Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
File: OJwDADZ1arjNrJIrGvI3vOE2fOA.mft (raw, json)
Hash identifier: F7RnCqYoY+AqDvFL0JQt+LAkG3OsLxoPveHxofM7Eo8=
Subject key identifier: 3B:0F:9D:37:45:9C:40:8C:A8:09:DB:62:AF:09:C4:EB:BE:60:6F:B3
Authority key identifier: 38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
Certificate issuer: /CN=389c030036756ab8cdac922b1af237bce1367ce0
Certificate serial: 019F90C84A6ABE1ED0AB6DFD0AA583CDA1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 21:01:13 +0000
Manifest this update: Thu 23 Jul 2026 21:01:13 +0000
Manifest next update: Fri 24 Jul 2026 21:01:13 +0000
Files and hashes: 1: OJwDADZ1arjNrJIrGvI3vOE2fOA.crl (hash: q8YC4rLOhNR1SGnU2vSY3qnwCEM3NRdWJdPuOBcNhZE=)
2: UDNnbwScWIceduT3mK8HBVvLzOg.roa (hash: vhtxGUgVNJ9daTmq66lTJXKGFzwiSTw9nac1gcWaxBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:4a:6a:be:1e:d0:ab:6d:fd:0a:a5:83:cd:a1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c030036756ab8cdac922b1af237bce1367ce0
Validity
Not Before: Jul 23 21:01:13 2026 GMT
Not After : Jul 24 21:01:13 2026 GMT
Subject: CN=3b0f9d37459c408ca809db62af09c4ebbe606fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:04:7d:8e:07:ad:42:9f:a3:d3:8f:bb:44:
c9:64:60:6c:07:f8:45:1c:76:3b:ee:f7:6b:8f:a1:
eb:1e:4f:c3:27:cf:b0:20:ab:43:cd:60:7e:96:08:
64:ea:1a:8f:5b:54:08:9c:4e:62:4d:c6:39:06:22:
1e:c0:1f:b6:fe:60:a1:2c:97:e8:a7:29:bf:28:b9:
20:26:0c:4a:4a:f2:4c:5d:e1:78:98:cb:b6:95:61:
1d:d8:2e:81:e3:db:d9:2a:26:dc:14:82:5b:cc:b4:
40:b8:49:df:80:57:23:6c:ed:ce:0c:76:49:b5:f1:
3c:fc:df:cf:d9:6d:f2:4e:c7:99:18:0b:06:eb:2c:
f8:25:a5:f5:8f:bc:d1:8a:f3:51:49:70:8e:ca:ca:
f2:2c:e3:60:4d:30:73:83:3b:40:27:81:25:a9:0a:
a1:53:43:0c:f5:e6:ac:14:ed:07:97:d0:0d:59:04:
73:01:e5:96:e5:5e:b8:8e:dd:4a:a2:eb:3a:77:f7:
96:48:df:a2:17:94:6d:5e:11:96:00:63:2d:85:27:
71:6a:35:75:c6:9b:bc:4a:c9:4a:8a:73:65:5e:50:
d3:0e:ab:00:04:51:cb:33:5d:d7:cd:ce:43:33:a1:
44:5f:b8:a9:41:07:f8:a0:49:5c:21:e5:58:9a:10:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0F:9D:37:45:9C:40:8C:A8:09:DB:62:AF:09:C4:EB:BE:60:6F:B3
X509v3 Authority Key Identifier:
keyid:38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f6:c7:16:7a:2e:93:46:cf:77:82:38:ea:5b:0b:2c:2f:50:
84:0a:e2:4f:07:6a:5d:f1:e6:24:ea:90:ac:3e:79:a4:0d:3b:
