Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: VXbMJHQNogxmRl6xU+/mhS0tJk+7kV4CevmRrQPXSfA=
Subject key identifier: 8D:11:D8:88:FC:CA:C5:46:98:EE:4F:B2:D1:CD:F6:2F:65:A5:F1:7B
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019FA03AAB471281BF8C6A216AAFAE2D1754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 19E0
Signing time: Sun 26 Jul 2026 21:00:26 +0000
Manifest this update: Sun 26 Jul 2026 21:00:26 +0000
Manifest next update: Mon 27 Jul 2026 21:00:26 +0000
Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=)
2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=)
3: IL0F6yFMaBjVjUPbOk1OfPuS4kI.roa (hash: KS3UNapFjrnwtbqG25bWZith7R8byYpg03cu4j54MCU=)
4: LVPO8JZfNdJa2U5Ik8I34YcEOUA.roa (hash: p6JxXEEX7qFpTZe35bHvc23RUvTVNt4iONQ/5P6VF/A=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: TdkYVdeNjxc0METIY8HMKYhL7PfDuMUncamBzkw1Ld4=)
6: tXrrUP_TFy0LZMX_c9DSBUiK_1g.roa (hash: IqdNMmp5ttOJAyhkpsC/dBhKLWgRCKvww/+kSgvGp08=)
7: umIRuHpxX9ebriBCvcmax-6rghI.roa (hash: C/8G0mcCjZSfHcX9z+n/wr8OBXx9A0aj/vE5hg6xmP4=)
8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:ab:47:12:81:bf:8c:6a:21:6a:af:ae:2d:17:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jul 26 21:00:26 2026 GMT
Not After : Jul 27 21:00:26 2026 GMT
Subject: CN=8d11d888fccac54698ee4fb2d1cdf62f65a5f17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:3f:3b:2b:8f:24:44:85:7c:01:f4:4a:1c:
a4:75:1c:c1:f9:51:99:66:a3:83:41:3a:a8:8f:42:
44:c8:60:b7:c2:b5:08:7d:02:f9:9e:b0:24:e9:cd:
7d:f2:0b:8e:1e:55:5e:4a:b3:08:c7:f2:16:81:b9:
e1:de:75:18:0e:2b:df:89:a3:f6:f2:44:3f:e4:1f:
c3:a0:1e:38:21:f6:ca:be:89:a8:85:bb:74:35:d4:
92:1f:86:9e:b1:15:f6:3c:05:0c:c8:c8:0f:a5:85:
29:cd:0d:20:da:0e:3a:e9:9e:e7:c4:f8:1e:a8:96:
b2:a8:eb:fa:00:11:c8:81:6e:93:d8:50:10:fa:09:
70:4c:62:49:50:72:c3:81:5c:50:21:cf:5d:6e:e2:
d2:a7:4c:5d:85:45:7a:31:8f:c5:cd:0f:c3:7e:fb:
10:60:45:ee:e0:d2:87:33:00:05:b8:e4:34:ea:80:
b7:fb:86:a9:3f:16:aa:39:30:0b:7d:3e:0c:bc:29:
f4:75:3f:72:67:97:74:ec:b4:93:6f:87:68:96:58:
1b:f8:2c:a8:06:a4:fd:3c:32:60:c0:df:e8:39:0c:
25:57:bd:3a:d6:37:82:5a:36:eb:74:e2:f4:8a:32:
bf:e3:13:be:c4:47:96:17:0e:da:49:a4:a7:fd:9c:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:D8:88:FC:CA:C5:46:98:EE:4F:B2:D1:CD:F6:2F:65:A5:F1:7B
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:af:60:2c:19:91:a8:b8:22:54:1a:1b:99:88:cc:14:4c:3e:
97:b5:a5:da:17:09:ec:39:94:19:43:43:3f:7d:a7:2f:ff:18:
85:93:4e:3b:36:b5:c9:05:bd:88:d1:31:dd:15:bc:53:27:d7:
1d:ad:1a:e9:87:80:b0:50:2c:0c:85:ea:b3:13:7f:c2:c3:22:
f8:fb:c3:41:ea:fb:38:3b:5b:87:36:3d:a7:3e:3e:91:ab:76:
bf:58:05:7d:16:0f:77:5c:0f:4c:d1:50:83:e0:10:31:50:86:
18:d0:60:20:a6:51:97:01:a5:96:fb:c1:39:15:f1:27:ae:dd:
74:20:bd:21:41:5c:fe:d7:b9:28:8e:e4:5f:39:3e:26:6e:50:
28:18:e2:01:d7:eb:c5:41:7d:4b:43:0b:0f:ba:88:34:eb:fe:
fc:ec:50:bc:e6:47:ba:aa:68:ac:09:59:2a:47:53:ce:bb:05:
f0:6b:94:7f:de:c3:57:02:04:c0:2c:04:df:99:5f:89:9b:33:
c5:ab:2e:25:c7:59:a2:2a:01:2b:fc:1f:4a:14:f3:d7:b8:a9:
bd:02:ab:21:60:57:42:15:4b:16:67:73:b5:dc:ff:56:f7:95:
23:be:6a:10:d1:ad:aa:76:46:63:a9:15:4d:4d:99:25:58:0f:
a5:34:69:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gOqtHEoG/jGohaq+uLRdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5
NjZkNDIwHhcNMjYwNzI2MjEwMDI2WhcNMjYwNzI3MjEwMDI2WjAzMTEwLwYDVQQD
Eyg4ZDExZDg4OGZjY2FjNTQ2OThlZTRmYjJkMWNkZjYyZjY1YTVmMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Eo/OyuPJESFfAH0ShykdRzB+VGZ
ZqODQTqoj0JEyGC3wrUIfQL5nrAk6c198guOHlVeSrMIx/IWgbnh3nUYDivfiaP2
8kQ/5B/DoB44IfbKvomohbt0NdSSH4aesRX2PAUMyMgPpYUpzQ0g2g466Z7nxPge
qJayqOv6ABHIgW6T2FAQ+glwTGJJUHLDgVxQIc9dbuLSp0xdhUV6MY/FzQ/DfvsQ
YEXu4NKHMwAFuOQ06oC3+4apPxaqOTALfT4MvCn0dT9yZ5d07LSTb4dollgb+Cyo
BqT9PDJgwN/oOQwlV7061jeCWjbrdOL0ijK/4xO+xEeWFw7aSaSn/ZyDswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0R2Ij8ysVGmO5PstHN9i9lpfF7MB8GA1UdIwQY
MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt
NDY2ZTljYWI3ODY0LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0
LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdq9gLBmR
qLgiVBobmYjMFEw+l7Wl2hcJ7DmUGUNDP32nL/8YhZNOOza1yQW9iNEx3RW8UyfX
Ha0a6YeAsFAsDIXqsxN/wsMi+PvDQer7ODtbhzY9pz4+kat2v1gFfRYPd1wPTNFQ
g+AQMVCGGNBgIKZRlwGllvvBORXxJ67ddCC9IUFc/te5KI7kXzk+Jm5QKBjiAdfr
xUF9S0MLD7qINOv+/OxQvOZHuqporAlZKkdTzrsF8GuUf97DVwIEwCwE35lfiZsz
xasuJcdZoioBK/wfShTz17ipvQKrIWBXQhVLFmdztdz/VveVI75qENGtqnZGY6kV
TU2ZJVgPpTRp7A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:08:26 2026 by rpki-client