Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: L8kHwLXcyJRI2NJnVSO+DLYLBUYWVlILNFTJqG1w9iA=
Subject key identifier: F2:EC:E5:D5:60:F6:51:1C:4D:33:D3:0A:A4:5C:2F:18:62:D7:83:AD
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 019F905A140DE153CB3FDA1FB3067DCB7969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 0648
Signing time: Thu 23 Jul 2026 19:00:50 +0000
Manifest this update: Thu 23 Jul 2026 19:00:50 +0000
Manifest next update: Fri 24 Jul 2026 19:00:50 +0000
Files and hashes: 1: 5kdfSFfIXpTRDKj7nU9dTnk_a7Q.roa (hash: Qud0EaTIzAf2oGbBUwUkaVwSjph89PDDdo19BAvVZGk=)
2: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (hash: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY=)
3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: QkZtC+e7lCZFQ0IrhCG//JkLJFo3wAIs9cCjdDnuYuw=)
4: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (hash: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:14:0d:e1:53:cb:3f:da:1f:b3:06:7d:cb:79:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Jul 23 19:00:50 2026 GMT
Not After : Jul 24 19:00:50 2026 GMT
Subject: CN=f2ece5d560f6511c4d33d30aa45c2f1862d783ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b5:13:24:13:29:43:fe:1a:c3:d7:8d:bc:97:
19:f7:d0:8c:88:02:02:7a:40:68:67:4b:d6:76:fb:
34:47:34:81:93:75:fc:04:e7:7b:c8:42:32:6e:80:
a5:62:e1:17:a5:1d:dd:78:a2:60:80:57:fd:a4:e6:
81:42:81:ac:7f:50:49:73:00:09:ce:ae:ec:9b:98:
f5:13:96:12:10:a6:b7:53:c4:e8:0b:a1:c2:43:a6:
e3:d2:3c:32:2e:c1:ee:b6:f3:dd:48:9b:4f:cb:b4:
00:09:a2:00:6c:72:9e:37:68:eb:15:7e:32:db:a2:
8b:98:f9:ba:13:e9:cc:fb:d0:33:52:02:21:fb:dd:
c4:4c:f1:2e:92:df:ce:47:93:3e:c5:4c:50:52:18:
3b:33:3c:3c:b0:de:c5:51:45:4c:3e:b3:fa:35:2d:
6c:0f:7f:7d:2c:16:51:3c:af:2d:9a:7b:cd:53:8c:
e2:15:22:c0:99:cc:4f:58:1e:b4:32:49:45:70:7c:
8d:3c:fe:c7:62:fb:f9:94:2c:cb:4f:55:5b:a8:d5:
e1:cc:5d:66:06:2f:07:77:ab:52:a5:86:d5:e9:9b:
aa:65:e6:2c:15:6a:9a:fc:db:93:96:4d:fb:13:f4:
c3:9c:21:50:3c:29:22:a2:74:ae:41:74:b1:cb:69:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EC:E5:D5:60:F6:51:1C:4D:33:D3:0A:A4:5C:2F:18:62:D7:83:AD
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d5:99:c3:f2:47:a8:39:05:7f:2d:18:d5:41:c0:df:94:ac:
0e:7d:1e:e6:0f:76:33:ab:5f:05:62:d9:8d:5e:bd:d5:0d:4c:
9c:82:dc:3e:2f:4e:7a:a6:90:94:92:cd:9c:fa:ac:72:c7:02:
06:1e:4e:2c:e5:5f:a8:9d:72:d4:09:b4:af:8a:9a:06:43:e6:
c8:0e:88:34:a6:90:ef:b5:19:7a:bc:7e:86:87:6f:0f:8c:97:
5c:bb:5e:98:cf:b6:30:3a:de:1e:d4:53:5c:33:77:5c:e4:b9:
ad:9d:c0:14:6a:91:67:f1:90:86:0a:7f:82:b8:d7:d8:11:7c:
73:63:e7:3c:7a:a4:8b:6e:62:c5:92:5b:53:ba:ad:ab:3f:ab:
0b:9c:eb:6e:98:a1:92:55:50:28:1b:65:38:74:af:34:87:8a:
b6:bf:4c:71:88:c1:28:10:46:22:35:ec:4b:0c:a0:37:59:a0:
33:19:04:52:17:74:97:c3:85:3c:85:82:f0:85:78:f3:c1:d5:
b1:e1:39:a6:b0:56:2a:84:55:a2:98:70:2c:ff:e4:2c:12:cb:
95:be:65:23:50:07:0e:0b:59:50:08:26:83:c1:4d:c5:79:9c:
51:bf:34:af:44:d0:ed:26:b9:51:07:d9:da:c0:fa:20:56:0d:
26:76:dd:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWhQN4VPLP9ofswZ9y3lpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGRkOWU3MzU1YzcyYzc1MWZmZjRmMTc1ZGFjZTdkYWE3
YjljYmYwHhcNMjYwNzIzMTkwMDUwWhcNMjYwNzI0MTkwMDUwWjAzMTEwLwYDVQQD
EyhmMmVjZTVkNTYwZjY1MTFjNGQzM2QzMGFhNDVjMmYxODYyZDc4M2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbUTJBMpQ/4aw9eNvJcZ99CMiAIC
ekBoZ0vWdvs0RzSBk3X8BOd7yEIyboClYuEXpR3deKJggFf9pOaBQoGsf1BJcwAJ
zq7sm5j1E5YSEKa3U8ToC6HCQ6bj0jwyLsHutvPdSJtPy7QACaIAbHKeN2jrFX4y
26KLmPm6E+nM+9AzUgIh+93ETPEukt/OR5M+xUxQUhg7Mzw8sN7FUUVMPrP6NS1s
D399LBZRPK8tmnvNU4ziFSLAmcxPWB60MklFcHyNPP7HYvv5lCzLT1VbqNXhzF1m
Bi8Hd6tSpYbV6ZuqZeYsFWqa/NuTlk37E/TDnCFQPCkionSuQXSxy2nVRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLs5dVg9lEcTTPTCqRcLxhi14OtMB8GA1UdIwQY
MBaAFDgN2ec1XHLHUf/08XXazn2qe5y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iN2ZlYTItYTMyZC00YTVlLTk5ODIt
NTRiNGNhNTBkMjQ4LzEvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iN2ZlYTItYTMyZC00YTVlLTk5ODItNTRiNGNhNTBkMjQ4
LzEvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdWZw/JH
qDkFfy0Y1UHA35SsDn0e5g92M6tfBWLZjV691Q1MnILcPi9OeqaQlJLNnPqscscC
Bh5OLOVfqJ1y1Am0r4qaBkPmyA6INKaQ77UZerx+hodvD4yXXLtemM+2MDreHtRT
XDN3XOS5rZ3AFGqRZ/GQhgp/grjX2BF8c2PnPHqki25ixZJbU7qtqz+rC5zrbpih
klVQKBtlOHSvNIeKtr9McYjBKBBGIjXsSwygN1mgMxkEUhd0l8OFPIWC8IV488HV
seE5prBWKoRVophwLP/kLBLLlb5lI1AHDgtZUAgmg8FNxXmcUb80r0TQ7Sa5UQfZ
2sD6IFYNJnbdkg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:29:50 2026 by rpki-client