Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: XjlNSgROC8YiXE452iPRSLLV8bpB1FhJgKJekIkAvdc=
Subject key identifier: 2A:83:F0:C1:F3:19:B0:0B:86:12:F4:CA:0D:42:3D:EF:DF:51:40:2D
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 019F92B60CAAD3CEF42C9E8DB5A289FAADE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 106D
Signing time: Fri 24 Jul 2026 06:00:32 +0000
Manifest this update: Fri 24 Jul 2026 06:00:32 +0000
Manifest next update: Sat 25 Jul 2026 06:00:32 +0000
Files and hashes: 1: 5EPEfFcq0_CQJyJv8NvlTXW122s.roa (hash: shP8Ed/HPJC3iktLjU3AhfJDqjBPIc4NQ5VyPIH2+gA=)
2: HoguhPYctq53_NeJpwMiGGaEYHE.roa (hash: 2Rg4I4psfcDKa015Nd8h+FBbuNVy5CBZXEFltS4HBbg=)
3: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: nqROPvscn5gULNrAN0wnEOSmp0WRHuWh6mcBcpDiS1E=)
4: jqg60u3udEXldRsO6lvjcjKURzE.roa (hash: kW26aKoDuoF4wJ1FRfJ1sSmndtvHSr/VmE5hX9cRIqU=)
5: xkVE7KUdk3_Gxthu42EOBxgV05Q.roa (hash: OLCiaU+AVFxgMEa5gMdkqLSxOFCgu1RCocNrX9T3asM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:0c:aa:d3:ce:f4:2c:9e:8d:b5:a2:89:fa:ad:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jul 24 06:00:32 2026 GMT
Not After : Jul 25 06:00:32 2026 GMT
Subject: CN=2a83f0c1f319b00b8612f4ca0d423defdf51402d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:97:33:5b:c0:51:ab:70:67:25:cb:ac:34:
73:69:8e:cd:4c:72:a6:db:ff:d0:05:77:f4:be:98:
32:7d:a2:35:50:d8:34:fe:5a:34:63:93:08:9f:e2:
d8:2d:4d:95:9f:51:69:6c:76:99:fb:0f:15:94:67:
f0:1b:74:63:53:dd:61:c1:7d:59:ba:98:1e:4f:73:
2f:28:ea:4e:df:6e:43:45:64:0c:06:33:39:8a:64:
34:8b:55:24:0e:31:b6:32:0b:12:e0:ef:11:20:d7:
ac:d9:7a:1f:2e:ed:c7:a7:03:0c:48:87:e1:7f:7a:
31:ab:4d:5c:0e:3c:f0:ff:6b:79:3b:96:38:b4:fa:
ec:ef:7f:86:c8:92:0e:e5:67:d7:25:e8:bb:70:2c:
c9:46:14:34:c9:d0:11:ee:dd:91:d2:6e:67:f6:3a:
2d:df:6d:fc:30:e5:9b:93:42:a2:0b:46:ed:f7:3e:
1c:7b:a8:56:b8:6c:2e:38:c2:f7:bd:13:d0:ac:02:
4c:1f:77:4a:cd:db:6f:56:f3:c7:53:7d:07:97:3a:
d3:29:02:bd:f5:9c:cb:cc:48:d8:29:4a:36:c5:cd:
27:40:db:fb:2d:9a:97:85:fd:a8:5c:11:ee:3d:6d:
a0:28:50:8f:a1:99:46:ac:29:67:7a:5f:d4:bd:6c:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:83:F0:C1:F3:19:B0:0B:86:12:F4:CA:0D:42:3D:EF:DF:51:40:2D
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:09:24:f1:33:29:f5:10:a0:fb:74:42:d7:5f:85:1e:8a:5c:
e1:ee:5d:4f:c3:b9:aa:56:aa:07:fc:c0:b4:9a:f7:e1:03:8d:
c1:89:5f:e5:2d:00:3e:a5:92:b7:60:ab:01:f4:a1:f5:e5:6b:
bc:2e:84:82:29:ef:0d:0a:5e:92:ae:2a:2e:53:d9:d6:b5:5f:
87:81:49:af:85:1f:1f:17:bd:59:d2:34:90:b7:ef:d1:29:ea:
a0:5a:aa:ce:b4:25:d4:9b:53:ae:78:aa:a6:3e:ed:84:19:84:
23:7b:e2:c7:3e:31:ab:3f:d2:7f:f8:39:a1:9a:7b:53:29:e9:
5e:94:95:4a:de:ae:46:f7:a5:1c:f2:6c:dd:2b:67:3d:c0:47:
4c:d0:d2:a1:94:24:34:25:6b:c8:f2:fc:5e:05:a1:c2:80:d9:
a0:31:a3:c3:47:05:aa:48:0a:61:16:6c:d8:9e:8e:38:c4:8b:
cc:81:26:e5:6a:32:79:f0:f2:0b:c1:79:ba:65:59:32:1e:00:
d5:13:37:3f:b0:a8:8b:41:44:ef:11:36:f5:ef:eb:aa:fe:f2:
35:d3:06:a4:18:a8:ad:43:66:21:e7:e3:e5:82:7e:3f:89:35:
ef:63:a6:82:d3:69:c2:f1:ab:9b:95:a1:1a:8c:ce:be:11:47:
db:77:4c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:15:57 2026 by rpki-client