Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier: Vz2nnaqcldoHSG2IQoY6EqKEXMsLdRWBIkrdHM+GfSE=
Subject key identifier: F3:29:01:2E:78:50:13:A2:B2:38:5B:D5:78:65:53:49:93:CF:63:2C
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial: 01A0F869A1721D5610920A5D7B3C7A7D35D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number: 1A81
Signing time: Thu 01 Oct 2026 17:01:07 +0000
Manifest this update: Thu 01 Oct 2026 17:01:07 +0000
Manifest next update: Fri 02 Oct 2026 17:01:07 +0000
Files and hashes: 1: EMaCwLjxvEjldttSlMrOnwekZ_Y.roa (hash: aBqqe+U1PaVNW6VJZrxz+RRQt4gTnenHJ/Ty1nZ3HHo=)
2: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: 3oKj4bP3awpshn+cONm3QKNUYsLO30wpjx99K7jP4WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:69:a1:72:1d:56:10:92:0a:5d:7b:3c:7a:7d:35:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Validity
Not Before: Oct 1 17:01:07 2026 GMT
Not After : Oct 2 17:01:07 2026 GMT
Subject: CN=f329012e785013a2b2385bd57865534993cf632c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:80:ba:6e:f6:b9:3e:ea:60:96:ac:b9:81:11:
6e:09:70:49:fb:f1:39:68:15:92:88:79:b1:67:63:
23:40:0e:6d:00:0a:b3:08:93:e5:ae:bc:96:2a:91:
e2:ff:f0:b0:e8:c6:13:0b:1d:78:7f:25:1b:c2:96:
fc:ea:77:93:5d:52:69:ea:ba:06:25:13:0f:8a:ea:
81:06:c6:47:4c:5e:26:33:29:14:6f:ac:1e:d3:7d:
ca:50:1d:16:59:ac:91:76:64:d6:a1:cd:84:54:79:
41:f2:9d:58:31:90:16:0f:23:e7:ba:d0:ed:a7:34:
13:3e:78:62:3a:ba:9c:10:4b:81:95:c1:0d:27:86:
17:09:36:52:3e:80:84:3f:06:77:bc:65:f2:f3:e9:
1c:13:65:d8:7d:bc:b0:6c:88:24:03:ed:23:dd:28:
7b:6d:e6:19:a9:9c:e2:02:6c:ca:04:58:9a:c7:f7:
0e:f7:21:47:1d:b1:3e:4d:01:42:ad:f8:bf:af:d6:
e8:35:25:04:62:fc:20:73:89:5c:b1:e5:22:f1:81:
72:e5:4a:d8:cb:e3:03:3b:49:b8:04:ee:5c:70:a9:
06:21:e1:3a:5b:f8:65:c2:d4:4f:1a:7f:6d:c7:cb:
aa:54:2e:19:85:2c:e4:27:b0:d4:2a:6c:d3:dc:50:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:29:01:2E:78:50:13:A2:B2:38:5B:D5:78:65:53:49:93:CF:63:2C
X509v3 Authority Key Identifier:
keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4b:2e:b8:b8:d4:9f:be:47:77:9c:89:21:21:d5:d9:1d:be:
9d:e6:a9:87:6c:db:ad:bb:53:44:01:dd:0b:04:4a:31:1c:3b:
85:15:f6:c1:ca:32:b5:90:8c:f4:ab:e9:bb:93:e5:fc:91:4c:
43:2c:ab:fa:c9:bb:93:5e:fe:e4:41:aa:5a:9a:02:67:e4:02:
ad:d1:14:f2:de:15:63:be:c8:0c:df:f1:f6:29:29:1e:f6:ec:
97:ca:a9:ee:17:0b:06:7a:0f:34:2d:0f:fb:30:c7:ac:81:af:
2e:c4:cf:d8:bf:87:48:41:07:af:c7:5b:8c:f5:7b:15:28:8f:
f3:44:f7:40:11:81:d8:38:ed:60:f2:3f:97:d3:27:df:bd:68:
04:40:df:c9:6c:e2:fe:90:a1:87:5e:d1:94:d3:4c:65:fa:9c:
07:e5:fc:36:c0:e4:42:c7:a6:e5:2c:b4:38:b9:cb:74:3f:bd:
8e:b0:1b:08:ee:a6:05:06:9f:3e:0c:de:a6:35:d0:a2:0d:1b:
a6:c9:c0:ca:b9:06:36:3d:82:a1:86:49:03:48:ed:9a:c5:10:
b8:81:5d:ac:cc:ec:f5:3c:1a:b1:20:e6:ec:2e:0c:25:14:15:
3b:fc:d9:c3:10:75:b4:c8:7e:c0:e1:dc:2d:72:e5:0b:50:eb:
dd:3d:3b:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD4aaFyHVYQkgpdezx6fTXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmM2NDMxZjUzMzNiNmRkZDMxZTgzYjY5NjgyZDhlOGVl
MDZmYzEwHhcNMjYxMDAxMTcwMTA3WhcNMjYxMDAyMTcwMTA3WjAzMTEwLwYDVQQD
EyhmMzI5MDEyZTc4NTAxM2EyYjIzODViZDU3ODY1NTM0OTkzY2Y2MzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oC6bva5Pupglqy5gRFuCXBJ+/E5
aBWSiHmxZ2MjQA5tAAqzCJPlrryWKpHi//Cw6MYTCx14fyUbwpb86neTXVJp6roG
JRMPiuqBBsZHTF4mMykUb6we033KUB0WWayRdmTWoc2EVHlB8p1YMZAWDyPnutDt
pzQTPnhiOrqcEEuBlcENJ4YXCTZSPoCEPwZ3vGXy8+kcE2XYfbywbIgkA+0j3Sh7
beYZqZziAmzKBFiax/cO9yFHHbE+TQFCrfi/r9boNSUEYvwgc4lcseUi8YFy5UrY
y+MDO0m4BO5ccKkGIeE6W/hlwtRPGn9tx8uqVC4ZhSzkJ7DUKmzT3FBuuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMpAS54UBOisjhb1XhlU0mTz2MsMB8GA1UdIwQY
MBaAFDv8ZDH1Mztt3THoO2loLY6O4G/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGIt
ZmUwMWVlYzQwZWMxLzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGItZmUwMWVlYzQwZWMx
LzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEsuuLjU
n75Hd5yJISHV2R2+neaph2zbrbtTRAHdCwRKMRw7hRX2wcoytZCM9Kvpu5Pl/JFM
Qyyr+sm7k17+5EGqWpoCZ+QCrdEU8t4VY77IDN/x9ikpHvbsl8qp7hcLBnoPNC0P
+zDHrIGvLsTP2L+HSEEHr8dbjPV7FSiP80T3QBGB2DjtYPI/l9Mn371oBEDfyWzi
/pChh17RlNNMZfqcB+X8NsDkQsem5Sy0OLnLdD+9jrAbCO6mBQafPgzepjXQog0b
psnAyrkGNj2CoYZJA0jtmsUQuIFdrMzs9TwasSDm7C4MJRQVO/zZwxB1tMh+wOHc
LXLlC1Dr3T07uA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 11:28:21 2026 by rpki-client