Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: aroKss8iaWgnw6Fy24ZhLTnfX1XnWFkoh18g8AuAjH8=
Subject key identifier: EF:C8:24:A1:43:37:9F:11:3E:F4:BE:33:D3:07:B0:F6:1F:EA:42:4A
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019F927EFCDD5656FA838E11D6331238F4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 05:00:23 +0000
Manifest this update: Fri 24 Jul 2026 05:00:23 +0000
Manifest next update: Sat 25 Jul 2026 05:00:23 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: ZKUgo0/KIpJNYehYBtzn0AXVLSdhkizE3xA+PUJlVzw=)
2: sKwkfCXbsIoN8Tz06VbLnX982Mw.asa (hash: 71Gnrq1SXo9YWAgxUMMoZvsmt9ojmvRIGQ+aSBy2/Tk=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:fc:dd:56:56:fa:83:8e:11:d6:33:12:38:f4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Jul 24 05:00:23 2026 GMT
Not After : Jul 25 05:00:23 2026 GMT
Subject: CN=efc824a143379f113ef4be33d307b0f61fea424a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:3e:8b:a2:f0:75:57:57:28:98:d3:fc:17:
67:e3:57:cb:c5:fb:e0:19:05:29:91:2f:c2:70:6e:
e1:57:6c:38:58:99:aa:74:87:dc:d8:f2:5f:9b:c9:
3f:fd:fb:db:b2:5c:54:53:2e:ba:b4:6f:53:5c:e5:
7d:05:f8:cc:1d:76:0d:15:24:4a:07:5d:ba:9e:ee:
2f:66:69:08:c7:e5:96:5c:33:f5:bd:24:8c:33:dc:
aa:45:c5:3b:97:38:8a:9f:8d:9d:cb:b9:55:9e:b6:
b2:75:57:b2:2a:34:97:fa:b8:cc:89:f9:e2:bb:87:
6d:f1:e2:a6:22:36:b1:89:30:bd:cd:7c:f2:a0:35:
5e:03:7c:4a:97:63:86:be:58:38:94:bd:ab:0d:0d:
22:1b:e5:08:d8:d6:f7:7e:04:8a:d1:12:9b:2d:05:
ef:fc:e4:46:cc:30:ad:0d:72:ae:4d:1c:09:15:f0:
03:a7:5a:b3:cc:ff:38:c3:ad:86:d5:20:b1:60:2e:
ae:97:82:83:d7:90:16:01:00:ca:55:68:be:9e:f7:
59:87:20:f0:87:54:57:8d:3b:35:2a:bc:18:7c:1f:
b5:63:fe:2b:21:58:fb:bc:da:2a:a7:f2:a4:f2:3b:
ba:d6:a1:b6:8f:16:e7:ed:f4:5f:08:83:65:68:f3:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C8:24:A1:43:37:9F:11:3E:F4:BE:33:D3:07:B0:F6:1F:EA:42:4A
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:01:a8:08:92:73:54:69:30:9e:90:89:98:56:a2:d4:92:a3:
cb:81:30:2c:e0:84:22:a8:21:c7:92:b7:3a:74:7e:1d:59:8f:
52:e7:ab:31:bc:46:95:a6:86:c0:7c:be:53:5a:7b:f2:72:c8:
f4:ca:e2:31:1e:cf:cf:01:5a:a9:5d:db:7d:c0:fa:4d:a7:d2:
ca:94:fe:29:79:e5:bb:a7:26:4f:f5:ff:e3:39:dd:dc:b9:c1:
1f:58:a2:72:44:a7:33:c7:0e:e3:13:87:0b:8b:e8:e2:b7:85:
83:80:5a:53:51:02:ec:0b:06:4a:1b:9c:a6:d2:d2:47:66:9d:
56:a8:63:a3:76:a6:d1:2c:e5:74:af:a7:f3:59:8c:af:b4:fe:
f6:15:35:ee:e9:64:1a:dd:d4:76:13:5a:37:fb:49:1d:dd:0c:
04:f3:aa:1a:64:d4:23:8e:3c:7b:cc:ad:ef:85:ea:e0:69:e9:
74:a6:b2:cf:4e:6e:73:4d:b4:4f:6c:82:a7:56:36:87:80:9d:
b7:5e:66:dc:a2:a8:de:03:6b:d6:33:42:d3:2d:28:7d:b6:67:
68:e9:d1:77:be:1d:3b:bf:09:72:02:7e:75:e2:e2:5e:ba:02:
76:1a:48:81:d8:40:9e:0b:ef:cc:50:9b:9e:f8:37:ed:b8:24:
58:24:3e:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfvzdVlb6g44R1jMSOPTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNGRmOWE1NDYwY2JkNDUwYjRlNzUzODAzOTNhODIxZTg1
Yzc0ZDgwHhcNMjYwNzI0MDUwMDIzWhcNMjYwNzI1MDUwMDIzWjAzMTEwLwYDVQQD
EyhlZmM4MjRhMTQzMzc5ZjExM2VmNGJlMzNkMzA3YjBmNjFmZWE0MjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf8+i6LwdVdXKJjT/Bdn41fLxfvg
GQUpkS/CcG7hV2w4WJmqdIfc2PJfm8k//fvbslxUUy66tG9TXOV9BfjMHXYNFSRK
B126nu4vZmkIx+WWXDP1vSSMM9yqRcU7lziKn42dy7lVnraydVeyKjSX+rjMifni
u4dt8eKmIjaxiTC9zXzyoDVeA3xKl2OGvlg4lL2rDQ0iG+UI2Nb3fgSK0RKbLQXv
/ORGzDCtDXKuTRwJFfADp1qzzP84w62G1SCxYC6ul4KD15AWAQDKVWi+nvdZhyDw
h1RXjTs1KrwYfB+1Y/4rIVj7vNoqp/Kk8ju61qG2jxbn7fRfCINlaPPoZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/IJKFDN58RPvS+M9MHsPYf6kJKMB8GA1UdIwQY
MBaAFDtN+aVGDL1FC051OAOTqCHoXHTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2Zjkt
OTgxMmQ3Y2ZkNjk0LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2ZjktOTgxMmQ3Y2ZkNjk0
LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgGoCJJz
VGkwnpCJmFai1JKjy4EwLOCEIqghx5K3OnR+HVmPUuerMbxGlaaGwHy+U1p78nLI
9MriMR7PzwFaqV3bfcD6TafSypT+KXnlu6cmT/X/4znd3LnBH1iickSnM8cO4xOH
C4vo4reFg4BaU1EC7AsGShucptLSR2adVqhjo3am0SzldK+n81mMr7T+9hU17ulk
Gt3UdhNaN/tJHd0MBPOqGmTUI448e8yt74Xq4GnpdKayz05uc020T2yCp1Y2h4Cd
t15m3KKo3gNr1jNC0y0ofbZnaOnRd74dO78JcgJ+deLiXroCdhpIgdhAngvvzFCb
nvg37bgkWCQ+ZQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:29 2026 by rpki-client