Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: lPh4UqC+JxwuFcvArWptrOHBNKCpg0JH8mw9c1mqcA4=
Subject key identifier: 21:B5:A1:5A:1A:6E:84:B0:3F:1A:9B:53:85:D2:FD:DF:F8:E8:9B:F1
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 019F94DBDD09D1C501049A5C6B8BED4E8F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 19D9
Signing time: Fri 24 Jul 2026 16:01:04 +0000
Manifest this update: Fri 24 Jul 2026 16:01:04 +0000
Manifest next update: Sat 25 Jul 2026 16:01:04 +0000
Files and hashes: 1: C53oCg7kRoBXocgajR_ZpGWJqn4.roa (hash: PkakGt0bbQY/2tn/r6YJVwwmAKETiXnq03+IjFLAZQs=)
2: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: pElY5NWxSpy7lTwe+HMUPqFQafT3RWN+J5Uhq+EmiiE=)
3: SNyntTwsIIpefS6otR0nRSZTl0M.roa (hash: 7Q0juJOhLraTf25d8amnxUBMIjfjOKD/x6SVvjGWFnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:dd:09:d1:c5:01:04:9a:5c:6b:8b:ed:4e:8f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Jul 24 16:01:04 2026 GMT
Not After : Jul 25 16:01:04 2026 GMT
Subject: CN=21b5a15a1a6e84b03f1a9b5385d2fddff8e89bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:cd:0d:6b:88:08:9e:e8:27:f3:24:f6:c4:
ab:37:4c:e9:69:6d:36:8f:c1:41:6e:0c:14:59:d8:
1c:e0:94:93:c6:1f:b8:ab:10:11:8a:5a:2d:83:de:
ba:58:ca:a1:eb:97:f5:a1:c2:9e:78:6f:96:ce:fa:
8b:8e:d2:b3:78:15:99:46:8e:d1:43:50:10:96:cc:
6e:3a:f4:35:33:03:33:b7:92:90:b6:7f:1a:34:df:
d4:d7:32:e7:17:81:be:5a:b2:a5:5f:a7:0d:82:ac:
20:69:91:89:5c:d0:48:9d:a1:38:c5:a8:14:a4:12:
52:da:73:ad:fb:34:09:83:c5:2f:21:f7:37:77:2f:
30:ea:12:38:67:21:3b:21:2c:44:47:14:fa:40:bb:
f4:3e:b1:a4:e0:7f:f6:46:52:c3:e5:40:0f:b7:76:
8c:5c:4d:b6:87:86:9d:f1:57:c5:1a:34:cf:25:2c:
f7:5f:0f:72:66:91:42:09:3a:3d:f0:f6:a2:98:b5:
31:62:ad:b2:17:80:70:da:3d:21:e1:75:0d:db:af:
e8:43:81:c2:f7:22:6c:2b:6f:01:a4:5e:89:1f:04:
03:82:a4:d7:92:a0:7e:58:49:e8:96:76:73:27:b0:
9b:61:d5:46:e0:65:86:e8:d0:40:b8:6b:6b:d6:39:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B5:A1:5A:1A:6E:84:B0:3F:1A:9B:53:85:D2:FD:DF:F8:E8:9B:F1
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cc:d9:59:ea:d8:d1:64:00:c6:96:4b:0b:3e:07:dd:8e:b4:
b2:ef:72:21:12:57:7d:ed:43:f4:48:a2:8b:e1:03:54:6a:8d:
7c:03:c1:ed:ab:cf:c6:77:84:a1:3c:f2:4a:63:d9:a1:5a:df:
a5:bf:14:25:11:b4:a8:c3:00:22:07:f0:dd:27:cd:c9:15:9a:
9f:7a:0c:c0:6b:eb:12:0a:52:43:57:e9:e7:e3:a4:6a:64:11:
7b:da:cf:f6:a5:15:01:a8:a5:36:32:9c:81:02:fd:ae:82:80:
24:07:1c:8b:36:73:15:84:23:b6:7e:3a:49:05:64:df:d3:0c:
05:b2:66:c3:d9:c7:3a:77:15:6b:e9:c4:2c:a5:1f:16:86:3b:
01:4f:44:e4:20:21:24:75:df:e8:88:ad:9e:3c:94:e2:73:51:
31:58:d0:8d:ef:5e:aa:cc:94:ba:40:56:12:d0:e8:a2:1b:7b:
9a:d5:d6:b8:d5:2c:c8:c4:76:06:7e:9f:2c:58:54:62:d8:01:
58:a1:d3:3e:bf:01:f1:0c:af:9e:bd:30:1f:5d:08:bc:ee:d9:
5e:5b:61:51:e6:2c:f2:e8:8e:08:5b:6f:5c:3b:8c:c8:5d:e8:
89:6f:d3:9c:65:23:17:7b:fe:3d:f2:1f:02:91:35:b9:52:de:
a9:11:96:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U290J0cUBBJpca4vtTo9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMjMwNDQyZmVhZTlmYzI2YjhiZDg4N2ZhYTBlZDAyNzU4
MjdhNTgwHhcNMjYwNzI0MTYwMTA0WhcNMjYwNzI1MTYwMTA0WjAzMTEwLwYDVQQD
EygyMWI1YTE1YTFhNmU4NGIwM2YxYTliNTM4NWQyZmRkZmY4ZTg5YmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4vNDWuICJ7oJ/Mk9sSrN0zpaW02
j8FBbgwUWdgc4JSTxh+4qxARilotg966WMqh65f1ocKeeG+WzvqLjtKzeBWZRo7R
Q1AQlsxuOvQ1MwMzt5KQtn8aNN/U1zLnF4G+WrKlX6cNgqwgaZGJXNBInaE4xagU
pBJS2nOt+zQJg8UvIfc3dy8w6hI4ZyE7ISxERxT6QLv0PrGk4H/2RlLD5UAPt3aM
XE22h4ad8VfFGjTPJSz3Xw9yZpFCCTo98PaimLUxYq2yF4Bw2j0h4XUN26/oQ4HC
9yJsK28BpF6JHwQDgqTXkqB+WEnolnZzJ7CbYdVG4GWG6NBAuGtr1jmKIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG1oVoaboSwPxqbU4XS/d/46JvxMB8GA1UdIwQY
MBaAFDsjBEL+rp/Ca4vYh/qg7QJ1gnpYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYt
NzI2NzA3Mzc2MWQ0LzEvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYtNzI2NzA3Mzc2MWQ0
LzEvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeszZWerY
0WQAxpZLCz4H3Y60su9yIRJXfe1D9Eiii+EDVGqNfAPB7avPxneEoTzySmPZoVrf
pb8UJRG0qMMAIgfw3SfNyRWan3oMwGvrEgpSQ1fp5+OkamQRe9rP9qUVAailNjKc
gQL9roKAJAccizZzFYQjtn46SQVk39MMBbJmw9nHOncVa+nELKUfFoY7AU9E5CAh
JHXf6IitnjyU4nNRMVjQje9eqsyUukBWEtDooht7mtXWuNUsyMR2Bn6fLFhUYtgB
WKHTPr8B8Qyvnr0wH10IvO7ZXlthUeYs8uiOCFtvXDuMyF3oiW/TnGUjF3v+PfIf
ApE1uVLeqRGWGw==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:34 2026 by rpki-client