Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
File: OXxQHi_zsKtTS0hMOpKNHwk10bE.mft (raw, json)
Hash identifier: hcU10/0BzyoSUvAYtwD9m2P6Ju9G8hwxKEYL75Gh4q0=
Subject key identifier: A1:B4:81:56:6A:4F:E6:29:32:F8:29:19:8D:59:F6:74:DB:E4:7C:B9
Authority key identifier: 39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
Certificate issuer: /CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Certificate serial: 019F9512C650D10CC740E8309E03B411A31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
Manifest number: 0210
Signing time: Fri 24 Jul 2026 17:01:03 +0000
Manifest this update: Fri 24 Jul 2026 17:01:03 +0000
Manifest next update: Sat 25 Jul 2026 17:01:03 +0000
Files and hashes: 1: OXxQHi_zsKtTS0hMOpKNHwk10bE.crl (hash: Xk6gGFuBzIyLiZ7QHczd48dyfi1+URy1z6idRRNy9dw=)
2: gLMnpAvJYDZgw8CMi1ywBPu8HKA.roa (hash: HfvKqfxiDqSfDMKCc4gBb3RHAJZd+tjrpFoCaU5J9O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:c6:50:d1:0c:c7:40:e8:30:9e:03:b4:11:a3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Validity
Not Before: Jul 24 17:01:03 2026 GMT
Not After : Jul 25 17:01:03 2026 GMT
Subject: CN=a1b481566a4fe62932f829198d59f674dbe47cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:00:0f:bb:0f:cd:ef:1f:b9:42:d4:a6:06:
f6:06:a6:a8:d1:39:66:70:88:30:86:5e:46:16:55:
55:07:ea:f1:f6:5a:2d:e6:48:ea:f7:29:27:0b:a6:
56:81:e5:ca:8a:a6:e6:10:8a:74:fc:bc:41:76:d9:
ed:90:2f:3b:30:eb:a3:56:c0:b3:7f:6d:65:19:3c:
34:3a:ff:9c:69:5b:ed:61:11:e1:8a:6d:b5:80:e7:
bd:3e:a0:30:c5:7c:18:6a:67:f9:71:31:e0:58:95:
c8:d3:27:0e:4e:3a:5b:9a:8c:5a:fa:58:ee:79:ba:
8c:9c:24:12:5e:5a:b6:5d:d4:1b:03:27:23:1c:0d:
b7:84:25:32:7a:3b:df:94:0e:d0:45:10:41:8f:ab:
66:6c:56:d2:20:2b:5b:8c:14:c4:7e:2b:e4:82:b1:
ef:20:af:1e:85:95:fc:6b:91:42:cf:69:48:48:de:
5d:f1:19:96:6e:4d:77:3b:d9:4c:03:44:8f:40:37:
f2:73:28:91:87:bd:ba:a1:28:6a:99:d7:a5:e4:fd:
9a:f4:fb:e7:6f:06:d2:71:a2:fa:96:5e:9e:98:93:
97:5a:80:ae:30:ba:e7:7d:62:0f:5e:40:be:bb:06:
25:8a:fe:ea:2a:f9:5f:e8:3f:87:8a:73:31:e3:a7:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B4:81:56:6A:4F:E6:29:32:F8:29:19:8D:59:F6:74:DB:E4:7C:B9
X509v3 Authority Key Identifier:
keyid:39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a8:9f:72:76:1c:6c:db:ad:9d:8c:69:1b:09:29:42:65:ae:
01:1e:ab:3a:e6:49:22:26:be:6d:2b:4d:fe:be:5e:67:26:a3:
