Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft
File: OggZA5tm-u8UP2Jid5J3Yikxe2I.mft (raw, json)
Hash identifier: YF6zTM/8of7a2l+Uxln8FWARg6m8vtWzVOCxXs1uNyA=
Subject key identifier: D4:D5:78:84:3B:1C:A1:02:FD:55:16:9A:94:E7:F3:D2:60:B5:E8:41
Authority key identifier: 3A:08:19:03:9B:66:FA:EF:14:3F:62:62:77:92:77:62:29:31:7B:62
Certificate issuer: /CN=3a0819039b66faef143f62627792776229317b62
Certificate serial: 019F916D4A92BA5AE4F4D9B901FE0FB006FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OggZA5tm-u8UP2Jid5J3Yikxe2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:26 +0000
Manifest this update: Fri 24 Jul 2026 00:01:26 +0000
Manifest next update: Sat 25 Jul 2026 00:01:26 +0000
Files and hashes: 1: A9l3yW06MCRhC0vPEP_5L6oe6PU.roa (hash: QnT+4PmCf+dobjyw/dCsgXjulmPpCRJdE+AVb3L/yCw=)
2: OggZA5tm-u8UP2Jid5J3Yikxe2I.crl (hash: Giqj0YV0FKQPiUCwstHDaqq5kF+I15bnXdLVvVwN1Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OggZA5tm-u8UP2Jid5J3Yikxe2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:4a:92:ba:5a:e4:f4:d9:b9:01:fe:0f:b0:06:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0819039b66faef143f62627792776229317b62
Validity
Not Before: Jul 24 00:01:26 2026 GMT
Not After : Jul 25 00:01:26 2026 GMT
Subject: CN=d4d578843b1ca102fd55169a94e7f3d260b5e841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fe:59:be:df:30:96:c0:bd:23:0e:bc:64:2f:
16:2f:f1:47:cc:18:a2:80:fd:31:f9:41:ad:40:60:
8f:db:76:c5:96:62:cd:8d:f1:c3:b7:4f:c3:3f:99:
b1:aa:a4:d6:30:da:9c:1c:ce:4b:57:ab:9a:9a:30:
ea:ba:62:00:58:a9:4c:95:52:c7:b2:cc:1c:fe:b6:
d0:a8:16:74:4f:7e:4b:0a:0a:6b:4a:75:c3:ae:8a:
f7:ab:80:d5:e1:39:4f:1b:c4:1f:34:14:13:d5:77:
40:d1:4a:88:6a:41:ab:af:13:7a:48:71:48:ee:f5:
75:ee:11:e2:c1:53:78:4b:e3:49:10:72:ba:08:e5:
79:f9:d4:fd:d3:dc:8e:2a:77:bc:55:c1:e9:63:46:
4c:8d:f6:ef:3b:fb:cf:48:f6:fa:28:3a:c2:5d:b1:
53:a3:01:f2:cd:60:c5:ef:59:bc:33:7e:30:d7:94:
00:a3:97:21:59:96:8f:ff:b3:33:2a:b2:a9:a7:91:
6e:69:ed:f7:ff:0b:db:fa:78:09:e7:bc:d7:d1:e2:
a8:ca:df:b8:e7:12:59:3d:c7:bb:96:8b:ca:85:73:
c2:b0:b5:cb:01:a9:40:46:46:e9:e5:36:e0:a0:fb:
f2:da:89:dd:22:02:8d:1d:25:e7:ac:31:b2:dd:42:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D5:78:84:3B:1C:A1:02:FD:55:16:9A:94:E7:F3:D2:60:B5:E8:41
X509v3 Authority Key Identifier:
keyid:3A:08:19:03:9B:66:FA:EF:14:3F:62:62:77:92:77:62:29:31:7B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OggZA5tm-u8UP2Jid5J3Yikxe2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:12:4c:ca:ac:3f:5a:74:49:93:34:96:15:b5:af:2a:c2:0c:
