Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft
File: 00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft (raw, json)
Hash identifier: kKhoQupKW+eUtNEoYSHSjgvyCrLjdJ8v42IrdVIWTf4=
Subject key identifier: 23:F6:21:2F:44:2A:7C:13:B2:04:62:77:AE:28:F3:6B:1B:17:82:75
Authority key identifier: D3:43:A3:10:6D:0A:76:8D:9D:9D:2F:09:15:B9:F6:F8:86:14:4B:94
Certificate issuer: /CN=d343a3106d0a768d9d9d2f0915b9f6f886144b94
Certificate serial: 019F9090776DB16619943CAC162C1AEDED79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:00:14 +0000
Manifest this update: Thu 23 Jul 2026 20:00:14 +0000
Manifest next update: Fri 24 Jul 2026 20:00:14 +0000
Files and hashes: 1: 00OjEG0Kdo2dnS8JFbn2-IYUS5Q.crl (hash: 7L2oWnFGLoB4y2b4e4QFugHGKnxZFNzbgSw3ve2L2bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:77:6d:b1:66:19:94:3c:ac:16:2c:1a:ed:ed:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d343a3106d0a768d9d9d2f0915b9f6f886144b94
Validity
Not Before: Jul 23 20:00:14 2026 GMT
Not After : Jul 24 20:00:14 2026 GMT
Subject: CN=23f6212f442a7c13b2046277ae28f36b1b178275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5c:0e:36:49:54:c2:1a:14:83:f8:fe:2d:4d:
10:de:4b:7e:d3:f2:60:5b:52:40:a3:96:68:04:8d:
ed:90:6b:8e:03:de:c2:62:e9:a3:36:16:f2:fe:4b:
c1:5f:f5:54:ac:dc:69:6d:09:62:ff:1a:fd:50:07:
86:44:b4:18:d6:fe:68:8f:2e:da:45:6e:eb:71:b0:
78:a0:21:10:7d:77:fe:4b:03:0d:a2:19:10:6a:4f:
3e:ee:71:10:00:c9:6e:07:6e:cf:8b:46:6a:a4:8c:
7d:c0:09:a2:9f:ae:b1:ea:37:9b:f4:bd:26:f8:86:
bd:32:9d:9e:48:39:81:90:a6:8f:d2:3f:6f:ff:13:
b1:18:69:ec:84:ba:cf:75:af:cf:4b:49:ea:74:a4:
76:4a:fa:e4:3b:16:9a:06:08:cd:6a:5d:a9:e2:43:
f6:1f:cf:34:6b:27:ec:9c:75:f5:c5:a2:6b:ea:2c:
a4:07:0b:e5:da:ec:d2:2e:8a:91:db:d4:17:7d:94:
9c:58:70:7f:11:b4:f0:b8:c6:08:5f:bd:f0:29:51:
07:eb:d7:ff:e3:62:3e:f0:ce:fc:38:51:1c:bc:25:
d8:ec:92:85:91:70:73:3e:d1:b8:74:4a:4c:ab:86:
e5:2d:8c:a0:96:19:99:60:7a:26:0f:94:11:8a:b4:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F6:21:2F:44:2A:7C:13:B2:04:62:77:AE:28:F3:6B:1B:17:82:75
X509v3 Authority Key Identifier:
keyid:D3:43:A3:10:6D:0A:76:8D:9D:9D:2F:09:15:B9:F6:F8:86:14:4B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:04:bf:c5:81:13:f4:39:aa:c5:c8:a9:0b:c5:7f:2e:3b:92:
57:ff:cb:fe:74:3d:35:63:b9:a4:cf:ca:8b:de:04:38:58:57:
