Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: hjzuRqLXR0XWdo8xH+uJE7gEbX4QmiOSItp3e0ADAwM=
Subject key identifier: 3E:8C:33:AB:99:72:FA:F3:F5:7E:F1:5D:1D:5C:C2:AD:A1:1A:F6:1B
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019D2AE12D23EFDEB331005C067670EE012E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 15D1
Signing time: Thu 26 Mar 2026 16:01:33 +0000
Manifest this update: Thu 26 Mar 2026 16:01:33 +0000
Manifest next update: Fri 27 Mar 2026 16:01:33 +0000
Files and hashes: 1: P8plIkyK6-WuYhWZxeWDqVB7a_c.roa (hash: gqqEmeyJKHVYzAhKUFpmuQoKv1vSqMH75dr97tljCyo=)
2: ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa (hash: /95XUisimBxRniA8xsATdtoTuinBvyYV4aukwLkPKtI=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: MH0TO6kpYd/mFILcZtu0JEeGrMzifDFMfe8uKhriGoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:2d:23:ef:de:b3:31:00:5c:06:76:70:ee:01:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Mar 26 16:01:33 2026 GMT
Not After : Mar 27 16:01:33 2026 GMT
Subject: CN=3e8c33ab9972faf3f57ef15d1d5cc2ada11af61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:a8:84:ea:4f:83:db:72:d5:bd:c2:ca:63:
cc:18:90:ff:72:41:d6:3d:3e:21:35:27:5b:d6:a5:
47:61:6d:72:71:61:2a:ab:84:7a:9b:76:99:c5:ff:
cd:26:57:ab:d5:6d:72:d8:d7:a2:bd:44:1f:e8:72:
30:e9:ad:4b:72:d3:c3:3e:77:d6:f4:8d:61:52:fc:
c6:90:de:c3:27:7c:6d:75:dc:f9:73:20:04:54:ca:
de:4b:e3:21:ed:af:da:d5:fb:bf:ca:5c:5e:5f:cc:
35:c8:7a:88:12:98:49:f3:c9:19:81:bd:bc:6e:45:
ae:5d:f7:ff:72:17:52:ab:a6:a7:3b:cb:11:16:05:
08:0b:da:fe:76:5d:8a:e7:8a:2f:95:c6:2d:60:83:
be:e5:f8:42:e2:fd:cf:95:fc:47:9b:b7:7b:ff:09:
4f:71:6f:3f:39:34:f3:f0:d3:9d:4e:f9:8f:4d:17:
a6:f4:af:7d:c3:ee:23:34:ed:2b:9c:fc:82:b0:52:
02:75:03:76:a3:33:ad:0b:3b:aa:2a:12:c6:12:a0:
c4:44:ec:be:cd:26:14:dc:a0:22:fa:10:9e:01:be:
f5:2c:4c:52:ab:86:b6:29:5f:a2:25:9c:8d:18:85:
6b:f4:27:81:53:8c:00:1b:e3:ef:2e:06:02:09:c0:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8C:33:AB:99:72:FA:F3:F5:7E:F1:5D:1D:5C:C2:AD:A1:1A:F6:1B
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b6:58:27:90:ef:9f:bb:ae:5d:2f:42:c3:ca:a2:1f:c7:12:
18:4f:a1:1a:dc:af:63:14:52:3f:6d:31:3d:3d:7d:e1:f9:ef:
5a:14:c2:2b:ae:25:e1:22:68:89:15:cf:be:5a:ba:6e:46:a6:
29:fb:a2:19:e8:21:1f:28:13:f7:13:5f:e0:19:e0:58:69:9a:
47:25:7c:87:47:2d:8f:86:4d:62:f7:f7:94:da:de:c3:29:1f:
c0:4d:6c:97:99:c1:db:9c:fb:a5:cb:cf:29:24:53:1e:aa:03:
30:79:54:6f:58:78:61:cb:3e:a8:59:d5:63:1f:a7:e1:e9:de:
d9:5c:e1:7b:db:ca:de:bb:ef:e3:e0:23:be:6c:7a:91:28:f4:
e2:6e:41:8e:56:f9:19:d4:81:98:72:e0:35:4d:d7:91:1b:f0:
34:ed:f9:ae:d4:85:23:a2:da:5e:72:21:dd:c5:ba:9a:4b:fd:
af:b0:ac:99:73:9b:6a:27:30:02:57:60:a6:99:55:74:59:fd:
ed:80:f2:97:56:8d:3c:0c:f2:08:cf:0a:34:f4:e8:4a:3b:f8:
05:98:53:39:62:4c:17:c7:00:84:a2:aa:a4:49:d3:02:fb:c3:
bc:af:30:41:ef:ea:bf:fd:08:da:9b:25:ca:46:17:d7:4d:5f:
d4:8a:bb:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4S0j796zMQBcBnZw7gEuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1
ZGY1MTQwHhcNMjYwMzI2MTYwMTMzWhcNMjYwMzI3MTYwMTMzWjAzMTEwLwYDVQQD
EygzZThjMzNhYjk5NzJmYWYzZjU3ZWYxNWQxZDVjYzJhZGExMWFmNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynKohOpPg9ty1b3CymPMGJD/ckHW
PT4hNSdb1qVHYW1ycWEqq4R6m3aZxf/NJler1W1y2NeivUQf6HIw6a1LctPDPnfW
9I1hUvzGkN7DJ3xtddz5cyAEVMreS+Mh7a/a1fu/ylxeX8w1yHqIEphJ88kZgb28
bkWuXff/chdSq6anO8sRFgUIC9r+dl2K54ovlcYtYIO+5fhC4v3PlfxHm7d7/wlP
cW8/OTTz8NOdTvmPTRem9K99w+4jNO0rnPyCsFICdQN2ozOtCzuqKhLGEqDEROy+
zSYU3KAi+hCeAb71LExSq4a2KV+iJZyNGIVr9CeBU4wAG+PvLgYCCcBH7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6MM6uZcvrz9X7xXR1cwq2hGvYbMB8GA1UdIwQY
MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt
MTRjNTkwZmVjN2UzLzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz
LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbZYJ5Dv
n7uuXS9Cw8qiH8cSGE+hGtyvYxRSP20xPT194fnvWhTCK64l4SJoiRXPvlq6bkam
KfuiGeghHygT9xNf4BngWGmaRyV8h0ctj4ZNYvf3lNrewykfwE1sl5nB25z7pcvP
KSRTHqoDMHlUb1h4Ycs+qFnVYx+n4ene2Vzhe9vK3rvv4+Ajvmx6kSj04m5Bjlb5
GdSBmHLgNU3XkRvwNO35rtSFI6LaXnIh3cW6mkv9r7CsmXObaicwAldgpplVdFn9
7YDyl1aNPAzyCM8KNPToSjv4BZhTOWJMF8cAhKKqpEnTAvvDvK8wQe/qv/0I2psl
ykYX101f1Iq7ww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:32:10 2026 by rpki-client