Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: k0rDmrHOinlp75zG3Bt6GyqJJdc6lXQrpWuRhUiHj0g=
Subject key identifier: 60:98:20:F3:3D:DA:7A:7C:48:A0:FD:4D:16:88:C9:BF:76:2C:98:43
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 01A1DDCC06E1E6C1F1DB6D78FDBD4E96D970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 119D
Signing time: Sun 15 Nov 2026 06:01:38 +0000
Manifest this update: Sun 15 Nov 2026 06:01:38 +0000
Manifest next update: Mon 16 Nov 2026 06:01:38 +0000
Files and hashes: 1: 5EPEfFcq0_CQJyJv8NvlTXW122s.roa (hash: shP8Ed/HPJC3iktLjU3AhfJDqjBPIc4NQ5VyPIH2+gA=)
2: HoguhPYctq53_NeJpwMiGGaEYHE.roa (hash: 2Rg4I4psfcDKa015Nd8h+FBbuNVy5CBZXEFltS4HBbg=)
3: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: 8jTKivg3Vl7WPCf68LVtrN03aF9W8aX3PbXTTdZAMmA=)
4: jqg60u3udEXldRsO6lvjcjKURzE.roa (hash: kW26aKoDuoF4wJ1FRfJ1sSmndtvHSr/VmE5hX9cRIqU=)
5: xkVE7KUdk3_Gxthu42EOBxgV05Q.roa (hash: OLCiaU+AVFxgMEa5gMdkqLSxOFCgu1RCocNrX9T3asM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:06:e1:e6:c1:f1:db:6d:78:fd:bd:4e:96:d9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Nov 15 06:01:38 2026 GMT
Not After : Nov 16 06:01:38 2026 GMT
Subject: CN=609820f33dda7a7c48a0fd4d1688c9bf762c9843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:5d:57:34:27:09:b7:bf:74:08:4e:5a:94:
b8:29:86:17:65:f3:4e:e2:eb:ef:97:17:fc:c3:fe:
69:9e:df:6b:22:81:53:ca:cf:ef:34:1f:87:38:f2:
c4:51:8b:03:67:01:f0:db:b9:5e:c2:7d:2b:dd:4e:
36:a8:98:08:cf:f6:64:4d:d4:0d:78:b9:8e:90:1e:
54:b3:a4:61:10:2b:fc:3a:9b:ee:23:3a:bf:2c:93:
f3:ca:61:27:ef:73:d6:83:d4:5b:bd:68:a1:6a:c5:
f1:27:0c:eb:98:ef:8b:a1:58:6a:bb:fa:97:03:ee:
f6:0b:fa:14:cd:ec:0d:31:a9:73:a2:34:5c:8a:3d:
1e:46:21:f3:d0:33:4b:09:cf:d4:d7:bd:4c:dd:6b:
4f:4e:f9:82:b6:89:04:28:cf:71:c8:4c:06:12:5a:
71:34:d2:c2:f3:76:fc:22:f3:a4:03:46:e3:a3:54:
6a:73:5d:d0:59:e5:23:f6:50:a7:ab:d4:25:9a:1a:
a9:ce:7c:5e:40:99:b8:fa:24:b5:01:43:e2:ca:b2:
8f:96:a5:0e:25:95:5d:4a:a9:31:2b:cc:6b:80:5f:
47:c3:96:cb:04:2f:1e:6b:b5:9b:7e:7f:df:ae:dc:
be:97:b5:21:8d:1a:7d:7e:3b:ae:6e:9b:ae:f4:fc:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:98:20:F3:3D:DA:7A:7C:48:A0:FD:4D:16:88:C9:BF:76:2C:98:43
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:65:ca:1e:d8:c4:9e:93:d3:76:23:38:b7:5d:20:a7:3a:94:
