Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: EbMZ/pwYet8pnOhGY8P7bBcb3M/+1Nc4pL6dxR104Xw=
Subject key identifier: E9:92:BF:0D:D9:71:01:CE:02:23:5D:57:83:B1:DC:3C:27:29:7C:4B
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 01A0E2508727B43B53863D04CE01FD979CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 12F7
Signing time: Sun 27 Sep 2026 10:02:03 +0000
Manifest this update: Sun 27 Sep 2026 10:02:03 +0000
Manifest next update: Mon 28 Sep 2026 10:02:03 +0000
Files and hashes: 1: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: VMj6qas+myYaeB93trG1C3i87WrZOaCVF8/H+BEN6vg=)
2: tRrojmCf6GIHy7rOSc8HEorjdDM.roa (hash: P8uZJNdgJmiR9RNimT+TldXg8dI9zNVaN+cuOggU5GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:50:87:27:b4:3b:53:86:3d:04:ce:01:fd:97:9c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Sep 27 10:02:03 2026 GMT
Not After : Sep 28 10:02:03 2026 GMT
Subject: CN=e992bf0dd97101ce02235d5783b1dc3c27297c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:e0:dc:92:f3:a1:96:3a:c5:f0:1f:e7:7f:
ef:a3:02:69:79:e1:26:ed:13:a9:e5:2d:6f:e5:34:
5c:6f:34:13:9f:c0:90:90:9f:a1:b3:9e:92:34:6d:
65:34:a4:81:4a:dc:65:1a:f7:8f:95:d9:63:04:33:
75:42:e5:de:49:b8:1e:f7:d8:41:9d:f6:81:f7:42:
df:83:9b:aa:11:03:bc:17:e7:19:3f:81:93:40:a2:
f7:a3:7a:29:fb:a4:0c:dd:05:4e:b6:b6:68:3d:58:
c1:ca:8d:bd:8c:95:ef:9c:ff:89:3a:56:2f:ba:96:
e4:9e:ea:74:54:27:0a:31:f6:e7:89:21:fd:e0:f0:
34:ee:b7:1a:a1:9e:0b:a3:97:e6:b6:8b:a2:57:b6:
7c:c7:cd:9f:1a:62:dc:77:10:c6:1e:9d:8e:92:e4:
71:a0:6e:45:e2:0a:aa:3f:8b:58:0c:af:76:7d:8c:
0e:de:e3:1d:e1:6a:2e:79:eb:fa:4c:59:a5:4a:1a:
1d:85:26:96:62:89:71:9e:a4:30:79:28:50:26:a6:
79:9e:11:11:ae:18:cd:3f:29:da:61:be:86:68:73:
42:2c:fd:16:5f:dd:d4:32:a3:a8:d9:32:47:e0:d1:
b6:37:c5:66:bc:f7:ad:97:ae:d6:8d:af:bc:17:29:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:BF:0D:D9:71:01:CE:02:23:5D:57:83:B1:DC:3C:27:29:7C:4B
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ef:b9:99:23:71:84:34:d4:66:6b:4c:b2:8e:f4:fc:4b:a0:
81:41:30:5a:04:5b:ed:c8:5a:c4:93:17:8e:7e:20:b7:48:15:
5b:38:f9:cc:cd:70:64:68:95:cd:ab:30:d7:9c:18:f9:47:7e:
19:7b:49:e4:c0:e3:23:15:ce:e9:fe:10:0e:40:08:41:32:ce:
ae:61:1c:b5:37:5d:76:09:cf:86:e4:d5:96:97:cb:c6:e9:c2:
74:dc:e0:94:5b:0d:f3:39:73:dd:a0:6f:3f:ac:f3:0c:3e:ea:
6c:81:53:8b:a2:8a:54:41:dd:d8:49:3a:fe:e2:03:c6:d3:62:
e1:25:02:c9:2c:b5:31:a0:0a:30:c0:0e:56:6a:50:fa:e9:6b:
12:cb:95:1c:97:a5:b0:6f:13:84:d7:17:8f:1f:90:17:38:43:
43:01:23:f4:ae:74:c1:cf:d1:a4:b7:04:49:ea:5e:58:d7:7b:
dc:d6:6d:df:1c:c7:03:f5:28:de:53:49:6b:07:a9:b7:a5:dc:
41:1a:6b:32:c5:29:62:48:e8:74:b2:38:a8:07:73:b2:bb:c5:
67:92:da:ab:ec:f3:52:11:18:2d:06:20:b8:4c:d2:0f:46:8b:
16:f0:17:37:50:95:d6:1e:e2:fd:09:d6:67:ec:f8:60:03:f3:
a6:03:7b:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDiUIcntDtThj0EzgH9l5z3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj
Y2ZlNzUwHhcNMjYwOTI3MTAwMjAzWhcNMjYwOTI4MTAwMjAzWjAzMTEwLwYDVQQD
EyhlOTkyYmYwZGQ5NzEwMWNlMDIyMzVkNTc4M2IxZGMzYzI3Mjk3YzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt7g3JLzoZY6xfAf53/vowJpeeEm
7ROp5S1v5TRcbzQTn8CQkJ+hs56SNG1lNKSBStxlGvePldljBDN1QuXeSbge99hB
nfaB90Lfg5uqEQO8F+cZP4GTQKL3o3op+6QM3QVOtrZoPVjByo29jJXvnP+JOlYv
upbknup0VCcKMfbniSH94PA07rcaoZ4Lo5fmtouiV7Z8x82fGmLcdxDGHp2OkuRx
oG5F4gqqP4tYDK92fYwO3uMd4Woueev6TFmlShodhSaWYolxnqQweShQJqZ5nhER
rhjNPynaYb6GaHNCLP0WX93UMqOo2TJH4NG2N8VmvPetl67Wja+8FylyiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmSvw3ZcQHOAiNdV4Ox3DwnKXxLMB8GA1UdIwQY
MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt
ZDQxZmY4NTg2MThhLzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDItZDQxZmY4NTg2MThh
LzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf++5mSNx
hDTUZmtMso70/EuggUEwWgRb7chaxJMXjn4gt0gVWzj5zM1wZGiVzasw15wY+Ud+
GXtJ5MDjIxXO6f4QDkAIQTLOrmEctTdddgnPhuTVlpfLxunCdNzglFsN8zlz3aBv
P6zzDD7qbIFTi6KKVEHd2Ek6/uIDxtNi4SUCySy1MaAKMMAOVmpQ+ulrEsuVHJel
sG8ThNcXjx+QFzhDQwEj9K50wc/RpLcESepeWNd73NZt3xzHA/Uo3lNJawept6Xc
QRprMsUpYkjodLI4qAdzsrvFZ5Laq+zzUhEYLQYguEzSD0aLFvAXN1CV1h7i/QnW
Z+z4YAPzpgN7bg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:34:39 2026 by rpki-client