Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier: kzDH0RcE0ezeqy8lXF77xrF+6rSrlnJAunrTylB4YVU=
Subject key identifier: D8:5F:D2:44:4D:4F:CE:EB:C4:CB:51:97:68:98:FC:FD:A5:67:6A:A0
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial: 019FA2975F67EF50B0AD1BBEDF23D00BED9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 08:00:57 +0000
Manifest this update: Mon 27 Jul 2026 08:00:57 +0000
Manifest next update: Tue 28 Jul 2026 08:00:57 +0000
Files and hashes: 1: EMaCwLjxvEjldttSlMrOnwekZ_Y.roa (hash: aBqqe+U1PaVNW6VJZrxz+RRQt4gTnenHJ/Ty1nZ3HHo=)
2: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: 73f2uFt7dso1jZrMHyyfGljW+N1WaDYsnWwcxLsTWZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:5f:67:ef:50:b0:ad:1b:be:df:23:d0:0b:ed:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Validity
Not Before: Jul 27 08:00:57 2026 GMT
Not After : Jul 28 08:00:57 2026 GMT
Subject: CN=d85fd2444d4fceebc4cb51976898fcfda5676aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:60:28:6f:90:c0:8e:4c:46:92:b8:d4:cb:
d7:69:f2:70:3a:13:c8:b1:fd:2c:89:ad:c5:c0:80:
f0:a8:60:76:80:76:ee:31:ab:8a:10:b0:23:93:f3:
ae:82:5e:c1:4a:e7:39:e6:c0:7d:e8:be:69:b9:d5:
cd:fc:1c:22:bf:b7:89:e9:70:c8:68:c0:9e:97:8b:
6d:5e:43:45:47:86:ea:6f:50:75:17:db:9a:2f:12:
d0:85:9a:26:1a:d4:20:1a:49:81:30:76:82:80:31:
7d:0f:0b:80:2a:27:c0:93:af:e8:c5:1a:15:66:d0:
a8:4b:da:f9:f4:94:17:44:9a:4d:60:75:65:a6:58:
ac:78:ae:d9:ae:b9:59:25:9d:11:bd:36:b2:be:a6:
1f:fe:2f:c9:af:0d:7b:6e:83:0f:15:e2:cb:e3:65:
21:5d:12:13:40:15:0a:25:ce:71:93:85:b6:90:39:
b9:8e:82:64:45:3d:5c:91:60:13:ad:83:c0:ef:67:
41:da:18:8c:33:56:b4:32:0d:8c:e9:38:48:77:06:
8f:eb:14:9f:ff:b4:cb:7b:85:82:ac:41:96:ec:e4:
d5:22:de:c4:61:27:b9:8b:b9:03:3b:4d:41:c1:73:
e4:c6:1f:15:f9:de:24:9b:8b:5d:a4:ab:52:83:b9:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5F:D2:44:4D:4F:CE:EB:C4:CB:51:97:68:98:FC:FD:A5:67:6A:A0
X509v3 Authority Key Identifier:
keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:59:17:3b:99:8c:5b:d4:28:24:06:55:b2:52:1c:e2:17:49:
b4:d6:00:83:7d:15:07:05:13:a9:8d:68:7b:e8:d6:9e:48:80:
5f:78:da:45:9b:f7:e9:6f:66:6e:eb:5e:c3:01:fe:22:83:5e:
cc:54:81:f5:7f:18:b9:67:36:ca:9d:2b:1c:24:a8:fc:4e:ef:
f5:85:6c:b1:4a:c2:6a:8e:80:e9:0d:75:c4:b6:61:0c:fc:11:
6a:94:e1:8f:9a:e1:99:d3:46:1e:97:e0:71:68:5d:5f:e8:c8:
59:4a:7b:a9:b0:5d:91:02:01:34:63:e2:a1:68:4d:7f:75:66:
14:e2:68:f9:d4:14:56:3c:43:6c:50:2c:41:31:65:76:8c:ba:
00:aa:8d:25:08:f0:76:9c:41:42:18:de:10:6c:60:92:cd:e4:
26:45:f5:f7:2e:d7:0b:ea:91:a3:2c:28:87:f7:a6:78:79:bf:
2f:9c:c4:a7:59:36:82:fc:95:7d:8f:c8:b0:07:9f:21:ac:90:
f4:82:dd:7a:05:ed:61:cc:e0:88:90:b4:56:60:84:77:e2:43:
50:bb:95:e0:6a:42:ec:a1:8c:f8:f7:c7:c5:07:30:d1:69:1b:
f3:c2:dd:ee:f1:aa:23:85:e8:7b:49:f8:62:6f:bc:8b:44:69:
a3:e1:de:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+il19n71CwrRu+3yPQC+2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmM2NDMxZjUzMzNiNmRkZDMxZTgzYjY5NjgyZDhlOGVl
MDZmYzEwHhcNMjYwNzI3MDgwMDU3WhcNMjYwNzI4MDgwMDU3WjAzMTEwLwYDVQQD
EyhkODVmZDI0NDRkNGZjZWViYzRjYjUxOTc2ODk4ZmNmZGE1Njc2YWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqRgKG+QwI5MRpK41MvXafJwOhPI
sf0sia3FwIDwqGB2gHbuMauKELAjk/Ougl7BSuc55sB96L5pudXN/Bwiv7eJ6XDI
aMCel4ttXkNFR4bqb1B1F9uaLxLQhZomGtQgGkmBMHaCgDF9DwuAKifAk6/oxRoV
ZtCoS9r59JQXRJpNYHVlpliseK7ZrrlZJZ0RvTayvqYf/i/Jrw17boMPFeLL42Uh
XRITQBUKJc5xk4W2kDm5joJkRT1ckWATrYPA72dB2hiMM1a0Mg2M6ThIdwaP6xSf
/7TLe4WCrEGW7OTVIt7EYSe5i7kDO01BwXPkxh8V+d4km4tdpKtSg7lUZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhf0kRNT87rxMtRl2iY/P2lZ2qgMB8GA1UdIwQY
MBaAFDv8ZDH1Mztt3THoO2loLY6O4G/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGIt
ZmUwMWVlYzQwZWMxLzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGItZmUwMWVlYzQwZWMx
LzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFkXO5mM
W9QoJAZVslIc4hdJtNYAg30VBwUTqY1oe+jWnkiAX3jaRZv36W9mbutewwH+IoNe
zFSB9X8YuWc2yp0rHCSo/E7v9YVssUrCao6A6Q11xLZhDPwRapThj5rhmdNGHpfg
cWhdX+jIWUp7qbBdkQIBNGPioWhNf3VmFOJo+dQUVjxDbFAsQTFldoy6AKqNJQjw
dpxBQhjeEGxgks3kJkX19y7XC+qRoywoh/emeHm/L5zEp1k2gvyVfY/IsAefIayQ
9ILdegXtYczgiJC0VmCEd+JDULuV4GpC7KGM+PfHxQcw0Wkb88Ld7vGqI4Xoe0n4
Ym+8i0Rpo+HemQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 12:44:59 2026 by rpki-client