14:07:a5:a2:08:ee:7e:04:72:ba:db:dc:0a:4a:b7:af:4f:91:
34:48:74:01:06:cd:20:e0:12:a0:c6:f4:9e:6c:9b:3f:49:39:
32:58:d3:91:31:dc:3a:1c:6a:1e:7e:81:2d:29:13:a8:47:60:
6e:63:e8:87:2c:b3:71:03:3f:e3:b8:72:ca:4f:b6:04:36:12:
e9:82:02:a3:e1:60:88:9f:6b:6d:43:99:57:ed:50:95:d5:7c:
67:b1:e2:36:cc:6f:c2:3d:03:0f:c2:b8:fd:2f:c7:fb:28:10:
3e:f9:7f:a2:e7:fd:c4:2f:de:d9:5c:80:84:53:4d:0b:31:3e:
cd:7b:c0:16:a6:d2:13:ff:4c:69:15:7d:66:c6:27:c1:bd:5e:
32:c0:02:54:6d:47:c8:8b:87:58:5c:04:aa:bd:5b:48:dc:1c:
dd:0c:36:77:a4:80:97:ba:d5:49:8c:28:74:97:74:3b:08:cf:
db:1e:73:4e:83:24:6f:db:51:30:e4:0b:b4:bc:ea:68:37:99:
24:ef:0d:a3:1c:67:17:36:17:94:b1:59:f6:9e:12:1b:df:48:
10:56:9b:1b:4b:32:41:33:20:a5:99:9d:cd:ec:4a:6b:04:23:
2c:dc:b1:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbUqSulrk9Nm5Af4PsAb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDgxOTAzOWI2NmZhZWYxNDNmNjI2Mjc3OTI3NzYyMjkz
MTdiNjIwHhcNMjYwNzI0MDAwMTI2WhcNMjYwNzI1MDAwMTI2WjAzMTEwLwYDVQQD
EyhkNGQ1Nzg4NDNiMWNhMTAyZmQ1NTE2OWE5NGU3ZjNkMjYwYjVlODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f5Zvt8wlsC9Iw68ZC8WL/FHzBii
gP0x+UGtQGCP23bFlmLNjfHDt0/DP5mxqqTWMNqcHM5LV6uamjDqumIAWKlMlVLH
sswc/rbQqBZ0T35LCgprSnXDror3q4DV4TlPG8QfNBQT1XdA0UqIakGrrxN6SHFI
7vV17hHiwVN4S+NJEHK6COV5+dT909yOKne8VcHpY0ZMjfbvO/vPSPb6KDrCXbFT
owHyzWDF71m8M34w15QAo5chWZaP/7MzKrKpp5Fuae33/wvb+ngJ57zX0eKoyt+4
5xJZPce7lovKhXPCsLXLAalARkbp5TbgoPvy2ondIgKNHSXnrDGy3UIY2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTVeIQ7HKEC/VUWmpTn89JgtehBMB8GA1UdIwQY
MBaAFDoIGQObZvrvFD9iYneSd2IpMXtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dnWkE1dG0tdThVUDJKaWQ1SjNZaWt4ZTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUt
NjBiNmViYmI3ZTZmLzEvT2dnWkE1dG0tdThVUDJKaWQ1SjNZaWt4ZTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUtNjBiNmViYmI3ZTZm
LzEvT2dnWkE1dG0tdThVUDJKaWQ1SjNZaWt4ZTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxJMyqw/
WnRJkzSWFbWvKsIMFAelogjufgRyutvcCkq3r0+RNEh0AQbNIOASoMb0nmybP0k5
MljTkTHcOhxqHn6BLSkTqEdgbmPohyyzcQM/47hyyk+2BDYS6YICo+FgiJ9rbUOZ
V+1QldV8Z7HiNsxvwj0DD8K4/S/H+ygQPvl/ouf9xC/e2VyAhFNNCzE+zXvAFqbS
E/9MaRV9ZsYnwb1eMsACVG1HyIuHWFwEqr1bSNwc3Qw2d6SAl7rVSYwodJd0OwjP
2x5zToMkb9tRMOQLtLzqaDeZJO8NoxxnFzYXlLFZ9p4SG99IEFabG0syQTMgpZmd
zexKawQjLNyxzA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:54 2026 by rpki-client