Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
File: C_O8-guoLZPRT4VYcCen53NRGmE.mft (raw, json)
Hash identifier: abViSVH6t2pC/BRjB0P+DXIjz4rAjl6TOsWedKI2FGI=
Subject key identifier: D2:9B:38:AB:C0:91:81:A5:65:D9:C9:92:4D:83:49:BB:88:7E:EE:98
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Certificate issuer: /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial: 01A1DFBA1CB08B301E67F6B04D4F23ABF758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
Manifest number: 0A7E
Signing time: Sun 15 Nov 2026 15:01:18 +0000
Manifest this update: Sun 15 Nov 2026 15:01:18 +0000
Manifest next update: Mon 16 Nov 2026 15:01:18 +0000
Files and hashes: 1: C_O8-guoLZPRT4VYcCen53NRGmE.crl (hash: FmPU3MrnbZaN+Ces0hsRXeqykxj2DNiUvRt3SNXX+kY=)
2: yfnlg-tNJYqqOyWJj67EGZSv6yo.roa (hash: KnHV4wZ2GDmYibIqluVpP6AfHpgamKHbICtl13z8MtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:1c:b0:8b:30:1e:67:f6:b0:4d:4f:23:ab:f7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Validity
Not Before: Nov 15 15:01:18 2026 GMT
Not After : Nov 16 15:01:18 2026 GMT
Subject: CN=d29b38abc09181a565d9c9924d8349bb887eee98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:12:d0:ac:fd:b0:72:a5:bf:16:78:7e:2f:
62:4b:d3:b5:41:63:b4:57:fb:31:2b:f1:cd:ea:64:
82:50:72:ca:fa:62:65:cb:b7:2a:9e:f3:27:67:88:
6c:2a:41:5b:03:e7:88:fd:9b:91:49:3d:f5:01:e4:
75:2d:5e:e2:15:d3:1f:a2:03:07:3d:52:c9:23:e9:
2d:60:17:86:f6:be:d4:78:0c:06:29:ea:42:66:d2:
7a:66:2c:68:52:9a:b3:8b:d0:63:22:1b:25:cf:5d:
7e:02:e6:f4:4c:bd:c4:80:20:28:63:f5:76:03:c6:
0e:f1:e4:8f:90:d4:fd:ae:21:65:11:50:c0:26:fd:
75:d2:16:c0:11:8a:07:ef:40:cc:9b:11:db:01:c6:
a0:f0:b1:1c:4a:72:56:ed:39:d3:42:62:4c:e1:97:
01:7a:df:88:b0:82:0b:b5:3a:1a:cc:6c:bc:05:ff:
41:7c:fb:f6:87:a3:63:5e:97:e0:ca:0a:11:ba:cd:
e3:8c:17:1d:a9:b8:ba:2a:eb:a8:87:c0:ac:80:a3:
d8:34:ff:ad:31:f9:b0:3b:8f:c0:1d:a5:53:28:ad:
fd:45:89:84:f0:d1:f3:4a:f6:9f:84:bc:0e:5c:84:
5c:b3:8b:0f:fd:da:16:28:54:dd:e1:4f:ad:44:6a:
1f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9B:38:AB:C0:91:81:A5:65:D9:C9:92:4D:83:49:BB:88:7E:EE:98
X509v3 Authority Key Identifier:
keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f1:29:f1:c6:af:38:52:c9:ff:17:c9:d5:2a:89:c6:fe:9a:
60:e1:85:43:a7:94:bb:17:0a:21:e4:4f:53:1c:1e:3e:6a:00:
66:c0:e2:2f:66:4e:49:45:23:9b:09:98:ab:de:a8:ac:fe:d8:
db:ab:1c:52:ea:98:ec:f0:df:e7:c3:a2:6c:75:fe:e4:ce:9b:
4d:c3:d7:21:26:a4:70:a7:1c:31:d9:0f:bb:9c:72:5f:82:89:
cc:b7:15:ae:ca:17:05:03:db:de:af:35:1c:48:e1:d3:c9:4b:
f6:67:ca:41:ea:c7:2b:c6:6b:41:39:9f:44:0a:1e:50:56:ed:
51:05:03:be:30:cb:82:4a:e2:20:94:5b:44:ce:bb:ba:ef:74:
a4:28:2c:d3:8b:5b:33:71:08:18:9b:66:a7:f0:6c:55:4e:1e:
5f:43:53:73:85:d2:8a:ed:b9:62:5f:db:f2:88:3f:6a:77:f7:
a8:02:8b:dd:67:b4:d8:c3:9d:e9:c4:d7:03:a1:92:ca:ed:45:
99:47:3a:cd:0b:22:4b:54:54:87:70:57:7c:49:1d:9e:12:0f:
52:ed:f8:49:79:e4:76:a9:86:af:cc:45:b0:fc:fe:92:12:49:
28:fc:78:9d:b6:85:71:cb:d0:3c:1e:50:b9:7e:e5:f6:24:2d:
6a:12:a5:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfuhywizAeZ/awTU8jq/dYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjNiY2ZhMGJhODJkOTNkMTRmODU1ODcwMjdhN2U3NzM1
MTFhNjEwHhcNMjYxMTE1MTUwMTE4WhcNMjYxMTE2MTUwMTE4WjAzMTEwLwYDVQQD
EyhkMjliMzhhYmMwOTE4MWE1NjVkOWM5OTI0ZDgzNDliYjg4N2VlZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvngS0Kz9sHKlvxZ4fi9iS9O1QWO0
V/sxK/HN6mSCUHLK+mJly7cqnvMnZ4hsKkFbA+eI/ZuRST31AeR1LV7iFdMfogMH
PVLJI+ktYBeG9r7UeAwGKepCZtJ6ZixoUpqzi9BjIhslz11+Aub0TL3EgCAoY/V2
A8YO8eSPkNT9riFlEVDAJv110hbAEYoH70DMmxHbAcag8LEcSnJW7TnTQmJM4ZcB
et+IsIILtToazGy8Bf9BfPv2h6NjXpfgygoRus3jjBcdqbi6Kuuoh8CsgKPYNP+t
MfmwO4/AHaVTKK39RYmE8NHzSvafhLwOXIRcs4sP/doWKFTd4U+tRGof/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKbOKvAkYGlZdnJkk2DSbuIfu6YMB8GA1UdIwQY
MBaAFAvzvPoLqC2T0U+FWHAnp+dzURphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUt
YTYzMzEyNWI3ZTIzLzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUtYTYzMzEyNWI3ZTIz
LzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/Ep8cav
OFLJ/xfJ1SqJxv6aYOGFQ6eUuxcKIeRPUxwePmoAZsDiL2ZOSUUjmwmYq96orP7Y
26scUuqY7PDf58OibHX+5M6bTcPXISakcKccMdkPu5xyX4KJzLcVrsoXBQPb3q81
HEjh08lL9mfKQerHK8ZrQTmfRAoeUFbtUQUDvjDLgkriIJRbRM67uu90pCgs04tb
M3EIGJtmp/BsVU4eX0NTc4XSiu25Yl/b8og/anf3qAKL3We02MOd6cTXA6GSyu1F
mUc6zQsiS1RUh3BXfEkdnhIPUu34SXnkdqmGr8xFsPz+khJJKPx4nbaFccvQPB5Q
uX7l9iQtahKlOw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:44:56 2026 by rpki-client