a1:a2:
33:c8:8f:43:b3:e1:40:9f:c6:75:e5:82:dc:96:ca:0a:ea:ab:
b1:5c:e1:81:27:4a:97:ce:77:40:75:1d:63:ce:b4:2f:ae:b5:
dd:12:82:4f:7a:bf:bc:e6:0f:1d:3f:06:ef:21:90:5a:6e:ae:
08:f9:f2:f1:09:51:47:c8:74:66:ed:ea:19:83:39:c6:dd:b1:
0c:56:ff:9b:f8:9a:e9:1b:cf:f3:66:c9:68:ed:fe:b4:5f:dc:
54:3a:ed:ac:70:ce:4c:f1:97:3f:1e:74:3e:02:d5:d9:03:22:
40:e0:0a:fa:0f:57:2d:9a:b7:a5:42:b2:79:8d:37:f9:8d:dc:
0b:d9:8b:97:cb:e3:d4:3a:16:01:cd:33:99:bb:1a:f7:46:c0:
83:62:f5:b9:89:10:f1:d6:e0:72:48:c4:c9:dc:69:b0:75:f7:
f3:ce:c8:bc:03:54:e1:22:b6:fe:1b:03:0c:fe:61:f0:e8:61:
b4:6b:69:2f:d2:71:bd:a7:bc:02:7d:68:e5:4d:28:d7:19:44:
4d:73:0a:1a:bc:b0:65:82:08:2e:fe:29:1c:1c:5d:4a:e6:85:
4c:11:fa:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYK3trdqFFfUECMoOB9NyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhM2M2M2NiZDkzNDgyNWU1NWJiZTM1OWNiNzMwNjg2OWVk
NDUxY2QwHhcNMjYwNzI3MDcwMTEyWhcNMjYwNzI4MDcwMTEyWjAzMTEwLwYDVQQD
EyhkNjFiNTc4YzNkNzc1ODBjMDFmYzEyYTdkYzUyNTUwZDY3MmY4NGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmstDCLgrTY4v3Y58XRHC41V7mkEa
hv7KqVXIkC//Eyk1KN1sod23BwOjCbPgJX/BtZy/FojUdQuvCjVoRqCHOd91qgns
694WZBUzcHu2taPPE+PfBXGtDBKVe4luzgkI3wO8uFbOEeC6tAIc4/ms4JnBBFZJ
C/liovRZIcXzNYkocgzUuolKnOIsrWrDgKTNYVZUV+wWfBaKabT2KNUATw5ubtS4
qroP/jDCHdTGLVCP3SVu2iHjl4tWCrPNTFYPdHYIimfPsFSx5NbZy+0nF+QU8/CT
B7MUEvB8R+//pCwb14CntfpPfCmliYmtS2FGEw2ILziJlWcX0GZ8VjCK2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYbV4w9d1gMAfwSp9xSVQ1nL4TpMB8GA1UdIwQY
MBaAFDo8Y8vZNIJeVbvjWctzBoae1FHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2p4ank5azBnbDVWdS1OWnkzTUdocDdVVWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zNzcwZjgtNjJmZS00MGE1LTk0YjUt
NTQ4ZTdlNGIxMDJiLzEvT2p4ank5azBnbDVWdS1OWnkzTUdocDdVVWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zNzcwZjgtNjJmZS00MGE1LTk0YjUtNTQ4ZTdlNGIxMDJi
LzEvT2p4ank5azBnbDVWdS1OWnkzTUdocDdVVWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACudaGhmn
q2tkf4IfI8566jqYeN3tSI9udzdTJB2Oke2Tq6GiM8iPQ7PhQJ/GdeWC3JbKCuqr
sVzhgSdKl853QHUdY860L6613RKCT3q/vOYPHT8G7yGQWm6uCPny8QlRR8h0Zu3q
GYM5xt2xDFb/m/ia6RvP82bJaO3+tF/cVDrtrHDOTPGXPx50PgLV2QMiQOAK+g9X
LZq3pUKyeY03+Y3cC9mLl8vj1DoWAc0zmbsa90bAg2L1uYkQ8dbgckjEydxpsHX3
887IvANU4SK2/hsDDP5h8OhhtGtpL9Jxvae8An1o5U0o1xlETXMKGrywZYIILv4p
HBxdSuaFTBH6zA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:19:49 2026 by rpki-client