25:b6:db:32:87:cd:65:28:c2:64:2c:08:7e:e7:fc:43:91:23:
50:dd:74:21:48:60:90:a3:93:5a:0d:73:00:93:87:70:fc:6d:
9e:d9:4f:43:13:73:07:62:51:6f:f8:b8:7d:29:e0:c3:8d:73:
b5:40:96:f0:20:08:f6:8c:45:6c:8f:ba:5e:b4:bc:ef:5d:21:
6e:24:49:17:09:50:6a:84:6c:22:9a:bc:9d:c1:27:b1:01:0b:
91:0e:4c:3c:94:89:37:13:2e:49:aa:41:66:9a:b3:9a:cb:92:
6c:5d:76:80:62:85:66:fe:e3:65:34:93:29:05:ac:b7:92:16:
2c:09:64:97:6e:97:c7:4e:72:ba:be:0d:7e:11:5f:e2:44:86:
7c:d2:24:65:31:51:83:d3:90:4c:8d:1d:d4:1a:7d:82:ed:0c:
69:16:85:b6:2b:03:46:f8:4c:3d:b9:8b:c2:45:55:cd:0c:26:
02:51:62:9b:88:38:83:8b:54:2b:a2:59:8a:94:b2:15:ac:8c:
e7:85:e7:a9:17:d0:e3:a7:c6:3f:b6:13:35:0d:81:13:8c:25:
3e:ee:c9:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyEpqvh7Qq239CqWDzaHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OWMwMzAwMzY3NTZhYjhjZGFjOTIyYjFhZjIzN2JjZTEz
NjdjZTAwHhcNMjYwNzIzMjEwMTEzWhcNMjYwNzI0MjEwMTEzWjAzMTEwLwYDVQQD
EygzYjBmOWQzNzQ1OWM0MDhjYTgwOWRiNjJhZjA5YzRlYmJlNjA2ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVkEfY4HrUKfo9OPu0TJZGBsB/hF
HHY77vdrj6HrHk/DJ8+wIKtDzWB+lghk6hqPW1QInE5iTcY5BiIewB+2/mChLJfo
pym/KLkgJgxKSvJMXeF4mMu2lWEd2C6B49vZKibcFIJbzLRAuEnfgFcjbO3ODHZJ
tfE8/N/P2W3yTseZGAsG6yz4JaX1j7zRivNRSXCOysryLONgTTBzgztAJ4ElqQqh
U0MM9easFO0Hl9ANWQRzAeWW5V64jt1Kous6d/eWSN+iF5RtXhGWAGMthSdxajV1
xpu8SslKinNlXlDTDqsABFHLM13Xzc5DM6FEX7ipQQf4oElcIeVYmhAnLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsPnTdFnECMqAnbYq8JxOu+YG+zMB8GA1UdIwQY
MBaAFDicAwA2dWq4zaySKxryN7zhNnzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0p3REFEWjFhcmpOckpJckd2STN2T0UyZk9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMGZjYTAtMDRiMi00M2IwLWJkMmMt
NjcxN2I5YmFiYjM0LzEvT0p3REFEWjFhcmpOckpJckd2STN2T0UyZk9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yMGZjYTAtMDRiMi00M2IwLWJkMmMtNjcxN2I5YmFiYjM0
LzEvT0p3REFEWjFhcmpOckpJckd2STN2T0UyZk9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvbHFnou
k0bPd4I46lsLLC9QhAriTwdqXfHmJOqQrD55pA07JbbbMofNZSjCZCwIfuf8Q5Ej
UN10IUhgkKOTWg1zAJOHcPxtntlPQxNzB2JRb/i4fSngw41ztUCW8CAI9oxFbI+6
XrS8710hbiRJFwlQaoRsIpq8ncEnsQELkQ5MPJSJNxMuSapBZpqzmsuSbF12gGKF
Zv7jZTSTKQWst5IWLAlkl26Xx05yur4NfhFf4kSGfNIkZTFRg9OQTI0d1Bp9gu0M
aRaFtisDRvhMPbmLwkVVzQwmAlFim4g4g4tUK6JZipSyFayM54XnqRfQ46fGP7YT
NQ2BE4wlPu7JLw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:40 2026 by rpki-client