Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json)
Hash identifier: 3aJ9bfC7tQ8BEyNDdXZ7+Jv3/rT9jAbhHATAc5adruo=
Subject key identifier: E7:35:33:93:78:CD:F3:42:44:7E:05:C5:60:D8:76:52:E1:15:BF:05
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 019D26CD048D8F2722E5CADA8F4C32A748D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
Manifest number: 17B8
Signing time: Wed 25 Mar 2026 21:01:03 +0000
Manifest this update: Wed 25 Mar 2026 21:01:03 +0000
Manifest next update: Thu 26 Mar 2026 21:01:03 +0000
Files and hashes: 1: 2zvlLx0eZAbOYhxgIyqrlDoVC1g.roa (hash: KQYOWqTXbXwvtekOLsVc2rxud/hR8A87QDGRubzzTXw=)
2: 4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa (hash: Cbb+P8Z0r4y6AjDJgLqHTENuD/Go8wmcnnMVwTktU/4=)
3: D757pdeWdoida8GHOUdKTXVzQLA.roa (hash: 9oAemx2TPMquAep4lORrFPAoBV6BakfDEYxe+lt7IJE=)
4: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: 09kuO28ENXHX1vI2nQqqHZtFlAa94KNKRo3eCdTtKeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:04:8d:8f:27:22:e5:ca:da:8f:4c:32:a7:48:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Mar 25 21:01:03 2026 GMT
Not After : Mar 26 21:01:03 2026 GMT
Subject: CN=e735339378cdf342447e05c560d87652e115bf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:48:08:ab:1d:d4:2b:48:7e:90:08:18:d7:
72:00:22:be:dd:a8:23:e5:7d:0c:f5:07:9c:ff:45:
09:e9:9c:ce:00:52:2b:fe:a7:ca:86:ee:6f:80:28:
46:7c:f5:32:6d:46:91:7b:98:5a:3f:b2:f9:5c:28:
6a:cb:7a:c3:28:93:a6:f4:ed:cf:c7:6c:8f:85:16:
6b:e5:44:0a:75:00:3b:38:37:84:52:19:d7:ca:7a:
05:20:c9:9f:4e:86:f3:85:03:59:87:50:ff:11:07:
1a:c0:d1:67:ac:c4:f4:3c:78:fd:80:14:76:d1:c6:
d0:84:50:86:06:3a:88:99:10:5a:4a:a8:60:99:7c:
0d:e2:97:61:44:ef:5c:47:f9:f9:d3:21:ff:d7:bb:
7a:c4:96:60:d8:ed:e5:45:73:9f:c8:41:25:e2:38:
d4:d2:83:7e:93:da:49:e3:f2:18:32:09:71:28:c1:
e1:49:63:3f:6f:28:1d:d7:d9:00:b9:96:ce:6f:64:
da:21:d8:52:fa:03:df:50:88:16:72:bf:90:f7:ac:
e9:d2:b3:56:cd:24:2f:a4:98:5e:2c:45:e4:6e:b3:
17:da:67:46:e4:1f:17:82:e9:63:92:8f:c9:f6:9e:
f8:8b:af:32:4d:3b:69:4a:d8:ae:d4:32:25:eb:33:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:35:33:93:78:CD:F3:42:44:7E:05:C5:60:D8:76:52:E1:15:BF:05
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5a:73:46:ac:27:b6:ff:01:21:e1:23:a7:54:97:ca:bf:f8:
04:42:f4:04:fb:86:1c:a5:dd:84:e3:8d:9c:5b:20:4d:e0:4c:
38:58:67:84:f0:72:bc:e9:da:cb:ba:fa:0e:d1:93:3f:2d:53:
95:c5:d7:1f:19:ba:06:cb:13:72:ff:15:f8:6e:05:ed:8a:ce:
1b:32:47:6f:71:81:a7:0a:82:52:41:17:4c:02:db:76:46:e5:
bb:77:b7:c1:fa:9c:bd:67:36:af:8a:ec:48:15:28:d0:6c:a5:
fa:2e:b5:1e:82:0b:34:83:7f:7a:08:98:61:bd:13:d5:b3:83:
73:62:eb:67:a8:6d:51:d8:94:5c:ea:6e:6b:01:92:4b:1b:7c:
d7:78:be:18:e6:9e:a0:37:ed:ea:09:83:b8:a0:cc:5a:c6:f3:
6a:6c:c7:27:95:7a:55:e0:0f:41:fa:f0:c8:f3:da:1a:39:55:
b5:af:fa:4d:aa:1c:c6:b4:cd:4b:50:47:2c:ac:c0:00:7e:0f:
36:75:7b:c0:2a:22:6f:59:0a:d4:09:21:9c:51:df:28:41:27:
c3:99:75:c4:6e:8f:69:23:a7:73:da:b1:6b:86:46:9f:6b:14:
5a:bb:9d:bf:77:5e:d0:bd:66:0b:78:d0:6b:17:0d:31:5d:55:
e8:f9:1c:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzQSNjyci5craj0wyp0jZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx
Y2FmYTQwHhcNMjYwMzI1MjEwMTAzWhcNMjYwMzI2MjEwMTAzWjAzMTEwLwYDVQQD
EyhlNzM1MzM5Mzc4Y2RmMzQyNDQ3ZTA1YzU2MGQ4NzY1MmUxMTViZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQNICKsd1CtIfpAIGNdyACK+3agj
5X0M9Qec/0UJ6ZzOAFIr/qfKhu5vgChGfPUybUaRe5haP7L5XChqy3rDKJOm9O3P
x2yPhRZr5UQKdQA7ODeEUhnXynoFIMmfTobzhQNZh1D/EQcawNFnrMT0PHj9gBR2
0cbQhFCGBjqImRBaSqhgmXwN4pdhRO9cR/n50yH/17t6xJZg2O3lRXOfyEEl4jjU
0oN+k9pJ4/IYMglxKMHhSWM/bygd19kAuZbOb2TaIdhS+gPfUIgWcr+Q96zp0rNW
zSQvpJheLEXkbrMX2mdG5B8Xguljko/J9p74i68yTTtpStiu1DIl6zOgcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc1M5N4zfNCRH4FxWDYdlLhFb8FMB8GA1UdIwQY
MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt
MGU3MjQxNmI0ZGM3LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3
LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVpzRqwn
tv8BIeEjp1SXyr/4BEL0BPuGHKXdhOONnFsgTeBMOFhnhPByvOnay7r6DtGTPy1T
lcXXHxm6BssTcv8V+G4F7YrOGzJHb3GBpwqCUkEXTALbdkblu3e3wfqcvWc2r4rs
SBUo0Gyl+i61HoILNIN/egiYYb0T1bODc2LrZ6htUdiUXOpuawGSSxt813i+GOae
oDft6gmDuKDMWsbzamzHJ5V6VeAPQfrwyPPaGjlVta/6TaocxrTNS1BHLKzAAH4P
NnV7wCoib1kK1AkhnFHfKEEnw5l1xG6PaSOnc9qxa4ZGn2sUWrudv3de0L1mC3jQ
axcNMV1V6PkcHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:10 2026 by rpki-client