Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: xAGdn/3YZVGAgXFvEz7cVC65gJUDm+1iegiVSQsIt7k=
Subject key identifier: E3:FA:49:C5:8C:09:A2:CA:43:5E:A9:07:1F:C2:30:12:8F:A9:3C:34
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 01A0FDFEA8B8827408DE8B1EA5C505DA99F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 1A82
Signing time: Fri 02 Oct 2026 19:01:59 +0000
Manifest this update: Fri 02 Oct 2026 19:01:59 +0000
Manifest next update: Sat 03 Oct 2026 19:01:59 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: JdOcnKtHYyL5hP5Yt51gmzsja7tD41BMzqWY9ap58Qs=)
2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:fe:a8:b8:82:74:08:de:8b:1e:a5:c5:05:da:99:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Oct 2 19:01:59 2026 GMT
Not After : Oct 3 19:01:59 2026 GMT
Subject: CN=e3fa49c58c09a2ca435ea9071fc230128fa93c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:2e:28:73:94:b5:f5:c9:8c:67:e5:1e:c3:
b4:d4:b6:70:bb:76:6f:d2:d4:76:b9:fd:0d:cf:77:
55:c0:89:b1:86:9e:c5:2a:d7:90:bf:ac:fd:7b:da:
cf:6a:d7:78:6f:a9:3f:18:9f:c2:22:df:a4:19:5d:
6c:51:65:80:c4:e6:b7:cc:ec:d9:dc:1b:81:b4:49:
65:e8:91:f1:52:8c:16:99:a2:71:b0:e9:d4:4f:4c:
48:b2:ab:37:37:54:e5:a6:b5:e8:71:b4:b6:52:89:
ca:98:cf:9c:87:09:96:3e:bb:1b:fc:10:c0:44:ca:
e0:ac:4a:50:14:39:8c:eb:3e:76:e8:b3:13:c6:bf:
e5:47:e1:b4:0b:fc:f4:be:cd:4f:fd:b0:ae:3f:fc:
ac:95:4a:79:eb:bc:40:9a:d6:3a:63:ea:07:a1:83:
f3:b2:36:cd:a2:a6:c4:2b:d7:a9:b9:72:c4:18:ab:
0b:a7:12:3f:2e:33:5d:ce:6f:11:b2:f1:be:31:77:
1f:cf:22:81:c1:13:af:f0:2b:da:58:99:7d:4c:c2:
cd:cd:0f:be:01:da:d3:29:be:63:40:80:ad:a3:91:
ec:e5:2d:fb:f7:03:66:39:0d:51:38:0a:eb:92:84:
2d:c3:d4:a4:37:16:3d:ec:0c:d8:a8:8e:f9:e8:fe:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FA:49:C5:8C:09:A2:CA:43:5E:A9:07:1F:C2:30:12:8F:A9:3C:34
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:59:2f:dc:7b:96:f5:69:d5:36:b9:0a:c5:1c:09:1c:1d:ba:
0f:01:06:78:07:b6:ea:c3:67:d6:4d:c9:d3:e8:25:c3:d2:83:
28:70:62:28:30:0f:39:a5:b5:b0:f3:5d:1f:6a:4c:58:d6:68:
2c:aa:6b:a3:c9:6f:27:91:76:ae:f0:7c:7a:7c:b0:4b:72:33:
a8:69:22:98:54:fa:41:6f:a5:c6:9c:43:a7:c3:bd:a0:7e:72:
03:98:d1:13:2e:14:06:d8:f6:96:8f:55:0e:ae:cf:4e:f0:dd:
5d:48:19:7d:d3:71:52:21:27:e1:d1:d6:c0:0d:7b:dc:b7:30:
51:78:59:f0:a3:2c:e7:d1:d7:8d:05:0d:2f:88:62:47:68:0c:
a4:67:2f:12:8f:20:d2:3c:90:bb:ef:e4:00:ac:68:18:db:37:
af:a0:40:15:6f:e1:98:17:c0:5e:aa:a1:e1:43:72:5e:6a:65:
48:e8:66:55:5d:4d:97:2e:b5:95:e7:01:92:95:a1:16:e8:7a:
e0:60:d4:af:51:a9:09:91:18:64:61:55:38:65:78:b9:b5:80:
0c:36:d6:4a:a4:5d:ae:c4:79:67:46:ce:f7:9b:3c:ee:60:b6:
33:f5:4e:bc:e1:32:b0:5e:52:5a:30:19:bf:2f:2d:1d:d7:d7:
2e:f5:00:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD9/qi4gnQI3osepcUF2pnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNjhlNTQ2MGRiYTU4NzFkYmU1MjMyMTQ4NDM5ZTIxNWIy
OWJkNDQwHhcNMjYxMDAyMTkwMTU5WhcNMjYxMDAzMTkwMTU5WjAzMTEwLwYDVQQD
EyhlM2ZhNDljNThjMDlhMmNhNDM1ZWE5MDcxZmMyMzAxMjhmYTkzYzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2kuKHOUtfXJjGflHsO01LZwu3Zv
0tR2uf0Nz3dVwImxhp7FKteQv6z9e9rPatd4b6k/GJ/CIt+kGV1sUWWAxOa3zOzZ
3BuBtEll6JHxUowWmaJxsOnUT0xIsqs3N1TlprXocbS2UonKmM+chwmWPrsb/BDA
RMrgrEpQFDmM6z526LMTxr/lR+G0C/z0vs1P/bCuP/yslUp567xAmtY6Y+oHoYPz
sjbNoqbEK9epuXLEGKsLpxI/LjNdzm8RsvG+MXcfzyKBwROv8CvaWJl9TMLNzQ++
AdrTKb5jQICto5Hs5S379wNmOQ1ROArrkoQtw9SkNxY97AzYqI756P57BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOP6ScWMCaLKQ16pBx/CMBKPqTw0MB8GA1UdIwQY
MBaAFDto5UYNulhx2+UjIUhDniFbKb1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWIt
MDU1MTEyNTYwZmM5LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWItMDU1MTEyNTYwZmM5
LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlkv3HuW
9WnVNrkKxRwJHB26DwEGeAe26sNn1k3J0+glw9KDKHBiKDAPOaW1sPNdH2pMWNZo
LKpro8lvJ5F2rvB8enywS3IzqGkimFT6QW+lxpxDp8O9oH5yA5jREy4UBtj2lo9V
Dq7PTvDdXUgZfdNxUiEn4dHWwA173LcwUXhZ8KMs59HXjQUNL4hiR2gMpGcvEo8g
0jyQu+/kAKxoGNs3r6BAFW/hmBfAXqqh4UNyXmplSOhmVV1Nly61lecBkpWhFuh6
4GDUr1GpCZEYZGFVOGV4ubWADDbWSqRdrsR5Z0bO95s87mC2M/VOvOEysF5SWjAZ
vy8tHdfXLvUAyw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 06:18:38 2026 by rpki-client