Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: K1ueBXZAw6V44SfNTeFaMsMZkDIes0gR46nP0vrq47A=
Subject key identifier: 44:E0:D9:4A:9C:0B:BB:07:E0:5B:16:07:F0:A4:53:90:D4:02:0D:FD
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 019F927EDB23471A7F039643515536636F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 05D2
Signing time: Fri 24 Jul 2026 05:00:14 +0000
Manifest this update: Fri 24 Jul 2026 05:00:14 +0000
Manifest next update: Sat 25 Jul 2026 05:00:14 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: 0N1l4Q3YhM31Y+VFlB5xiLRiHMm+jnUHlI+T3+WeQiE=)
2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:db:23:47:1a:7f:03:96:43:51:55:36:63:6f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Jul 24 05:00:14 2026 GMT
Not After : Jul 25 05:00:14 2026 GMT
Subject: CN=44e0d94a9c0bbb07e05b1607f0a45390d4020dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:33:1e:7b:8a:e4:76:93:99:8c:d8:04:a5:
45:61:39:62:e2:57:26:d7:d8:88:98:c8:38:ab:ad:
77:8f:22:eb:95:f9:ca:2c:dc:3e:14:9a:ef:4b:bf:
54:c6:08:7b:fd:6e:01:cb:1b:87:e6:52:67:19:72:
4f:15:1e:4d:74:50:ea:d9:76:08:6c:8c:da:94:a5:
ba:b1:8f:7c:13:0d:2a:6e:4a:40:14:fe:98:17:bd:
c8:e3:ae:a6:b2:9c:7d:75:63:43:69:2c:93:75:05:
99:43:ad:eb:5c:03:6c:72:0d:3e:df:0e:80:cf:38:
f2:e6:63:1d:41:84:43:c3:7d:22:3a:c4:80:7e:32:
a7:5c:30:b9:29:80:62:66:fb:6f:9c:f9:e6:11:4e:
df:ae:43:fb:02:fe:43:e5:49:c6:b0:6b:c7:e2:f3:
b2:89:43:27:ea:98:c3:6c:0a:65:c8:d6:eb:16:1e:
f8:02:9b:e0:a5:9a:04:69:83:8b:68:f6:95:b1:67:
ac:d3:e7:65:c5:d3:be:24:45:32:7a:d9:6f:b9:8e:
88:a2:0d:3d:9c:7b:a8:1b:e1:69:a3:a2:01:3c:2d:
f8:f5:3f:58:1e:22:41:fe:b9:fe:74:d9:58:be:10:
2a:a9:9d:4d:aa:e7:5d:f3:0b:bd:83:49:3f:6b:a6:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E0:D9:4A:9C:0B:BB:07:E0:5B:16:07:F0:A4:53:90:D4:02:0D:FD
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:04:4e:9f:19:91:a5:88:7f:a8:6b:59:89:35:79:09:82:fe:
75:5e:b9:db:d6:80:a1:77:a5:4b:42:ea:4b:45:ba:92:8c:1c:
84:78:ee:03:be:89:35:bc:08:ae:fd:5c:d1:8b:37:c9:cb:ac:
18:7d:c8:59:6d:f1:d4:de:3e:a5:53:88:8d:2d:9f:e4:55:a9:
76:45:75:ac:f2:a2:e3:e1:9b:ab:9d:e7:f8:b9:ee:85:12:34:
57:ca:c9:45:9a:f9:be:5c:1a:8a:39:37:c2:a2:3a:e1:01:38:
b3:95:0a:37:78:1d:85:a7:52:33:7f:08:ee:0f:58:fb:c6:de:
35:de:04:d1:0a:82:20:88:2c:69:db:67:00:a8:9f:69:86:82:
06:d2:0f:03:15:12:55:98:98:e3:ee:91:1a:f7:bf:7c:3d:1b:
88:33:46:b9:bd:c9:df:ce:1f:ff:c4:0f:98:a1:66:b8:1c:c9:
1f:f3:cf:88:07:18:59:f2:90:ee:3b:98:7c:67:d5:59:a1:27:
8a:83:f7:46:dc:0f:26:79:49:ae:88:e2:7c:5e:27:b8:d8:f0:
3d:6e:01:6b:8c:e1:bb:b4:25:96:f2:65:ca:9f:ef:86:50:c1:
ea:13:cd:99:e5:30:7e:a0:fa:13:0a:1d:f4:b2:29:37:f1:d5:
57:77:eb:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SftsjRxp/A5ZDUVU2Y28HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNThlYjU4YjVjNjFhMjNkMGYyNDY2YzVjZDczY2U5ZWM5
NjViOTYwHhcNMjYwNzI0MDUwMDE0WhcNMjYwNzI1MDUwMDE0WjAzMTEwLwYDVQQD
Eyg0NGUwZDk0YTljMGJiYjA3ZTA1YjE2MDdmMGE0NTM5MGQ0MDIwZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKMzHnuK5HaTmYzYBKVFYTli4lcm
19iImMg4q613jyLrlfnKLNw+FJrvS79Uxgh7/W4ByxuH5lJnGXJPFR5NdFDq2XYI
bIzalKW6sY98Ew0qbkpAFP6YF73I466mspx9dWNDaSyTdQWZQ63rXANscg0+3w6A
zzjy5mMdQYRDw30iOsSAfjKnXDC5KYBiZvtvnPnmEU7frkP7Av5D5UnGsGvH4vOy
iUMn6pjDbAplyNbrFh74ApvgpZoEaYOLaPaVsWes0+dlxdO+JEUyetlvuY6Iog09
nHuoG+Fpo6IBPC349T9YHiJB/rn+dNlYvhAqqZ1Nqudd8wu9g0k/a6biMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETg2UqcC7sH4FsWB/CkU5DUAg39MB8GA1UdIwQY
MBaAFDtY61i1xhoj0PJGbFzXPOnslluWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2Qt
NzJhYzc5ZDdiYjA5LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2QtNzJhYzc5ZDdiYjA5
LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQROnxmR
pYh/qGtZiTV5CYL+dV6529aAoXelS0LqS0W6kowchHjuA76JNbwIrv1c0Ys3ycus
GH3IWW3x1N4+pVOIjS2f5FWpdkV1rPKi4+Gbq53n+LnuhRI0V8rJRZr5vlwaijk3
wqI64QE4s5UKN3gdhadSM38I7g9Y+8beNd4E0QqCIIgsadtnAKifaYaCBtIPAxUS
VZiY4+6RGve/fD0biDNGub3J384f/8QPmKFmuBzJH/PPiAcYWfKQ7juYfGfVWaEn
ioP3RtwPJnlJrojifF4nuNjwPW4Ba4zhu7QllvJlyp/vhlDB6hPNmeUwfqD6Ewod
9LIpN/HVV3fr3Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:15:52 2026 by rpki-client