Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
File: O33D0CKCjk9bNr3vehiwuwz7rgk.mft (raw, json)
Hash identifier: cD7nb0nJwBH386j6x2dni4Ulbd4uIZgfejDTdaIk34I=
Subject key identifier: 42:26:A3:3C:02:77:9C:30:8F:07:80:E8:66:91:17:E5:18:4F:E8:23
Authority key identifier: 3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
Certificate issuer: /CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Certificate serial: 019D333E8E2FCF46A62230DD04D0D9E6996C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
Manifest number: 10A1
Signing time: Sat 28 Mar 2026 07:00:30 +0000
Manifest this update: Sat 28 Mar 2026 07:00:30 +0000
Manifest next update: Sun 29 Mar 2026 07:00:30 +0000
Files and hashes: 1: CJjsxGugLLvFbEHWxKghiGCE6lc.roa (hash: cOhc+r4MNkPP5359GE1QtRWPIxNlJ+rMixUIriIgwqM=)
2: O33D0CKCjk9bNr3vehiwuwz7rgk.crl (hash: XdVv/voqLI5MSozzhM50H32oEh0Tx5W3e0jid45kSlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:8e:2f:cf:46:a6:22:30:dd:04:d0:d9:e6:99:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Validity
Not Before: Mar 28 07:00:30 2026 GMT
Not After : Mar 29 07:00:30 2026 GMT
Subject: CN=4226a33c02779c308f0780e8669117e5184fe823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:99:c9:95:5b:88:02:71:79:84:fa:9e:73:
04:0d:a5:ad:90:f7:48:0f:72:39:a2:8e:07:e1:81:
a7:90:f4:4c:7b:38:8e:47:77:44:c5:0d:16:52:55:
b0:42:54:29:5e:0c:5d:99:33:a0:84:ff:1e:82:37:
af:f5:93:58:3c:da:cb:7b:ac:e2:79:d2:57:37:31:
fd:e8:36:96:17:3c:ed:f5:18:b4:fc:df:0a:a1:9e:
a4:3a:e4:5a:ab:98:20:48:b9:40:5a:0c:85:94:66:
71:48:42:83:57:97:b8:aa:fd:5e:fb:4c:b2:0c:37:
09:9a:6d:2c:fe:70:ff:db:7b:82:ae:a7:47:8c:03:
d3:6c:1b:94:14:d0:94:51:d0:e5:0e:2c:df:11:86:
1e:e8:3e:22:5e:8f:7c:4e:cb:2b:b1:58:5c:68:70:
8f:fa:84:e2:c5:11:cd:9f:9e:12:c7:bb:35:e6:97:
3f:37:45:ef:b4:ab:79:73:52:ce:f6:48:7b:27:89:
e4:04:59:ed:eb:9f:aa:b8:e5:6a:c4:9f:f2:b0:89:
82:1c:cd:41:78:4a:c0:11:2d:40:ec:8c:8f:94:d4:
80:93:fe:aa:1c:40:83:bd:c0:54:80:55:d6:5d:45:
60:f8:ed:d4:7a:51:8e:4b:bd:29:56:45:8e:91:f6:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:26:A3:3C:02:77:9C:30:8F:07:80:E8:66:91:17:E5:18:4F:E8:23
X509v3 Authority Key Identifier:
keyid:3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3c:61:3c:2c:c6:31:4b:5c:e0:c4:f3:be:23:94:e2:2c:41:
b0:fc:3d:16:99:34:2a:f1:c5:c5:d7:72:44:e8:ea:19:b5:1e:
