Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: 35lHgaol6rQyRYHlyK+G2oD+SookBsfViCkGrrpXOKg=
Subject key identifier: D5:19:B3:95:35:32:F0:64:DB:22:32:25:61:19:A1:D9:BE:6A:AE:01
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 01A0D53941BA3EE2CA596DD2ACF649B87673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0FA3
Signing time: Thu 24 Sep 2026 21:01:34 +0000
Manifest this update: Thu 24 Sep 2026 21:01:34 +0000
Manifest next update: Fri 25 Sep 2026 21:01:34 +0000
Files and hashes: 1: LkRlWvjojGp88ImWjfx2Z3qaOy4.roa (hash: kB89kqUtMQKcyA7jSVcONA2ZKYzA7LpbjPMFFP5OhVw=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: 0jnbJfidjoUnhrkxyH/ucnh2dGyWrd/wEWm4AT38BKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:41:ba:3e:e2:ca:59:6d:d2:ac:f6:49:b8:76:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Sep 24 21:01:34 2026 GMT
Not After : Sep 25 21:01:34 2026 GMT
Subject: CN=d519b3953532f064db2232256119a1d9be6aae01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:69:d7:98:86:35:d2:1f:59:03:5c:d0:fa:
c2:8b:43:71:d5:b1:2e:a2:b5:a4:9c:ed:16:94:cb:
b5:ee:2f:5a:c5:f4:59:46:3a:16:8d:82:5e:5f:63:
d8:3a:27:d0:00:53:b2:f9:3a:b1:76:a7:34:68:57:
82:c8:5b:2d:3b:49:d2:f8:35:a0:9c:3a:8e:00:26:
77:4d:63:c9:7a:35:b5:51:da:df:36:10:93:0e:60:
8a:03:64:5c:f1:bf:fc:48:3d:63:9b:cf:e6:a5:19:
be:02:73:1d:75:90:01:bb:c8:b9:7e:2f:46:fe:32:
2f:1f:f5:0d:30:cb:ba:79:e9:72:54:30:f0:fa:49:
53:6a:9a:69:f0:98:04:47:12:2b:cc:f7:1f:eb:e5:
31:e6:05:00:27:f9:86:69:10:2c:5d:2d:a1:96:b1:
dd:72:4f:94:55:e4:c6:5d:7d:fd:f8:78:1a:ce:80:
b0:ba:1d:56:9e:87:ab:c6:e4:60:a0:b2:b3:0f:36:
83:d8:6e:37:31:ed:ff:5b:06:92:69:98:a7:b2:17:
d5:25:30:b3:a8:1b:0d:95:ab:33:3c:be:df:19:be:
d9:cb:fc:47:ae:32:21:7b:f3:22:c5:b9:21:ac:4b:
91:18:02:34:c7:a9:a1:a4:94:c0:b8:04:c8:b6:70:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:19:B3:95:35:32:F0:64:DB:22:32:25:61:19:A1:D9:BE:6A:AE:01
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:37:bc:8f:f7:67:d8:ae:0a:ba:f5:6e:64:c9:e7:9f:c8:9c:
01:5a:da:18:74:e8:58:e9:b9:d8:10:a8:43:56:8a:49:69:46:
f9:f6:a1:37:4f:2c:c6:44:be:ee:1d:0f:e1:ed:ce:65:53:f2:
54:31:b6:eb:cc:0d:fd:56:a5:16:1f:d5:2e:28:00:30:41:fb:
3e:04:c0:5d:78:40:97:ab:ab:eb:bb:e2:36:80:9f:7d:bf:b0:
0f:ee:5e:ce:cb:6a:6d:55:46:b4:13:51:72:75:3c:74:fb:32:
60:16:93:52:09:fb:82:1c:49:ed:0d:3c:9b:cf:8a:e0:e1:a8:
7e:81:8e:76:be:c1:62:84:33:a2:79:c4:82:ba:a9:aa:7a:6e:
3c:b3:74:11:50:34:bc:0b:6b:4f:62:90:72:70:1b:4e:27:33:
7c:fe:81:29:f8:f2:e9:e8:b5:f0:09:7f:63:27:fb:3a:f6:00:
a7:5d:aa:3c:d2:42:97:b6:40:43:42:e2:fe:3c:83:51:f5:a2:
9a:ec:23:39:d9:3c:4c:90:ed:04:73:11:8f:d9:1d:c8:3a:54:
62:7c:39:59:fa:d3:68:92:7f:88:11:86:d4:e8:b8:5f:4b:47:
8f:f7:8f:f7:18:7f:a7:25:bb:39:10:ca:b8:72:56:7f:c5:e6:
a3:b7:ea:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVOUG6PuLKWW3SrPZJuHZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTgyZWU5YWExMTA2ZWQ3MjBkNjNjMzg0NGU2NjY0NDBl
MzQ0MzgwHhcNMjYwOTI0MjEwMTM0WhcNMjYwOTI1MjEwMTM0WjAzMTEwLwYDVQQD
EyhkNTE5YjM5NTM1MzJmMDY0ZGIyMjMyMjU2MTE5YTFkOWJlNmFhZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNVp15iGNdIfWQNc0PrCi0Nx1bEu
orWknO0WlMu17i9axfRZRjoWjYJeX2PYOifQAFOy+Tqxdqc0aFeCyFstO0nS+DWg
nDqOACZ3TWPJejW1UdrfNhCTDmCKA2Rc8b/8SD1jm8/mpRm+AnMddZABu8i5fi9G
/jIvH/UNMMu6eelyVDDw+klTappp8JgERxIrzPcf6+Ux5gUAJ/mGaRAsXS2hlrHd
ck+UVeTGXX39+HgazoCwuh1WnoerxuRgoLKzDzaD2G43Me3/WwaSaZinshfVJTCz
qBsNlaszPL7fGb7Zy/xHrjIhe/MixbkhrEuRGAI0x6mhpJTAuATItnB1LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUZs5U1MvBk2yIyJWEZodm+aq4BMB8GA1UdIwQY
MBaAFKOoLumqEQbtcg1jw4ROZmRA40Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jNzIwYjQtMWFjYi00NzAzLWJjMjQt
NDY3ZTAwOWRhZWQwLzEvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9jNzIwYjQtMWFjYi00NzAzLWJjMjQtNDY3ZTAwOWRhZWQw
LzEvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTe8j/dn
2K4KuvVuZMnnn8icAVraGHToWOm52BCoQ1aKSWlG+fahN08sxkS+7h0P4e3OZVPy
VDG268wN/ValFh/VLigAMEH7PgTAXXhAl6ur67viNoCffb+wD+5ezstqbVVGtBNR
cnU8dPsyYBaTUgn7ghxJ7Q08m8+K4OGofoGOdr7BYoQzonnEgrqpqnpuPLN0EVA0
vAtrT2KQcnAbTiczfP6BKfjy6ei18Al/Yyf7OvYAp12qPNJCl7ZAQ0Li/jyDUfWi
muwjOdk8TJDtBHMRj9kdyDpUYnw5WfrTaJJ/iBGG1Oi4X0tHj/eP9xh/pyW7ORDK
uHJWf8Xmo7fqzw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:30:46 2026 by rpki-client