30:9f:43:e9:65:56:6f:5c:49:5b:ca:f5:b9:a0:a3:6f:43:d4:
de:ae:7c:97:d9:32:ae:3e:fb:9c:f0:d9:2b:5a:e2:ff:74:8d:
20:d2:4f:81:9c:f7:44:4a:43:27:31:fd:67:51:aa:6c:48:0d:
75:ec:37:3d:bc:3d:67:bf:bd:ee:f8:8a:86:38:11:03:df:e1:
61:eb:ad:e4:cc:1a:16:18:a2:9f:c3:62:05:e7:91:f1:91:e4:
ce:d1:7f:09:2e:df:cb:1a:cf:ff:1f:86:e6:c8:41:41:50:ab:
19:0a:6e:32:21:27:72:b7:c5:4b:bd:d5:b6:4d:5f:51:8f:a4:
61:82:b9:d6:2c:d4:dc:ec:7e:01:6f:cf:2e:f0:a3:72:19:c5:
64:74:d9:dd:da:bc:e1:2c:01:3a:5e:0b:b5:b0:d7:6c:9d:53:
79:1a:68:d5:fa:2c:98:c9:d3:b5:8c:28:31:69:bf:54:39:d3:
87:f4:49:91:de:9c:28:ef:03:65:dd:0e:ba:94:59:28:a3:8d:
12:f3:e1:d3:dc:32:e7:2e:24:b2:3f:f1:8f:09:b8:55:7e:35:
df:7d:9c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEsZQ0QzHQOgwngO0EaMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5N2M1MDFlMmZmM2IwYWI1MzRiNDg0YzNhOTI4ZDFmMDkz
NWQxYjEwHhcNMjYwNzI0MTcwMTAzWhcNMjYwNzI1MTcwMTAzWjAzMTEwLwYDVQQD
EyhhMWI0ODE1NjZhNGZlNjI5MzJmODI5MTk4ZDU5ZjY3NGRiZTQ3Y2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r4AD7sPze8fuULUpgb2Bqao0Tlm
cIgwhl5GFlVVB+rx9lot5kjq9yknC6ZWgeXKiqbmEIp0/LxBdtntkC87MOujVsCz
f21lGTw0Ov+caVvtYRHhim21gOe9PqAwxXwYamf5cTHgWJXI0ycOTjpbmoxa+lju
ebqMnCQSXlq2XdQbAycjHA23hCUyejvflA7QRRBBj6tmbFbSICtbjBTEfivkgrHv
IK8ehZX8a5FCz2lISN5d8RmWbk13O9lMA0SPQDfycyiRh726oShqmdel5P2a9Pvn
bwbScaL6ll6emJOXWoCuMLrnfWIPXkC+uwYliv7qKvlf6D+HinMx46eWXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG0gVZqT+YpMvgpGY1Z9nTb5Hy5MB8GA1UdIwQY
MBaAFDl8UB4v87CrU0tITDqSjR8JNdGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1h4UUhpX3pzS3RUUzBoTU9wS05Id2sxMGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84ZDE0ZDUtODY5Zi00N2YzLTg4YmQt
ZjdhZmNhNWNiMDM0LzEvT1h4UUhpX3pzS3RUUzBoTU9wS05Id2sxMGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC84ZDE0ZDUtODY5Zi00N2YzLTg4YmQtZjdhZmNhNWNiMDM0
LzEvT1h4UUhpX3pzS3RUUzBoTU9wS05Id2sxMGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvaifcnYc
bNutnYxpGwkpQmWuAR6rOuZJIia+bStN/r5eZyajMJ9D6WVWb1xJW8r1uaCjb0PU
3q58l9kyrj77nPDZK1ri/3SNINJPgZz3REpDJzH9Z1GqbEgNdew3Pbw9Z7+97viK
hjgRA9/hYeut5MwaFhiin8NiBeeR8ZHkztF/CS7fyxrP/x+G5shBQVCrGQpuMiEn
crfFS73Vtk1fUY+kYYK51izU3Ox+AW/PLvCjchnFZHTZ3dq84SwBOl4LtbDXbJ1T
eRpo1fosmMnTtYwoMWm/VDnTh/RJkd6cKO8DZd0OupRZKKONEvPh09wy5y4ksj/x
jwm4VX41332c4Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:15 2026 by rpki-client