Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json)
Hash identifier: XuA2aiB7n36fCDxTfDao5Qt5Oj5x6DJijkTltX6f2ho=
Subject key identifier: 00:A7:7A:7A:17:E3:26:D6:E9:88:16:28:34:B6:3A:D2:7E:6A:A7:E3
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 019F927F002652625D8D204BA9F40BD2F38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
Manifest number: 14D0
Signing time: Fri 24 Jul 2026 05:00:24 +0000
Manifest this update: Fri 24 Jul 2026 05:00:24 +0000
Manifest next update: Sat 25 Jul 2026 05:00:24 +0000
Files and hashes: 1: 6GbxDT6a6WV6sMU4TLzGDdlwYGg.asa (hash: IznoMM07vrX9zSwsytLqGEh6ipn7AIyTyq5l5KBrdbs=)
2: VN57OoPBsGwrpB2MMJuifcY0BKk.roa (hash: DcZvkcVJE9Z9uRMzY1z6mkbvBqMp9YTBuJgd294hlxc=)
3: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: tlpwHmr19zUOFVG83coTHj0UsVH8YDBe7wO8hIgK66o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:00:26:52:62:5d:8d:20:4b:a9:f4:0b:d2:f3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Jul 24 05:00:24 2026 GMT
Not After : Jul 25 05:00:24 2026 GMT
Subject: CN=00a77a7a17e326d6e988162834b63ad27e6aa7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fd:61:63:63:fe:17:f3:83:c4:18:ab:6a:3f:
99:1e:29:eb:1f:76:4a:3f:39:de:26:e1:b6:2d:a4:
d5:57:56:b5:0e:81:16:f1:32:84:9f:1f:54:1d:86:
a0:47:81:22:6d:5d:e9:5f:c9:b9:55:76:56:66:44:
a8:b4:fe:48:23:c8:41:a5:24:37:20:76:8c:cd:d1:
b6:06:69:a1:20:e1:2c:b5:3c:12:79:76:7e:88:cf:
1a:73:ef:31:73:ad:2e:6e:fc:40:ec:46:65:27:83:
32:c4:35:97:d7:06:cb:3b:61:e1:5b:2b:14:f4:a8:
88:d4:6a:0d:e8:44:75:1a:f0:02:32:2d:5f:b4:81:
5f:46:9f:e7:62:1e:c3:9a:5e:3c:af:b1:60:d8:44:
c2:ad:e5:a2:14:ad:4e:c1:1e:87:20:db:b4:9c:c6:
b8:39:a4:ac:d0:7e:de:94:45:78:f1:3b:2a:d7:58:
80:90:a9:c1:dc:d9:99:32:e3:3b:6f:ba:96:b8:db:
75:d7:44:97:e6:dd:a2:09:ea:70:c6:33:d4:9e:4b:
b9:d9:f0:75:da:9a:56:6a:46:34:df:28:6c:41:94:
5e:1d:79:30:40:59:98:9d:e2:b8:cb:5d:54:f7:5d:
17:88:71:ff:cb:91:31:3b:c9:17:48:cd:1a:b2:26:
0e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A7:7A:7A:17:E3:26:D6:E9:88:16:28:34:B6:3A:D2:7E:6A:A7:E3
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:59:64:91:21:80:c8:2d:92:1e:08:51:79:0a:35:2a:b8:e1:
57:8f:6b:44:a6:4f:c3:a7:74:62:8d:62:14:03:83:15:60:0d:
38:22:9c:ad:be:45:b0:8d:55:d6:95:a7:90:3b:75:48:dc:23:
8f:e8:b8:24:08:44:4d:49:ba:60:b0:2c:e0:c9:d4:49:da:91:
67:5e:13:be:45:35:17:23:92:e0:4d:d7:3f:51:43:bb:2c:24:
5c:09:b9:6c:04:47:97:b5:b1:ee:75:7f:f5:27:c4:57:52:c2:
4a:d7:12:30:45:0a:9e:7f:6c:c8:13:77:d6:b7:24:86:da:d2:
8b:6e:25:a4:2d:19:ab:3a:77:0a:e5:4a:ff:55:9a:f3:e4:38:
1a:db:b8:c5:b0:e7:72:b0:f3:fc:8b:fa:71:ea:0f:02:44:53:
d5:72:a7:0a:75:37:79:0c:9e:ca:71:f4:a5:8a:df:15:38:bb:
9d:74:49:8e:3b:7e:98:cf:b1:7e:5c:46:84:f0:36:d7:d8:84:
71:a8:37:ff:67:44:f2:3c:dd:47:26:45:be:b3:60:7a:55:c5:
eb:96:c8:8d:39:f0:f0:23:34:5b:4d:35:45:01:53:1f:72:26:
0c:a3:f5:36:b5:a2:7a:19:a2:a9:f5:2b:2b:96:49:08:4c:53:
96:ec:06:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfwAmUmJdjSBLqfQL0vONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMGNiNGI4ZDU2OTQ3NzUxMmNlNTc4ODViYTZhMjg5OGZi
YzJkOTUwHhcNMjYwNzI0MDUwMDI0WhcNMjYwNzI1MDUwMDI0WjAzMTEwLwYDVQQD
EygwMGE3N2E3YTE3ZTMyNmQ2ZTk4ODE2MjgzNGI2M2FkMjdlNmFhN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v1hY2P+F/ODxBiraj+ZHinrH3ZK
PzneJuG2LaTVV1a1DoEW8TKEnx9UHYagR4EibV3pX8m5VXZWZkSotP5II8hBpSQ3
IHaMzdG2BmmhIOEstTwSeXZ+iM8ac+8xc60ubvxA7EZlJ4MyxDWX1wbLO2HhWysU
9KiI1GoN6ER1GvACMi1ftIFfRp/nYh7Dml48r7Fg2ETCreWiFK1OwR6HINu0nMa4
OaSs0H7elEV48Tsq11iAkKnB3NmZMuM7b7qWuNt110SX5t2iCepwxjPUnku52fB1
2ppWakY03yhsQZReHXkwQFmYneK4y11U910XiHH/y5ExO8kXSM0asiYOawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACnenoX4ybW6YgWKDS2OtJ+aqfjMB8GA1UdIwQY
MBaAFKAMtLjVaUd1Es5XiFumoomPvC2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUt
MThjNzBlYmY2ODFhLzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUtMThjNzBlYmY2ODFh
LzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFlkkSGA
yC2SHghReQo1KrjhV49rRKZPw6d0Yo1iFAODFWANOCKcrb5FsI1V1pWnkDt1SNwj
j+i4JAhETUm6YLAs4MnUSdqRZ14TvkU1FyOS4E3XP1FDuywkXAm5bARHl7Wx7nV/
9SfEV1LCStcSMEUKnn9syBN31rckhtrSi24lpC0Zqzp3CuVK/1Wa8+Q4Gtu4xbDn
crDz/Iv6ceoPAkRT1XKnCnU3eQyeynH0pYrfFTi7nXRJjjt+mM+xflxGhPA219iE
cag3/2dE8jzdRyZFvrNgelXF65bIjTnw8CM0W001RQFTH3ImDKP1NrWiehmiqfUr
K5ZJCExTluwGaw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:29:24 2026 by rpki-client