Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: jj1f6vLVS/CdCaONzHc4Wo72DVdROcz54s74zpGWvtI=
Subject key identifier: 04:C7:3E:36:40:98:FD:A3:8A:3C:32:EC:86:BF:5E:B7:F1:B0:8E:A8
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 019F90C816B4CAE9E6C80A0D3E76DF368BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 106C
Signing time: Thu 23 Jul 2026 21:00:59 +0000
Manifest this update: Thu 23 Jul 2026 21:00:59 +0000
Manifest next update: Fri 24 Jul 2026 21:00:59 +0000
Files and hashes: 1: 5EPEfFcq0_CQJyJv8NvlTXW122s.roa (hash: shP8Ed/HPJC3iktLjU3AhfJDqjBPIc4NQ5VyPIH2+gA=)
2: HoguhPYctq53_NeJpwMiGGaEYHE.roa (hash: 2Rg4I4psfcDKa015Nd8h+FBbuNVy5CBZXEFltS4HBbg=)
3: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: J4M6dRnTdzr15YO8fgupVf5A5sX5+N8m9wvP5LT1Gcs=)
4: jqg60u3udEXldRsO6lvjcjKURzE.roa (hash: kW26aKoDuoF4wJ1FRfJ1sSmndtvHSr/VmE5hX9cRIqU=)
5: xkVE7KUdk3_Gxthu42EOBxgV05Q.roa (hash: OLCiaU+AVFxgMEa5gMdkqLSxOFCgu1RCocNrX9T3asM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:16:b4:ca:e9:e6:c8:0a:0d:3e:76:df:36:8b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jul 23 21:00:59 2026 GMT
Not After : Jul 24 21:00:59 2026 GMT
Subject: CN=04c73e364098fda38a3c32ec86bf5eb7f1b08ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:ae:14:4f:9b:9e:0d:33:28:4d:96:a5:1a:
da:92:e8:9c:af:fb:b0:d3:53:3f:d4:63:06:a0:69:
69:b4:98:b4:f9:3c:a7:80:4a:f6:c6:c6:85:15:0a:
7a:9a:31:e5:77:d0:aa:8a:5e:b0:0e:b1:16:37:b7:
5a:aa:ae:0d:f9:21:d5:5e:20:ea:20:61:92:c6:bc:
5b:ed:5a:0b:06:c4:80:17:0d:54:68:b4:4f:35:7f:
9f:7c:01:a2:e8:d5:de:69:b4:ca:78:91:07:f6:00:
18:47:4f:e2:81:1e:c8:bd:0b:db:c6:bb:17:ef:e3:
6f:15:22:b6:2e:54:d9:b5:a3:15:e4:f3:09:f9:fe:
5f:60:a2:26:b6:d3:76:ea:01:1b:78:72:58:03:6c:
49:be:96:6a:f8:8b:ae:f3:22:ae:c0:91:24:29:65:
33:34:b4:1d:a4:47:af:06:dd:28:1b:d8:96:23:34:
b1:5c:dc:54:67:2d:d7:53:ae:7f:fa:ad:31:5d:27:
7b:7f:39:bd:1a:08:77:82:63:1f:e8:a3:a9:b5:86:
2c:c7:a6:1c:69:d3:bb:8e:6e:c7:30:08:cf:84:5c:
1c:a5:50:40:bf:d1:23:5a:4d:24:bc:84:b9:b9:b4:
51:bc:5a:82:7a:b3:f0:50:fd:2f:ab:17:46:54:a4:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C7:3E:36:40:98:FD:A3:8A:3C:32:EC:86:BF:5E:B7:F1:B0:8E:A8
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f5:94:b8:c7:3c:05:6f:25:b4:59:34:3e:09:06:c3:c6:9c:
88:8b:e0:43:35:ec:26:c2:10:d0:d3:25:a1:59:99:70:a3:3e:
0e:3b:f4:e7:ce:ac:51:99:0a:0f:54:b2:5c:5b:b5:26:3b:9a:
59:84:2a:74:ad:11:6f:97:1b:6a:1b:a4:1f:f9:ff:8c:98:77:
17:05:c2:51:b6:77:91:79:9f:18:c2:9d:81:47:5f:ce:2e:24:
03:17:38:8b:9d:e5:f6:64:f9:96:6b:7e:82:3e:a3:9c:7d:86:
0a:dd:26:1f:00:b5:f6:b4:43:75:54:86:17:9c:3c:43:e3:74:
23:0e:ab:5e:72:6a:23:76:3d:79:75:e1:93:e4:8e:a7:87:5d:
58:19:fd:bd:5d:1b:77:93:59:89:29:8b:5a:5a:78:91:29:d3:
de:59:e1:f2:5c:10:7d:3f:f2:7b:3c:77:6b:22:0c:e7:6d:58:
79:35:31:24:c9:eb:11:49:b5:14:ce:73:d8:02:c1:96:d4:cc:
34:80:69:6b:7c:09:cd:ee:ef:a7:a4:f7:3d:79:5c:9f:0e:c5:
63:9e:c8:fa:c3:55:fe:35:b8:ee:49:76:28:fb:4c:7d:21:90:
17:42:76:f5:c1:ce:16:42:d3:33:07:e6:59:eb:a6:8c:14:a7:
3e:83:88:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:05 2026 by rpki-client