Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
File: oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft (raw, json)
Hash identifier: ybeq4oCzol6SLUXmMSCRprKdmKwsNue7JX7RUPxWEMQ=
Subject key identifier: 3E:FF:0B:CC:66:24:22:81:DC:F9:54:68:E1:D6:47:46:27:6B:96:5E
Authority key identifier: A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
Certificate issuer: /CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Certificate serial: 019F95127AB6ED8B890FE53670EF0E1C2BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
Manifest number: 0197
Signing time: Fri 24 Jul 2026 17:00:43 +0000
Manifest this update: Fri 24 Jul 2026 17:00:43 +0000
Manifest next update: Sat 25 Jul 2026 17:00:43 +0000
Files and hashes: 1: Bl_J51ealE87PBDrcx3y2abYz_M.roa (hash: skpARlMkvLIJ9aXgoSnFArnzouHAgMx1Cjvtifcnmuo=)
2: oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl (hash: /3zl4JVIMNJsoXu9QoytCAaiQc/OFRDyfynX1wxFOss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:7a:b6:ed:8b:89:0f:e5:36:70:ef:0e:1c:2b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Validity
Not Before: Jul 24 17:00:43 2026 GMT
Not After : Jul 25 17:00:43 2026 GMT
Subject: CN=3eff0bcc66242281dcf95468e1d64746276b965e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:6b:ec:77:b1:f6:e9:09:ef:1e:ed:ca:85:
ee:c9:cd:cb:26:93:67:5d:12:68:02:22:cb:26:70:
29:62:1c:7c:13:8d:8c:a4:96:83:7f:3b:17:3d:43:
0b:1a:33:ae:a8:47:91:c4:9f:aa:e8:1d:35:53:ff:
a7:ce:15:c0:4d:88:fb:ef:9d:fd:28:97:e8:3e:32:
65:81:bf:82:61:82:4d:30:f1:cb:02:81:d4:43:53:
b5:7a:3f:28:6c:7c:b5:21:bf:ca:9e:72:1e:e5:b5:
8c:24:ff:40:3e:e2:1b:b9:bd:6b:1b:1a:d7:d0:d7:
0f:10:2a:5d:15:a6:62:f3:4f:11:de:50:d2:cc:6f:
a5:e5:8c:4e:0b:2c:aa:74:03:2f:66:af:01:91:e6:
16:7f:e6:fc:f8:7d:b1:24:17:5a:05:da:5b:11:aa:
03:62:3f:c4:2a:c3:2d:d0:2f:c4:ef:f2:47:9b:c4:
a3:78:cf:3d:6d:5d:24:1c:79:79:05:65:ea:44:01:
a9:69:fc:82:26:d0:21:62:3d:7c:e0:6c:dd:27:4d:
b6:d8:46:68:69:38:20:1f:13:f6:ce:d4:fa:e7:63:
c7:75:2e:7f:5d:97:77:51:10:43:82:c1:26:ce:96:
39:1f:68:77:6e:27:6b:b4:1c:4f:c5:1e:5e:50:84:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FF:0B:CC:66:24:22:81:DC:F9:54:68:E1:D6:47:46:27:6B:96:5E
X509v3 Authority Key Identifier:
keyid:A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:27:14:4f:27:eb:bc:3c:a1:81:c6:e6:97:a0:0c:26:0b:0e:
13:0b:14:f7:4a:aa:ef:75:d0:5b:52:64:1f:54:88:b4:1c:e5:
