Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
File: OxJehmsjfJZ06em3qavRi1fXHxA.mft (raw, json)
Hash identifier: QvM2rPJhZZnH2dRJPYAjNfsE81SKkA+yNsmWOctSHFk=
Subject key identifier: 3C:7E:39:1A:47:16:51:0A:B5:7B:F9:7C:B3:05:00:85:1B:0B:87:79
Authority key identifier: 3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
Certificate issuer: /CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Certificate serial: 019F8F10FC0BDF2EFD6F5BDC64066C8D296B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 13:01:22 +0000
Manifest this update: Thu 23 Jul 2026 13:01:22 +0000
Manifest next update: Fri 24 Jul 2026 13:01:22 +0000
Files and hashes: 1: OxJehmsjfJZ06em3qavRi1fXHxA.crl (hash: CJR6ONNiW/soaQNL8aXIvy1hVL7Gp4DH+CWnqIo9yd0=)
2: Xhri0AVup-iOcfJupA4s7w3cpYc.asa (hash: 4eaUl5vtgL4q0oqF8vNtbDWxyFZPR38UGBwc1PJc8Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:fc:0b:df:2e:fd:6f:5b:dc:64:06:6c:8d:29:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Validity
Not Before: Jul 23 13:01:22 2026 GMT
Not After : Jul 24 13:01:22 2026 GMT
Subject: CN=3c7e391a4716510ab57bf97cb30500851b0b8779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:d3:27:29:38:c0:d9:76:ca:af:5c:ce:b9:
62:02:ff:95:bd:05:1e:30:53:54:5e:60:3d:af:37:
11:cd:d3:05:4f:4f:e9:a3:d4:79:da:0a:00:10:aa:
98:af:cf:ce:6e:47:cb:18:9b:33:8d:74:10:33:3d:
ac:8e:d3:c8:66:8b:96:dd:c2:6e:ae:cf:d0:36:ca:
a0:e6:7e:05:17:cb:b3:3d:d7:b1:c5:fe:39:c4:b5:
3d:a7:09:e9:b7:db:e9:01:19:f1:e5:d4:f8:1c:d9:
8d:cf:8a:19:e3:4a:a4:5c:51:8f:bf:b2:19:31:06:
5c:52:55:e0:81:af:5a:d7:4c:eb:a8:ab:40:26:95:
64:52:7f:dd:dc:07:35:57:13:29:e2:9a:d4:11:06:
82:17:45:2f:fa:87:32:4a:54:0c:1e:f3:f7:7a:82:
13:cc:37:12:c0:5a:25:58:69:69:0d:90:e0:bd:31:
b9:07:e3:4b:80:21:b4:a0:cc:01:e7:9c:7e:fd:50:
a1:f7:d0:2c:53:37:ca:05:84:1b:52:51:4b:c4:7a:
5f:47:81:32:3b:da:5d:a9:98:80:b9:4b:ef:df:71:
ea:da:3f:2a:69:eb:c1:d1:c1:ac:d8:b6:b3:c9:90:
25:21:fb:31:08:a9:08:3a:b7:f9:d5:56:f8:b8:05:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7E:39:1A:47:16:51:0A:B5:7B:F9:7C:B3:05:00:85:1B:0B:87:79
X509v3 Authority Key Identifier:
keyid:3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:69:b0:ec:aa:a2:d8:bd:30:58:74:3d:79:7e:0b:14:74:10:
12:4d:46:93:9c:65:56:31:64:37:2a:ca:89:23:db:29:cf:71:
b6:c3:b8:c7:bf:1f:ac:a2:03:9a:8c:0c:58:2a:16:99:bb:46:
