
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
File: O849R0p3XOR3Y3FjK8GWyh9Owjs.mft (raw, json)
Hash identifier: KYar7uc83DeOqO+WSGBCq9PE3fbVmdscmXXOZtI7OE0=
Subject key identifier: C7:24:F5:51:FA:5D:DF:EB:C4:9C:0C:3D:23:61:5F:1D:F8:F2:CD:8A
Authority key identifier: 3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
Certificate issuer: /CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Certificate serial: 01A0F83281D519CC7256CCC14F35899A917B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
Manifest number: 071B
Signing time: Thu 01 Oct 2026 16:00:54 +0000
Manifest this update: Thu 01 Oct 2026 16:00:54 +0000
Manifest next update: Fri 02 Oct 2026 16:00:54 +0000
Files and hashes: 1: O849R0p3XOR3Y3FjK8GWyh9Owjs.crl (hash: 7NVcoeki4rj3YTbfuiZtT6e0Y0sFkrS/7mlUhaoWHRo=)
2: VbL2QWZ9Kg8L1pE36SvfZYyr8Ts.roa (hash: sfB+nZS7Puz64duDQmVXVvH/Ydql31OyVDJAMGHxmwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:32:81:d5:19:cc:72:56:cc:c1:4f:35:89:9a:91:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Validity
Not Before: Oct 1 16:00:54 2026 GMT
Not After : Oct 2 16:00:54 2026 GMT
Subject: CN=c724f551fa5ddfebc49c0c3d23615f1df8f2cd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:5c:d5:c9:05:bc:eb:95:13:37:39:72:d1:
e4:0d:47:90:ac:fc:d4:3b:1b:9f:88:be:9e:70:43:
58:b4:5a:3a:00:a7:a3:84:77:82:b8:e4:ee:fd:12:
52:1c:ff:81:34:af:68:b3:ca:0b:1d:1c:70:b3:9e:
bd:86:8e:b5:d1:a4:fb:2f:62:42:4d:ad:f9:19:4c:
6e:d3:62:00:1e:5f:f7:ee:8d:86:bb:c0:88:78:90:
ba:e5:1d:fd:a7:28:55:8f:92:5a:d9:53:bf:3f:bc:
e7:a3:74:a2:3b:0a:b9:0c:fb:a9:79:71:97:a1:ee:
08:49:a4:06:75:e1:a1:59:4d:f8:e0:4b:3c:61:13:
32:4f:c2:88:2d:e8:5a:11:10:f7:f3:7b:66:73:60:
f8:e7:03:82:1c:ad:2b:40:f9:64:6c:f0:69:b3:13:
63:64:d4:4b:81:fb:1e:e8:84:92:64:d8:04:a1:ad:
36:ec:c7:77:87:89:3a:a5:d4:99:b3:3a:60:34:29:
d8:45:15:c6:1e:5c:88:28:a7:e5:d7:2d:30:f8:5d:
61:44:c4:9d:fb:8d:30:4d:0d:bf:6a:c2:0c:54:ed:
bf:2e:24:c0:1c:7b:90:a0:7b:58:57:f3:ac:2b:15:
44:1f:4e:db:2c:a9:ce:9e:f9:6f:eb:37:2a:2b:27:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:24:F5:51:FA:5D:DF:EB:C4:9C:0C:3D:23:61:5F:1D:F8:F2:CD:8A
X509v3 Authority Key Identifier:
keyid:3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:0d:4d:a3:14:52:53:8c:54:87:ab:c5:7f:ce:01:89:15:ec:
