Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier: tDs2XaqoSOWnIq1JzB6Pss+RHPYqImS08srIFFVHwwA=
Subject key identifier: DE:6B:13:80:1F:28:BD:C6:50:32:FE:98:E2:A1:73:07:B7:EF:87:6A
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 019F9135F154C9CB4C6CF6B305F87CB863D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number: 0FA0
Signing time: Thu 23 Jul 2026 23:00:59 +0000
Manifest this update: Thu 23 Jul 2026 23:00:59 +0000
Manifest next update: Fri 24 Jul 2026 23:00:59 +0000
Files and hashes: 1: 1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa (hash: J/OpGEjDOcAf1NYGQDPN+Up9rV3l4EiqrJmyP7OZ814=)
2: 1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa (hash: AMsBQ6qY2ffhJac7OKTZiKgzqFTd8W61KP5VxcegYfI=)
3: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
4: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
5: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
6: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
7: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: lzoPmjpZ+ujOZ49IvThxFZKqX+jzishWJWacOuhfGFU=)
8: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:f1:54:c9:cb:4c:6c:f6:b3:05:f8:7c:b8:63:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Jul 23 23:00:59 2026 GMT
Not After : Jul 24 23:00:59 2026 GMT
Subject: CN=de6b13801f28bdc65032fe98e2a17307b7ef876a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:1b:8d:ee:d7:15:d9:c3:c6:63:b2:74:3b:
54:a2:c2:89:aa:31:74:b4:5e:b7:16:e7:69:a9:cb:
d8:e7:40:d3:c1:db:0c:f2:5d:60:ee:63:9a:0b:f8:
e9:3c:53:b4:ae:20:32:ea:83:99:ff:11:b8:f4:52:
b1:4a:e0:47:47:2a:4e:69:08:a5:80:24:63:ad:8f:
64:10:f9:5d:54:56:7c:8f:26:6b:b9:bb:76:06:02:
04:5e:ce:9f:f3:1e:02:8a:7b:55:6e:9a:ac:c8:e1:
b1:15:cf:fd:b5:54:2f:41:ee:9e:26:d3:2e:7f:46:
8d:7c:5e:b0:b1:29:4e:bd:8a:97:aa:9a:66:dc:e2:
f5:5a:34:44:f5:f8:f6:fa:a4:0a:05:56:58:cc:94:
47:0d:ab:a3:af:4f:65:1f:2f:69:64:38:3a:62:78:
e2:13:fe:b6:33:8d:43:1f:18:d4:84:fd:be:49:05:
f3:9f:1e:6d:38:19:45:cf:e2:84:2d:f0:c6:a0:20:
f3:5e:ba:85:fa:2e:59:33:35:27:36:b1:15:a3:0c:
83:8d:f5:f4:14:b9:d0:b2:2d:56:f5:e7:45:8c:a1:
a2:72:ff:de:84:36:a1:f3:bb:2b:0b:98:38:a0:60:
1f:e9:4d:8d:f3:39:25:b3:9a:d9:82:69:77:da:2a:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6B:13:80:1F:28:BD:C6:50:32:FE:98:E2:A1:73:07:B7:EF:87:6A
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:91:f2:7f:5f:29:d0:7d:76:6a:3f:3c:ad:ae:8c:52:cb:2f:
d2:9f:b7:4e:08:8d:30:45:bf:be:fc:53:57:8a:72:67:b0:fd:
5e:79:81:56:74:9c:61:fa:67:24:9c:d4:aa:62:3e:39:b1:2c:
89:76:be:41:f7:08:93:40:ae:fa:12:e3:23:f2:55:f2:e6:79:
0a:1a:33:2c:68:e9:24:74:5f:70:e2:9a:14:58:8f:1e:a1:65:
b6:09:75:b3:62:b0:cf:0e:9f:ea:98:d0:44:ce:e3:39:57:d5:
a5:15:bf:f5:91:1b:b3:fe:a4:95:62:08:e4:25:0c:16:4c:3a:
43:b4:ae:6d:9f:d9:ac:07:2c:2e:b7:f5:be:5c:fe:5d:a2:63:
01:31:d8:3b:c5:be:72:fa:79:af:72:6f:0d:40:2b:6c:6e:c4:
ce:ff:39:66:27:2c:4f:1e:b7:2c:0a:52:60:dd:30:48:21:03:
de:6f:6e:c3:ab:0e:3f:c8:bb:9e:7e:d7:0b:d7:55:11:61:15:
4e:66:c6:a2:be:19:8e:2c:20:15:3e:0f:f3:e4:b6:2b:d6:eb:
82:cc:73:74:81:4c:fa:da:4f:83:54:67:ea:6f:a6:e0:5f:18:
06:96:58:39:fa:ba:1b:07:09:65:ab:93:7c:c6:f0:86:09:3c:
72:a0:4d:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNfFUyctMbPazBfh8uGPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlODE5OWU4MzQ1NTY3ZDg1MTZiNzg4ZmUyZTFkMzk3ZTI3
YzczYTQwHhcNMjYwNzIzMjMwMDU5WhcNMjYwNzI0MjMwMDU5WjAzMTEwLwYDVQQD
EyhkZTZiMTM4MDFmMjhiZGM2NTAzMmZlOThlMmExNzMwN2I3ZWY4NzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9kbje7XFdnDxmOydDtUosKJqjF0
tF63FudpqcvY50DTwdsM8l1g7mOaC/jpPFO0riAy6oOZ/xG49FKxSuBHRypOaQil
gCRjrY9kEPldVFZ8jyZrubt2BgIEXs6f8x4CintVbpqsyOGxFc/9tVQvQe6eJtMu
f0aNfF6wsSlOvYqXqppm3OL1WjRE9fj2+qQKBVZYzJRHDaujr09lHy9pZDg6Ynji
E/62M41DHxjUhP2+SQXznx5tOBlFz+KELfDGoCDzXrqF+i5ZMzUnNrEVowyDjfX0
FLnQsi1W9edFjKGicv/ehDah87srC5g4oGAf6U2N8zkls5rZgml32iosuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5rE4AfKL3GUDL+mOKhcwe374dqMB8GA1UdIwQY
MBaAFP6Bmeg0VWfYUWt4j+Lh05fifHOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQt
ODQwY2NiMzRiM2Y1LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQtODQwY2NiMzRiM2Y1
LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZHyf18p
0H12aj88ra6MUssv0p+3TgiNMEW/vvxTV4pyZ7D9XnmBVnScYfpnJJzUqmI+ObEs
iXa+QfcIk0Cu+hLjI/JV8uZ5ChozLGjpJHRfcOKaFFiPHqFltgl1s2Kwzw6f6pjQ
RM7jOVfVpRW/9ZEbs/6klWII5CUMFkw6Q7SubZ/ZrAcsLrf1vlz+XaJjATHYO8W+
cvp5r3JvDUArbG7Ezv85ZicsTx63LApSYN0wSCED3m9uw6sOP8i7nn7XC9dVEWEV
TmbGor4ZjiwgFT4P8+S2K9brgsxzdIFM+tpPg1Rn6m+m4F8YBpZYOfq6GwcJZauT
fMbwhgk8cqBNKg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:54 2026 by rpki-client