9e:44:1c:d4:24:70:4d:48:96:db:f1:f0:a2:6f:cc:8a:d4:41:
f6:14:a6:12:df:e5:2a:e8:5b:06:23:46:ad:75:59:18:28:18:
7c:da:d7:6f:27:5b:8b:11:94:c6:83:c5:96:3c:51:8d:c7:72:
b9:1c:1b:cc:a4:b1:01:e2:c0:94:ba:42:55:1c:a2:24:21:d4:
54:2d:0a:5c:0b:8c:8b:74:82:55:82:74:e6:33:4a:15:ef:25:
a0:8c:7b:c3:fe:6d:e1:ae:d9:1d:20:a5:16:cc:c6:0b:be:09:
e1:e0:e7:a4:71:e0:ea:ce:cd:b0:70:8c:96:01:f2:6c:89:c0:
bf:11:2c:81:4e:86:55:6a:f1:06:ad:1c:59:e2:ea:27:68:e0:
5f:25:9c:81:a5:80:17:5b:1d:6e:80:78:61:bd:3f:1e:b0:f2:
94:22:ef:a4:8c:b0:f7:d0:eb:fb:2a:6b:9e:6a:f7:60:b8:a8:
a8:3b:3b:62:06:79:5e:b9:e1:e5:f8:dc:48:ae:f5:29:e9:ef:
e6:fa:48:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEPwL3y79b1vcZAZsjSlrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMTI1ZTg2NmIyMzdjOTY3NGU5ZTliN2E5YWJkMThiNTdk
NzFmMTAwHhcNMjYwNzIzMTMwMTIyWhcNMjYwNzI0MTMwMTIyWjAzMTEwLwYDVQQD
EygzYzdlMzkxYTQ3MTY1MTBhYjU3YmY5N2NiMzA1MDA4NTFiMGI4Nzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVXTJyk4wNl2yq9czrliAv+VvQUe
MFNUXmA9rzcRzdMFT0/po9R52goAEKqYr8/ObkfLGJszjXQQMz2sjtPIZouW3cJu
rs/QNsqg5n4FF8uzPdexxf45xLU9pwnpt9vpARnx5dT4HNmNz4oZ40qkXFGPv7IZ
MQZcUlXgga9a10zrqKtAJpVkUn/d3Ac1VxMp4prUEQaCF0Uv+ocySlQMHvP3eoIT
zDcSwFolWGlpDZDgvTG5B+NLgCG0oMwB55x+/VCh99AsUzfKBYQbUlFLxHpfR4Ey
O9pdqZiAuUvv33Hq2j8qaevB0cGs2LazyZAlIfsxCKkIOrf51Vb4uAW3qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDx+ORpHFlEKtXv5fLMFAIUbC4d5MB8GA1UdIwQY
MBaAFDsSXoZrI3yWdOnpt6mr0YtX1x8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3hKZWhtc2pmSlowNmVtM3FhdlJpMWZYSHhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80ZmYzZWYtOTcwZC00MWYxLTg0YWIt
NTRiZWU2YWE1N2ViLzEvT3hKZWhtc2pmSlowNmVtM3FhdlJpMWZYSHhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80ZmYzZWYtOTcwZC00MWYxLTg0YWItNTRiZWU2YWE1N2Vi
LzEvT3hKZWhtc2pmSlowNmVtM3FhdlJpMWZYSHhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWmw7Kqi
2L0wWHQ9eX4LFHQQEk1Gk5xlVjFkNyrKiSPbKc9xtsO4x78frKIDmowMWCoWmbtG
nkQc1CRwTUiW2/Hwom/MitRB9hSmEt/lKuhbBiNGrXVZGCgYfNrXbydbixGUxoPF
ljxRjcdyuRwbzKSxAeLAlLpCVRyiJCHUVC0KXAuMi3SCVYJ05jNKFe8loIx7w/5t
4a7ZHSClFszGC74J4eDnpHHg6s7NsHCMlgHybInAvxEsgU6GVWrxBq0cWeLqJ2jg
XyWcgaWAF1sdboB4Yb0/HrDylCLvpIyw99Dr+yprnmr3YLioqDs7YgZ5Xrnh5fjc
SK71Kenv5vpIXg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:54 2026 by rpki-client