20:6c:65:08:49:62:d4:ec:f4:e3:ab:49:a6:13:f0:c0:9d:01:
2d:12:a4:f7:46:c3:ca:3a:37:c4:a0:91:e4:33:be:e1:6a:13:
0c:6b:22:74:d8:a2:7a:b2:e2:c6:78:94:1e:13:18:51:c5:91:
cb:fc:e2:4a:11:f7:06:57:6c:e6:72:d1:fc:87:de:fa:ed:ea:
10:43:f1:aa:a6:28:d3:2a:38:be:82:50:81:c8:13:19:93:0e:
92:31:f7:90:7c:15:76:10:2f:22:51:ca:4d:01:1c:56:94:3e:
d3:22:d7:e9:b9:b2:fe:fc:08:3b:7b:60:db:2f:9c:0f:e8:fc:
6e:77:11:58:56:b6:89:21:c1:e8:73:94:e5:3d:55:b2:59:4e:
ce:ab:5a:83:dc:ec:31:02:4b:d2:4d:50:68:2a:7b:e8:94:0b:
34:0a:63:30:25:0e:32:91:e4:68:8a:87:d1:46:11:ae:6d:1b:
a7:ff:c5:04:54:37:c5:11:ff:6b:ec:04:a1:91:1a:ab:bb:b1:
bf:cf:b6:87:b5:7a:a6:f7:ea:0a:49:34:55:a6:36:14:21:39:
6a:2f:7a:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPo4vz0amIjDdBNDZ5plsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiN2RjM2QwMjI4MjhlNGY1YjM2YmRlZjdhMThiMGJiMGNm
YmFlMDkwHhcNMjYwMzI4MDcwMDMwWhcNMjYwMzI5MDcwMDMwWjAzMTEwLwYDVQQD
Eyg0MjI2YTMzYzAyNzc5YzMwOGYwNzgwZTg2NjkxMTdlNTE4NGZlODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUmZyZVbiAJxeYT6nnMEDaWtkPdI
D3I5oo4H4YGnkPRMeziOR3dExQ0WUlWwQlQpXgxdmTOghP8egjev9ZNYPNrLe6zi
edJXNzH96DaWFzzt9Ri0/N8KoZ6kOuRaq5ggSLlAWgyFlGZxSEKDV5e4qv1e+0yy
DDcJmm0s/nD/23uCrqdHjAPTbBuUFNCUUdDlDizfEYYe6D4iXo98TssrsVhcaHCP
+oTixRHNn54Sx7s15pc/N0XvtKt5c1LO9kh7J4nkBFnt65+quOVqxJ/ysImCHM1B
eErAES1A7IyPlNSAk/6qHECDvcBUgFXWXUVg+O3UelGOS70pVkWOkfY2awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEImozwCd5wwjweA6GaRF+UYT+gjMB8GA1UdIwQY
MBaAFDt9w9Aigo5PWza973oYsLsM+64JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzMzRDBDS0NqazliTnIzdmVoaXd1d3o3cmdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80ZWYwMmMtOGY4ZC00NmUzLThkMGIt
NzE5NDhlM2M5YWQ0LzEvTzMzRDBDS0NqazliTnIzdmVoaXd1d3o3cmdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80ZWYwMmMtOGY4ZC00NmUzLThkMGItNzE5NDhlM2M5YWQ0
LzEvTzMzRDBDS0NqazliTnIzdmVoaXd1d3o3cmdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDxhPCzG
MUtc4MTzviOU4ixBsPw9Fpk0KvHFxddyROjqGbUeIGxlCEli1Oz046tJphPwwJ0B
LRKk90bDyjo3xKCR5DO+4WoTDGsidNiierLixniUHhMYUcWRy/ziShH3Blds5nLR
/Ife+u3qEEPxqqYo0yo4voJQgcgTGZMOkjH3kHwVdhAvIlHKTQEcVpQ+0yLX6bmy
/vwIO3tg2y+cD+j8bncRWFa2iSHB6HOU5T1VsllOzqtag9zsMQJL0k1QaCp76JQL
NApjMCUOMpHkaIqH0UYRrm0bp//FBFQ3xRH/a+wEoZEaq7uxv8+2h7V6pvfqCkk0
VaY2FCE5ai96lw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:02:25 2026 by rpki-client