Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: f0s6pRwRqnysW2YvI9Ps0zemapHpt6cYJHO/Rhi6rbY=
Subject key identifier: E9:41:D0:87:DF:EC:DF:75:DB:00:D6:EF:D4:60:2F:E1:BE:92:F5:46
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019D25BA414A35EFA73689AC59F3708D0A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 1896
Signing time: Wed 25 Mar 2026 16:00:56 +0000
Manifest this update: Wed 25 Mar 2026 16:00:56 +0000
Manifest next update: Thu 26 Mar 2026 16:00:56 +0000
Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=)
2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=)
3: 6gcDsJpxsKX0PxtnBH4T97xLx9M.roa (hash: hIekIZFh7o66l7NKTjbYJTeEDYrlWcQFjp4xOD1i0cs=)
4: LVPO8JZfNdJa2U5Ik8I34YcEOUA.roa (hash: p6JxXEEX7qFpTZe35bHvc23RUvTVNt4iONQ/5P6VF/A=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: 8vIV3dqkTZ/LNC1R0wZqSxOdUMtMmBHTK7PEhhCYGRc=)
6: tXrrUP_TFy0LZMX_c9DSBUiK_1g.roa (hash: IqdNMmp5ttOJAyhkpsC/dBhKLWgRCKvww/+kSgvGp08=)
7: vXfLmPKQvq8Xsk8o-7vsGcFAvdA.roa (hash: JskXRzeILl7MbBJ3/C+4HYyn6osGgL+SJwbO/w3txgs=)
8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:41:4a:35:ef:a7:36:89:ac:59:f3:70:8d:0a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Mar 25 16:00:56 2026 GMT
Not After : Mar 26 16:00:56 2026 GMT
Subject: CN=e941d087dfecdf75db00d6efd4602fe1be92f546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:a4:31:4b:55:79:ce:78:0b:23:86:e7:69:
20:9a:5d:22:7b:a3:97:44:9a:2a:07:48:a3:c0:07:
bf:e6:f5:5b:c2:98:4b:0e:ea:ba:9b:90:6d:23:f7:
39:52:ca:6b:a7:d1:0e:46:9f:75:d2:f9:f8:92:97:
19:ef:b2:c8:47:75:b8:ee:d3:bc:92:40:c6:d7:5a:
90:3c:a5:b6:14:cf:3b:54:24:e1:c1:36:8a:4c:26:
f7:a8:36:84:25:28:c5:38:b9:46:b5:c3:3d:46:23:
50:e7:32:4f:f2:d1:cd:7c:23:3e:e9:8a:27:26:30:
52:6d:08:60:e3:79:f0:66:8f:fe:49:90:00:51:4e:
92:77:fd:24:14:3d:26:8d:39:6d:0c:c4:7d:0f:cc:
6e:54:ff:6b:38:ae:ef:b8:c1:3b:de:6f:37:2d:f4:
e1:31:39:53:cc:5a:9f:8e:86:2e:43:25:eb:2d:3e:
e8:91:bb:da:c0:0b:74:f3:c9:4a:8e:58:d3:fa:b1:
f7:36:3d:f0:de:a2:0d:e7:19:02:2a:b5:36:97:dd:
bf:c9:3d:2a:9b:04:f7:dc:55:a4:d1:9d:11:6b:bc:
cf:0e:a0:8e:26:1d:ac:e5:2d:4c:ab:5f:11:16:68:
dc:e5:ca:d4:42:04:0e:9b:f9:49:ab:c1:06:2a:95:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:41:D0:87:DF:EC:DF:75:DB:00:D6:EF:D4:60:2F:E1:BE:92:F5:46
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:34:b3:b7:cf:a8:3f:cb:56:08:93:13:be:da:9a:98:59:22:
1a:99:2c:a3:a4:51:e0:fe:1d:24:43:d9:99:3a:b5:f4:96:18:
d6:07:c9:73:22:83:6e:90:54:4d:07:19:19:74:48:21:c3:44:
28:a9:dd:a8:f8:82:b0:92:9d:0d:f3:5c:c9:ad:8b:64:5d:b5:
f2:9f:38:be:df:4b:12:a9:16:ff:2d:43:84:d2:93:29:f9:82:
a5:73:6d:ee:d6:01:6d:0b:0d:e0:b1:36:d6:0e:ad:1b:d8:aa:
94:9b:96:54:30:da:13:83:be:d7:02:29:27:c4:8f:c6:eb:c5:
1b:4c:c7:47:d9:0e:75:eb:2e:2e:9c:26:5d:2f:ad:95:63:23:
2c:fc:5a:62:e3:39:6b:78:b4:25:63:ab:a8:6f:96:5e:73:24:
6c:55:1e:0e:36:ac:e9:1f:0c:aa:8c:8d:5b:79:f3:dd:7d:91:
c9:23:ff:34:5e:ca:5e:dc:2e:5d:84:22:57:5b:a0:f7:a0:40:
f9:d3:44:5e:83:93:15:7b:07:53:22:84:11:c8:17:ce:a8:67:
45:15:9f:e7:e7:76:fd:86:f3:57:a6:b4:9c:73:19:58:5c:89:
1f:1e:25:41:d2:d1:ed:43:ba:fd:84:59:9b:6f:fd:cc:c2:f1:
0b:bc:25:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lukFKNe+nNomsWfNwjQqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5
NjZkNDIwHhcNMjYwMzI1MTYwMDU2WhcNMjYwMzI2MTYwMDU2WjAzMTEwLwYDVQQD
EyhlOTQxZDA4N2RmZWNkZjc1ZGIwMGQ2ZWZkNDYwMmZlMWJlOTJmNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFykMUtVec54CyOG52kgml0ie6OX
RJoqB0ijwAe/5vVbwphLDuq6m5BtI/c5Usprp9EORp910vn4kpcZ77LIR3W47tO8
kkDG11qQPKW2FM87VCThwTaKTCb3qDaEJSjFOLlGtcM9RiNQ5zJP8tHNfCM+6Yon
JjBSbQhg43nwZo/+SZAAUU6Sd/0kFD0mjTltDMR9D8xuVP9rOK7vuME73m83LfTh
MTlTzFqfjoYuQyXrLT7okbvawAt088lKjljT+rH3Nj3w3qIN5xkCKrU2l92/yT0q
mwT33FWk0Z0Ra7zPDqCOJh2s5S1Mq18RFmjc5crUQgQOm/lJq8EGKpUYAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlB0Iff7N912wDW79RgL+G+kvVGMB8GA1UdIwQY
MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt
NDY2ZTljYWI3ODY0LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0
LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDSzt8+o
P8tWCJMTvtqamFkiGpkso6RR4P4dJEPZmTq19JYY1gfJcyKDbpBUTQcZGXRIIcNE
KKndqPiCsJKdDfNcya2LZF218p84vt9LEqkW/y1DhNKTKfmCpXNt7tYBbQsN4LE2
1g6tG9iqlJuWVDDaE4O+1wIpJ8SPxuvFG0zHR9kOdesuLpwmXS+tlWMjLPxaYuM5
a3i0JWOrqG+WXnMkbFUeDjas6R8MqoyNW3nz3X2RySP/NF7KXtwuXYQiV1ug96BA
+dNEXoOTFXsHUyKEEcgXzqhnRRWf5+d2/YbzV6a0nHMZWFyJHx4lQdLR7UO6/YRZ
m2/9zMLxC7wlbw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:26:10 2026 by rpki-client