17:89:71:93:ff:65:fb:39:0a:72:3b:ef:1f:9d:ba:90:64:7b:
b1:f6:fe:bd:23:96:17:f7:92:ff:47:99:fb:f5:f4:c8:3d:2e:
59:4f:9f:1a:59:68:ed:a5:b0:0a:db:b6:cc:8d:a4:77:0e:3f:
a8:c0:8d:26:dc:b6:16:32:88:29:b1:d2:3a:13:25:9d:d6:9a:
bc:6c:e1:2b:d2:b1:1a:2f:13:b5:d2:51:ed:4b:cb:dc:31:d2:
9c:3b:a6:60:ff:28:4a:c5:ab:5e:91:36:3d:9a:34:3d:b4:3c:
bd:2a:60:f5:3c:2c:4e:3b:01:16:81:bd:ce:ad:a0:75:98:48:
c7:d5:74:13:f7:34:bd:99:88:1a:e2:3e:c2:25:a8:29:30:3a:
c4:7c:01:46:e1:b6:ce:53:22:18:8b:e0:d7:a3:50:07:bd:23:
15:0c:dc:19:26:3f:c4:46:f7:e7:83:99:1e:e7:ef:00:0f:57:
0e:4c:bc:de:db:b6:7d:96:12:19:8e:6c:ae:7a:7c:db:96:4e:
9f:5b:f3:4a:5e:e9:d7:13:3d:e9:51:97:84:94:76:b4:49:6a:
59:69:f2:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEnq27YuJD+U2cO8OHCvJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMmUyNDE0M2NjYWM2ZmU3NTkzNWNjMTE3NDIyNTllN2Zm
ODU5OGIwHhcNMjYwNzI0MTcwMDQzWhcNMjYwNzI1MTcwMDQzWjAzMTEwLwYDVQQD
EygzZWZmMGJjYzY2MjQyMjgxZGNmOTU0NjhlMWQ2NDc0NjI3NmI5NjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNJr7Hex9ukJ7x7tyoXuyc3LJpNn
XRJoAiLLJnApYhx8E42MpJaDfzsXPUMLGjOuqEeRxJ+q6B01U/+nzhXATYj77539
KJfoPjJlgb+CYYJNMPHLAoHUQ1O1ej8obHy1Ib/KnnIe5bWMJP9APuIbub1rGxrX
0NcPECpdFaZi808R3lDSzG+l5YxOCyyqdAMvZq8BkeYWf+b8+H2xJBdaBdpbEaoD
Yj/EKsMt0C/E7/JHm8SjeM89bV0kHHl5BWXqRAGpafyCJtAhYj184GzdJ0222EZo
aTggHxP2ztT652PHdS5/XZd3URBDgsEmzpY5H2h3bidrtBxPxR5eUIRjEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7/C8xmJCKB3PlUaOHWR0Yna5ZeMB8GA1UdIwQY
MBaAFKEuJBQ8ysb+dZNcwRdCJZ5/+FmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1M0a0ZEekt4djUxazF6QkYwSWxubl80V1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hN2Q5ODEtYzYyZC00MWY5LTg5ODYt
ZjQ2ZDI0MzY0M2Y0LzEvb1M0a0ZEekt4djUxazF6QkYwSWxubl80V1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hN2Q5ODEtYzYyZC00MWY5LTg5ODYtZjQ2ZDI0MzY0M2Y0
LzEvb1M0a0ZEekt4djUxazF6QkYwSWxubl80V1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCcUTyfr
vDyhgcbml6AMJgsOEwsU90qq73XQW1JkH1SItBzlF4lxk/9l+zkKcjvvH526kGR7
sfb+vSOWF/eS/0eZ+/X0yD0uWU+fGllo7aWwCtu2zI2kdw4/qMCNJty2FjKIKbHS
OhMlndaavGzhK9KxGi8TtdJR7UvL3DHSnDumYP8oSsWrXpE2PZo0PbQ8vSpg9Tws
TjsBFoG9zq2gdZhIx9V0E/c0vZmIGuI+wiWoKTA6xHwBRuG2zlMiGIvg16NQB70j
FQzcGSY/xEb354OZHufvAA9XDky83tu2fZYSGY5srnp825ZOn1vzSl7p1xM96VGX
hJR2tElqWWnyTA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:25 2026 by rpki-client