Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: 0g8kCPifxjoYB1ez4eHmS95oAepGoKNguRp2ysrNMSE=
Subject key identifier: 29:AF:98:87:5F:43:38:0C:FC:1D:A1:28:D9:EB:CF:F5:6D:08:30:11
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 019F9323CF2B9228C01988BFABB8A3E3826C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 10BB
Signing time: Fri 24 Jul 2026 08:00:25 +0000
Manifest this update: Fri 24 Jul 2026 08:00:25 +0000
Manifest next update: Sat 25 Jul 2026 08:00:25 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: mKje2APrppjZj+HtkFu7D75pwICtkJEFmNTUBwe1cEE=)
2: SA91wBhkikPDWTrAUdLpOxUcx_0.roa (hash: Y6pGr30mVBYxj09imikNObgMk7TKch+XIWYn2BcZKOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:cf:2b:92:28:c0:19:88:bf:ab:b8:a3:e3:82:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Jul 24 08:00:25 2026 GMT
Not After : Jul 25 08:00:25 2026 GMT
Subject: CN=29af98875f43380cfc1da128d9ebcff56d083011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:b3:40:9a:5f:6c:66:bc:45:b2:ca:78:2b:
dd:8e:af:bb:5f:6f:b0:c9:86:0a:bc:57:23:4a:c7:
8e:f7:3b:66:4c:37:87:42:8c:ce:36:16:32:3a:ee:
b8:a0:d9:06:25:57:48:32:0a:ed:78:2d:12:4f:72:
f4:55:75:ba:db:ac:55:84:f6:38:b4:8e:b5:25:7c:
ff:cc:b5:d9:33:6f:81:25:5c:d9:49:0a:35:7d:54:
cf:d6:8a:3e:03:8d:74:6b:7c:8e:15:c3:41:b0:e4:
a7:42:88:b3:aa:7f:68:ea:41:13:c8:83:59:a8:52:
09:b1:1d:d5:12:3c:ac:ae:d7:16:a0:d1:60:87:25:
39:7d:bf:8a:78:48:17:50:c9:45:b3:71:3b:80:e9:
c1:26:84:60:a2:dd:80:c6:44:ee:e7:d9:a4:c3:b1:
25:a3:de:c3:47:9d:64:06:68:32:72:a6:3d:ea:7f:
3a:84:9a:ca:d0:68:4d:2d:e7:36:81:18:d9:80:f1:
cf:80:f8:c9:00:1e:a2:1a:82:b7:f4:cc:2d:08:d7:
99:51:53:3d:4b:1c:70:72:1d:d9:cd:4b:99:4a:fb:
fd:fc:4a:0d:43:a4:e9:22:37:79:d0:ef:64:69:0e:
9e:63:de:9e:3e:af:2e:1c:f0:6f:c0:e4:90:c4:57:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:98:87:5F:43:38:0C:FC:1D:A1:28:D9:EB:CF:F5:6D:08:30:11
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9a:b8:f1:f6:13:3e:55:95:cc:a7:7a:9f:39:05:7a:48:14:
82:93:23:11:33:66:d9:0e:ef:3f:5c:66:30:4c:a3:31:ca:84:
e7:c8:a0:fd:50:01:c0:bb:d7:17:f9:1b:d0:57:02:71:98:a7:
95:0b:33:0a:2a:33:52:02:04:98:1d:3b:66:be:4e:42:fe:d3:
83:66:57:08:5f:37:05:ea:22:00:e7:5e:84:ff:db:42:ce:7e:
0a:52:9b:5e:e4:e4:bf:45:ef:3c:61:3c:74:ba:4c:72:2e:d9:
15:4f:be:11:92:cc:97:1d:74:f0:8e:53:89:6a:54:91:a1:4d:
06:27:93:2f:cf:43:7d:dd:95:eb:22:23:f7:fa:ff:a7:8b:52:
78:29:be:7e:dc:28:bf:01:63:11:54:09:6e:76:53:e9:0b:8b:
2b:59:b3:4f:c5:c8:ff:bd:2a:38:20:d4:59:d7:2c:fc:c8:a6:
cc:91:d3:c2:2b:0a:01:a4:19:fe:71:a5:cc:ca:16:32:f9:39:
cb:3c:6f:58:b3:30:b0:82:2a:87:c7:84:27:6a:ac:3d:e8:a1:
8f:58:14:42:ed:7b:54:0f:d2:f8:53:da:0f:d7:67:c6:17:22:
0b:f0:d5:31:d1:73:8e:82:92:f0:72:de:0e:91:55:ab:a3:ba:
41:89:b6:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI88rkijAGYi/q7ij44JsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjlkMTMxYmU1MjgxMGU0N2M5Y2JiZjgzYTNmZmJkNGY3
Y2JkYmYwHhcNMjYwNzI0MDgwMDI1WhcNMjYwNzI1MDgwMDI1WjAzMTEwLwYDVQQD
EygyOWFmOTg4NzVmNDMzODBjZmMxZGExMjhkOWViY2ZmNTZkMDgzMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjizQJpfbGa8RbLKeCvdjq+7X2+w
yYYKvFcjSseO9ztmTDeHQozONhYyOu64oNkGJVdIMgrteC0ST3L0VXW626xVhPY4
tI61JXz/zLXZM2+BJVzZSQo1fVTP1oo+A410a3yOFcNBsOSnQoizqn9o6kETyINZ
qFIJsR3VEjysrtcWoNFghyU5fb+KeEgXUMlFs3E7gOnBJoRgot2AxkTu59mkw7El
o97DR51kBmgycqY96n86hJrK0GhNLec2gRjZgPHPgPjJAB6iGoK39MwtCNeZUVM9
Sxxwch3ZzUuZSvv9/EoNQ6TpIjd50O9kaQ6eY96ePq8uHPBvwOSQxFd6FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmvmIdfQzgM/B2hKNnrz/VtCDARMB8GA1UdIwQY
MBaAFDgp0TG+UoEOR8nLv4Oj/71PfL2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYt
YjAzOGRiODk4YjdlLzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYtYjAzOGRiODk4Yjdl
LzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5q48fYT
PlWVzKd6nzkFekgUgpMjETNm2Q7vP1xmMEyjMcqE58ig/VABwLvXF/kb0FcCcZin
lQszCiozUgIEmB07Zr5OQv7Tg2ZXCF83BeoiAOdehP/bQs5+ClKbXuTkv0XvPGE8
dLpMci7ZFU++EZLMlx108I5TiWpUkaFNBieTL89Dfd2V6yIj9/r/p4tSeCm+ftwo
vwFjEVQJbnZT6QuLK1mzT8XI/70qOCDUWdcs/MimzJHTwisKAaQZ/nGlzMoWMvk5
yzxvWLMwsIIqh8eEJ2qsPeihj1gUQu17VA/S+FPaD9dnxhciC/DVMdFzjoKS8HLe
DpFVq6O6QYm2+g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:08 2026 by rpki-client