96:25:23:3e:06:76:8a:12:70:a9:9e:f0:cf:f3:4c:50:af:b5:
66:4d:aa:19:f6:15:22:49:25:5d:2e:ec:d3:4f:00:94:23:17:
2e:02:9d:3d:0d:89:bd:17:58:57:93:10:e5:13:5d:e3:30:6c:
9d:32:69:7d:7a:2c:a5:30:cc:6b:da:be:bd:66:4e:94:66:80:
38:f0:45:48:af:64:c3:f2:35:ab:45:db:be:ad:53:2d:83:a4:
a7:4a:37:57:8b:81:fe:dd:52:4e:3e:0b:a1:0b:24:89:c1:40:
fa:f9:11:60:10:00:e8:e1:08:50:6b:1c:6e:65:85:ff:c1:a8:
09:b0:5d:e1:20:7e:8f:c7:e6:a4:8d:f9:a3:95:8d:53:15:3e:
a9:1f:17:15:3d:32:4a:51:2a:17:e1:62:73:4f:2e:9a:cb:35:
04:67:d7:9a:32:fd:56:c0:70:fd:e0:85:96:a9:74:6c:35:c0:
0f:3c:aa:ed:f0:b5:43:75:7b:19:43:cc:c1:d3:99:eb:78:f3:
70:30:9b:f8:82:57:c5:01:a3:17:5d:73:4e:59:1b:bb:8b:11:
20:bb:fc:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkHdtsWYZlDysFiwa7e15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDNhMzEwNmQwYTc2OGQ5ZDlkMmYwOTE1YjlmNmY4ODYx
NDRiOTQwHhcNMjYwNzIzMjAwMDE0WhcNMjYwNzI0MjAwMDE0WjAzMTEwLwYDVQQD
EygyM2Y2MjEyZjQ0MmE3YzEzYjIwNDYyNzdhZTI4ZjM2YjFiMTc4Mjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71wONklUwhoUg/j+LU0Q3kt+0/Jg
W1JAo5ZoBI3tkGuOA97CYumjNhby/kvBX/VUrNxpbQli/xr9UAeGRLQY1v5ojy7a
RW7rcbB4oCEQfXf+SwMNohkQak8+7nEQAMluB27Pi0ZqpIx9wAmin66x6jeb9L0m
+Ia9Mp2eSDmBkKaP0j9v/xOxGGnshLrPda/PS0nqdKR2SvrkOxaaBgjNal2p4kP2
H880ayfsnHX1xaJr6iykBwvl2uzSLoqR29QXfZScWHB/EbTwuMYIX73wKVEH69f/
42I+8M78OFEcvCXY7JKFkXBzPtG4dEpMq4blLYyglhmZYHomD5QRirQc7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCP2IS9EKnwTsgRid64o82sbF4J1MB8GA1UdIwQY
MBaAFNNDoxBtCnaNnZ0vCRW59viGFEuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBPakVHMEtkbzJkblM4SkZibjItSVlVUzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NTBiMGItYjMwNi00ZDdmLWIxOTgt
ODgyMmJkMzg2ODQwLzEvMDBPakVHMEtkbzJkblM4SkZibjItSVlVUzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC84NTBiMGItYjMwNi00ZDdmLWIxOTgtODgyMmJkMzg2ODQw
LzEvMDBPakVHMEtkbzJkblM4SkZibjItSVlVUzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQS/xYET
9DmqxcipC8V/LjuSV//L/nQ9NWO5pM/Ki94EOFhXliUjPgZ2ihJwqZ7wz/NMUK+1
Zk2qGfYVIkklXS7s008AlCMXLgKdPQ2JvRdYV5MQ5RNd4zBsnTJpfXospTDMa9q+
vWZOlGaAOPBFSK9kw/I1q0Xbvq1TLYOkp0o3V4uB/t1STj4LoQskicFA+vkRYBAA
6OEIUGscbmWF/8GoCbBd4SB+j8fmpI35o5WNUxU+qR8XFT0ySlEqF+Fic08umss1
BGfXmjL9VsBw/eCFlql0bDXADzyq7fC1Q3V7GUPMwdOZ63jzcDCb+IJXxQGjF11z
Tlkbu4sRILv8Mg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:39 2026 by rpki-client