53:c6:c9:2b:7f:b8:1a:41:a8:9b:3a:44:17:fd:39:71:75:2e:
13:b5:b7:e2:f7:55:8c:cb:cb:c0:ac:bf:d6:fd:ab:a6:40:a5:
32:0b:9e:b7:17:7a:9f:1a:0e:b8:68:60:9e:42:fb:98:ea:4c:
e4:7c:00:94:98:24:8c:bb:5d:87:b8:63:5e:a2:1f:61:e2:30:
22:ac:53:77:7f:74:75:0a:91:db:1a:0c:38:3f:b7:8d:ce:62:
97:78:86:3e:67:6c:44:67:fb:cf:b4:b8:45:c0:e2:18:4b:84:
58:3f:87:3e:6f:79:db:e2:55:a8:15:63:87:de:a8:27:c6:8a:
93:b9:92:76:f5:77:e0:f0:f0:1f:a5:ed:2e:1f:07:8a:de:68:
96:22:83:49:45:3c:34:91:d1:4f:a8:7b:36:be:d1:c9:f7:d6:
91:22:13:ae:7c:d6:bd:a1:42:bb:83:a9:9f:7a:75:87:d0:ca:
0c:79:9c:b9:a2:ae:3e:1c:97:a5:b0:83:83:fe:5f:d8:e3:97:
51:ac:5d:b2:2a:9a:f6:9b:f8:e6:99:c7:eb:90:23:5a:5e:d0:
a2:4c:81:e2:d1:c1:cf:38:07:e5:05:ce:28:7e:79:94:2f:2b:
bc:8d:0b:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdzAbh5sHx2214/b1OltlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNTQ0Y2EwZTJiZTE4ZTlmZDc0ZTI4MTMyNGEzMGIwZWEy
ZDFkNTIwHhcNMjYxMTE1MDYwMTM4WhcNMjYxMTE2MDYwMTM4WjAzMTEwLwYDVQQD
Eyg2MDk4MjBmMzNkZGE3YTdjNDhhMGZkNGQxNjg4YzliZjc2MmM5ODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TJdVzQnCbe/dAhOWpS4KYYXZfNO
4uvvlxf8w/5pnt9rIoFTys/vNB+HOPLEUYsDZwHw27lewn0r3U42qJgIz/ZkTdQN
eLmOkB5Us6RhECv8OpvuIzq/LJPzymEn73PWg9RbvWihasXxJwzrmO+LoVhqu/qX
A+72C/oUzewNMalzojRcij0eRiHz0DNLCc/U171M3WtPTvmCtokEKM9xyEwGElpx
NNLC83b8IvOkA0bjo1Rqc13QWeUj9lCnq9QlmhqpznxeQJm4+iS1AUPiyrKPlqUO
JZVdSqkxK8xrgF9Hw5bLBC8ea7Wbfn/frty+l7UhjRp9fjuubpuu9PykqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCYIPM92np8SKD9TRaIyb92LJhDMB8GA1UdIwQY
MBaAFDtUTKDivhjp/XTigTJKMLDqLR1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEt
ODc2YTlkNzYyOWY2LzEvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEtODc2YTlkNzYyOWY2
LzEvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWXKHtjE
npPTdiM4t10gpzqUU8bJK3+4GkGomzpEF/05cXUuE7W34vdVjMvLwKy/1v2rpkCl
Mguetxd6nxoOuGhgnkL7mOpM5HwAlJgkjLtdh7hjXqIfYeIwIqxTd390dQqR2xoM
OD+3jc5il3iGPmdsRGf7z7S4RcDiGEuEWD+HPm952+JVqBVjh96oJ8aKk7mSdvV3
4PDwH6XtLh8Hit5oliKDSUU8NJHRT6h7Nr7RyffWkSITrnzWvaFCu4Opn3p1h9DK
DHmcuaKuPhyXpbCDg/5f2OOXUaxdsiqa9pv45pnH65AjWl7QokyB4tHBzzgH5QXO
KH55lC8rvI0LIA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:16:18 2026 by rpki-client