16:0a:f3:db:d6:b6:76:9d:46:ae:be:c4:f2:8a:39:22:87:59:
97:1f:9c:48:65:f4:e7:97:c6:d2:ac:7b:48:0c:3b:3a:f3:c6:
39:4f:00:51:ea:31:a2:3f:0e:74:b9:51:f6:72:b6:83:e9:d7:
4a:4c:2d:de:f0:19:35:f1:bd:47:d7:cf:80:20:18:f2:b5:9d:
48:c7:04:ca:65:8f:09:44:d5:dc:cd:1a:aa:5b:ee:57:ab:08:
b9:34:02:00:e3:84:69:17:b8:a0:ee:7f:fe:02:ea:b7:50:35:
2b:ee:4a:58:57:84:27:2f:09:f4:83:c2:65:15:d1:bf:44:9d:
85:2d:b1:d0:30:c3:0a:5b:b4:a8:be:37:a5:0b:7a:e5:96:b6:
b5:5a:8b:23:61:10:aa:16:f5:79:a4:0f:1a:b6:b0:f9:32:cb:
47:57:45:65:c8:ee:30:e6:f6:12:44:fe:54:6c:c5:3a:ce:d0:
e6:52:33:a6:9b:f8:c0:83:57:25:85:65:d2:10:5d:32:9c:27:
fb:36:91:37:1f:2f:81:9c:a5:e0:2d:91:46:9c:8d:17:eb:7c:
e9:72:48:f5:5c:f8:c7:ad:3d:83:d2:03:f2:b2:14:1c:3e:5b:
cb:2c:81:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD4MoHVGcxyVszBTzWJmpF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2UzZDQ3NGE3NzVjZTQ3NzYzNzE2MzJiYzE5NmNhMWY0
ZWMyM2IwHhcNMjYxMDAxMTYwMDU0WhcNMjYxMDAyMTYwMDU0WjAzMTEwLwYDVQQD
EyhjNzI0ZjU1MWZhNWRkZmViYzQ5YzBjM2QyMzYxNWYxZGY4ZjJjZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMRc1ckFvOuVEzc5ctHkDUeQrPzU
OxufiL6ecENYtFo6AKejhHeCuOTu/RJSHP+BNK9os8oLHRxws569ho610aT7L2JC
Ta35GUxu02IAHl/37o2Gu8CIeJC65R39pyhVj5Ja2VO/P7zno3SiOwq5DPupeXGX
oe4ISaQGdeGhWU344Es8YRMyT8KILehaERD383tmc2D45wOCHK0rQPlkbPBpsxNj
ZNRLgfse6ISSZNgEoa027Md3h4k6pdSZszpgNCnYRRXGHlyIKKfl1y0w+F1hRMSd
+40wTQ2/asIMVO2/LiTAHHuQoHtYV/OsKxVEH07bLKnOnvlv6zcqKyekAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMck9VH6Xd/rxJwMPSNhXx348s2KMB8GA1UdIwQY
MBaAFDvOPUdKd1zkd2NxYyvBlsofTsI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81MzM4YmQtZjMyMS00ZDUxLWJlNGEt
NjNjYzZjNjdjOTk1LzEvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni81MzM4YmQtZjMyMS00ZDUxLWJlNGEtNjNjYzZjNjdjOTk1
LzEvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3A1NoxRS
U4xUh6vFf84BiRXsFgrz29a2dp1Grr7E8oo5IodZlx+cSGX055fG0qx7SAw7OvPG
OU8AUeoxoj8OdLlR9nK2g+nXSkwt3vAZNfG9R9fPgCAY8rWdSMcEymWPCUTV3M0a
qlvuV6sIuTQCAOOEaRe4oO5//gLqt1A1K+5KWFeEJy8J9IPCZRXRv0SdhS2x0DDD
Clu0qL43pQt65Za2tVqLI2EQqhb1eaQPGraw+TLLR1dFZcjuMOb2EkT+VGzFOs7Q
5lIzppv4wINXJYVl0hBdMpwn+zaRNx8vgZyl4C2RRpyNF+t86XJI9Vz4x609g9ID
8rIUHD5byyyBzA==
-----END CERTIFICATE-----
Generated at Thu Oct 1 21:01:29 2026 by rpki-client