Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: zYtdTuaC+pKZA1OdJcnXl5xi4n20omre/BGcJ/H5wuU=
Subject key identifier: 05:E4:61:E2:E7:83:EA:D4:86:5B:A3:3A:53:E6:DD:D6:B5:6E:B1:23
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019F94A4F935497FD5EF7B08F9BA6F26E723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 1947
Signing time: Fri 24 Jul 2026 15:01:07 +0000
Manifest this update: Fri 24 Jul 2026 15:01:07 +0000
Manifest next update: Sat 25 Jul 2026 15:01:07 +0000
Files and hashes: 1: 2MsPFamPffku1ttx9gaJe1ffa6Y.roa (hash: DHSbfM3R76vdNxci0L/Qjop0BLeabp3SpJ5q1Jd300M=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: zgZmi0JyYDdiuzkbtjeXoHnvUEWIJNvrlAvhlqfHV8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:f9:35:49:7f:d5:ef:7b:08:f9:ba:6f:26:e7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Jul 24 15:01:07 2026 GMT
Not After : Jul 25 15:01:07 2026 GMT
Subject: CN=05e461e2e783ead4865ba33a53e6ddd6b56eb123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fd:82:d7:6d:ea:56:45:9e:4d:57:eb:7f:d4:
89:51:68:b3:c2:8d:8d:be:0b:71:ce:99:58:d7:3a:
74:d0:89:2f:e9:fb:8a:03:1d:4a:a7:aa:a7:9a:28:
7f:49:0a:6b:b1:07:55:7f:f8:80:d9:04:c6:d4:3d:
0a:a9:af:d4:66:e8:cf:07:19:c1:40:e4:80:60:eb:
6a:dd:a2:cb:0f:8a:53:9a:1d:29:9c:13:b3:12:8e:
8f:2a:04:90:bb:b3:db:23:2d:fe:8b:64:f5:d9:47:
fc:19:3c:ff:a2:e2:33:2c:38:89:f4:8c:15:7c:f8:
f9:02:fd:9c:c2:ec:76:68:91:81:a4:0d:79:2c:86:
cc:64:9c:5e:73:04:45:f4:f0:b8:3c:78:f6:8b:e1:
e8:9a:6a:3a:54:1e:d7:7c:5e:33:d8:52:86:85:5b:
6e:dc:78:b6:08:0b:82:f0:a1:e8:49:19:b3:c8:88:
3a:12:3b:f6:d9:75:80:5d:c8:ae:54:7a:c7:24:76:
1d:38:b2:28:e0:b7:e3:1e:bb:f5:0d:8e:81:47:14:
7e:16:fa:a7:f9:b3:75:55:ed:bc:ae:6f:e5:49:c4:
41:fd:4f:2b:3e:29:e2:b9:4d:c7:d9:41:5a:9a:2b:
cb:dc:9d:de:c6:bc:85:e8:0e:54:7b:ce:62:54:89:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:61:E2:E7:83:EA:D4:86:5B:A3:3A:53:E6:DD:D6:B5:6E:B1:23
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:86:ea:f1:e5:96:d4:4b:74:20:04:33:1c:1c:f3:6b:80:e1:
68:9c:4f:3a:43:78:c3:a5:7d:aa:73:55:c6:ce:a9:1b:67:c0:
5e:f7:15:0b:23:f2:14:9d:d6:fe:ed:a5:eb:e2:52:b5:13:5d:
1d:34:89:0b:07:ac:c4:0a:74:a8:66:70:e3:59:d8:2e:df:6d:
67:5f:a7:7a:72:78:13:4e:57:19:eb:eb:26:06:00:3c:23:bd:
f0:00:cf:75:c6:bf:54:a9:21:f6:91:90:c4:fe:2f:c5:e5:17:
5d:8c:e9:79:d4:09:2e:fb:67:b2:60:d4:a5:f0:d5:2d:4e:78:
ae:0b:b2:52:2e:97:24:6c:77:c0:29:f3:68:cb:be:11:81:df:
c5:27:f8:a5:ab:57:47:e2:46:57:51:8b:84:9d:86:0f:aa:fe:
f6:ee:8b:d1:18:3d:52:78:05:95:fe:f3:e1:68:5c:53:5c:5a:
c1:7c:6e:2c:f3:2a:b4:52:56:ef:97:e6:38:e0:02:b6:e4:b8:
48:1d:de:17:73:c4:5b:e0:e8:77:9b:a2:64:38:8f:5b:1c:31:
72:3d:fc:63:b8:34:f9:0c:50:91:92:8d:61:48:00:44:a6:48:
7a:68:c0:5f:1a:c5:3e:72:6a:90:d9:0b:d4:1c:6b:75:48:d7:
17:bb:36:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpPk1SX/V73sI+bpvJucjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZWNlYWM4MTI1NTM0YTU3OTQ3OTYyZGIyODkwM2ZhZDdh
YzNhZjkwHhcNMjYwNzI0MTUwMTA3WhcNMjYwNzI1MTUwMTA3WjAzMTEwLwYDVQQD
EygwNWU0NjFlMmU3ODNlYWQ0ODY1YmEzM2E1M2U2ZGRkNmI1NmViMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP2C123qVkWeTVfrf9SJUWizwo2N
vgtxzplY1zp00Ikv6fuKAx1Kp6qnmih/SQprsQdVf/iA2QTG1D0Kqa/UZujPBxnB
QOSAYOtq3aLLD4pTmh0pnBOzEo6PKgSQu7PbIy3+i2T12Uf8GTz/ouIzLDiJ9IwV
fPj5Av2cwux2aJGBpA15LIbMZJxecwRF9PC4PHj2i+Hommo6VB7XfF4z2FKGhVtu
3Hi2CAuC8KHoSRmzyIg6Ejv22XWAXciuVHrHJHYdOLIo4LfjHrv1DY6BRxR+Fvqn
+bN1Ve28rm/lScRB/U8rPiniuU3H2UFamivL3J3exryF6A5Ue85iVIkhZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXkYeLng+rUhlujOlPm3da1brEjMB8GA1UdIwQY
MBaAFKPs6sgSVTSleUeWLbKJA/rXrDr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQt
YTliZDVlNDEwYWVkLzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQtYTliZDVlNDEwYWVk
LzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4bq8eWW
1Et0IAQzHBzza4DhaJxPOkN4w6V9qnNVxs6pG2fAXvcVCyPyFJ3W/u2l6+JStRNd
HTSJCwesxAp0qGZw41nYLt9tZ1+nenJ4E05XGevrJgYAPCO98ADPdca/VKkh9pGQ
xP4vxeUXXYzpedQJLvtnsmDUpfDVLU54rguyUi6XJGx3wCnzaMu+EYHfxSf4patX
R+JGV1GLhJ2GD6r+9u6L0Rg9UngFlf7z4WhcU1xawXxuLPMqtFJW75fmOOACtuS4
SB3eF3PEW+Dod5uiZDiPWxwxcj38Y7g0+QxQkZKNYUgARKZIemjAXxrFPnJqkNkL
1BxrdUjXF7s26Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:29:14 2026 by rpki-client