Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: iQNFfYZUARCvEfKNO+jpX2XphNraV/1/BBVy7WNtW1w=
Subject key identifier: 18:B9:D4:FF:23:DE:63:F5:27:4E:03:DE:35:9A:DD:BD:C2:33:2B:44
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 01A0D7CC848A5F6697D818FEAFD38C824A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0FFC
Signing time: Fri 25 Sep 2026 09:01:39 +0000
Manifest this update: Fri 25 Sep 2026 09:01:39 +0000
Manifest next update: Sat 26 Sep 2026 09:01:39 +0000
Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: b0vBCt/JOO0PW+xGd/SKckC0uVHqyH3ICxb5fd+oXlQ=)
2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=)
3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=)
4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:84:8a:5f:66:97:d8:18:fe:af:d3:8c:82:4a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Sep 25 09:01:39 2026 GMT
Not After : Sep 26 09:01:39 2026 GMT
Subject: CN=18b9d4ff23de63f5274e03de359addbdc2332b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:07:3f:e0:59:e4:b2:75:e5:9c:47:f8:a5:
3f:ac:ab:7c:be:e3:71:7f:cf:bd:1f:07:d6:36:74:
9e:7a:d8:88:fa:66:db:f6:72:bf:50:a9:4a:25:d2:
8b:f6:1e:d7:bb:a4:a1:10:61:5b:be:f0:8d:88:5a:
33:18:6d:2e:ed:4f:ac:dd:6d:c0:47:74:d9:1c:41:
ed:d8:7e:9e:6a:78:ae:29:a3:f4:f5:94:34:20:55:
60:d2:78:44:78:02:00:33:51:72:38:1b:68:9d:bf:
ed:46:b2:04:cf:ea:b5:b0:a4:56:97:d7:0b:ba:6f:
11:da:b0:73:25:29:f3:53:30:34:1e:d9:60:bd:62:
fe:99:a6:32:23:53:92:ed:35:a5:fb:3f:7c:3d:17:
28:2d:d7:83:31:a8:4f:7c:fe:3c:45:34:83:d5:0a:
34:a8:84:b1:6c:0e:e0:7a:90:c7:c2:91:6c:fa:1a:
ab:c8:eb:10:20:b3:80:b9:e7:45:04:d1:20:63:d5:
97:64:a8:b1:93:bb:56:e1:74:f5:a9:9b:87:9c:53:
db:b3:43:43:06:b2:54:3e:e6:41:5c:a9:b3:e0:9e:
44:71:ed:50:34:12:73:c4:b5:28:52:b2:ba:d3:67:
9c:7c:aa:de:c4:d7:67:84:69:fb:71:91:72:91:75:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B9:D4:FF:23:DE:63:F5:27:4E:03:DE:35:9A:DD:BD:C2:33:2B:44
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ee:d5:25:cd:c8:c1:6b:5c:83:21:0b:56:bc:e3:78:ca:fd:
23:64:69:f3:7c:5f:ff:23:9d:e0:8a:65:fd:15:f8:22:17:44:
d1:44:fc:2a:55:6a:90:34:13:c1:e0:4f:56:0f:22:b1:bb:e7:
0d:bc:9b:49:8d:ef:c6:bc:c6:ca:ec:a9:48:86:51:b8:bd:2b:
ab:76:1f:64:7b:4b:d2:4c:7a:d0:b6:91:3a:74:57:5b:a7:02:
d2:eb:b2:25:e4:c4:13:83:a5:fb:90:5c:47:07:63:6a:0a:14:
cf:d8:f8:3f:89:65:39:87:39:90:cf:49:5d:8f:00:22:4a:e9:
52:b9:a3:e4:4f:8d:85:c3:1f:5d:70:c8:32:3c:43:05:55:f6:
c1:93:4e:2b:11:38:98:5c:1e:b9:31:ad:18:6c:3f:f8:00:32:
9e:ce:11:44:8a:7d:51:28:55:5d:ea:d2:7d:54:31:f2:64:45:
0b:a0:b9:27:4d:ff:fb:c0:00:79:1c:db:50:c1:63:9f:43:a2:
18:d9:98:7b:e5:a4:49:6e:59:f7:e3:c2:b3:73:cb:3a:93:e1:
ad:c9:f7:24:bb:ab:a9:06:e8:08:de:21:92:61:92:f8:34:16:
c2:a3:09:68:11:c3:92:3e:3f:d1:ea:18:86:f7:38:8d:e2:1e:
33:85:d4:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzISKX2aX2Bj+r9OMgkqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOWEyNTFlNWQxZDNiYWJlNGM1NzljOTFlYjNlMGFjMzdm
N2JmMmEwHhcNMjYwOTI1MDkwMTM5WhcNMjYwOTI2MDkwMTM5WjAzMTEwLwYDVQQD
EygxOGI5ZDRmZjIzZGU2M2Y1Mjc0ZTAzZGUzNTlhZGRiZGMyMzMyYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30kHP+BZ5LJ15ZxH+KU/rKt8vuNx
f8+9HwfWNnSeetiI+mbb9nK/UKlKJdKL9h7Xu6ShEGFbvvCNiFozGG0u7U+s3W3A
R3TZHEHt2H6eaniuKaP09ZQ0IFVg0nhEeAIAM1FyOBtonb/tRrIEz+q1sKRWl9cL
um8R2rBzJSnzUzA0HtlgvWL+maYyI1OS7TWl+z98PRcoLdeDMahPfP48RTSD1Qo0
qISxbA7gepDHwpFs+hqryOsQILOAuedFBNEgY9WXZKixk7tW4XT1qZuHnFPbs0ND
BrJUPuZBXKmz4J5Ece1QNBJzxLUoUrK602ecfKrexNdnhGn7cZFykXXrRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBi51P8j3mP1J04D3jWa3b3CMytEMB8GA1UdIwQY
MBaAFDuaJR5dHTur5MV5yR6z4Kw3978qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAt
YzY2MzJjYzAxNGIwLzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAtYzY2MzJjYzAxNGIw
LzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAou7VJc3I
wWtcgyELVrzjeMr9I2Rp83xf/yOd4Ipl/RX4IhdE0UT8KlVqkDQTweBPVg8isbvn
DbybSY3vxrzGyuypSIZRuL0rq3YfZHtL0kx60LaROnRXW6cC0uuyJeTEE4Ol+5Bc
RwdjagoUz9j4P4llOYc5kM9JXY8AIkrpUrmj5E+NhcMfXXDIMjxDBVX2wZNOKxE4
mFweuTGtGGw/+AAyns4RRIp9UShVXerSfVQx8mRFC6C5J03/+8AAeRzbUMFjn0Oi
GNmYe+WkSW5Z9+PCs3PLOpPhrcn3JLurqQboCN4hkmGS+DQWwqMJaBHDkj4/0eoY
hvc4jeIeM4XUHw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:57:44 2026 by rpki-client