Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: 1au6Ht0Cv7NLVIJuubRw9JphNd7qo+0mY98BDyGrAq4=
Subject key identifier: 62:A6:C3:11:D7:1D:43:14:6A:B6:F5:B2:73:F9:81:77:89:EE:A4:4C
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 01A0D4263CA54B19F800CA1208414109FC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 16:01:10 +0000
Manifest this update: Thu 24 Sep 2026 16:01:10 +0000
Manifest next update: Fri 25 Sep 2026 16:01:10 +0000
Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: TzptI4nnaNdKn9uu5veN83D7TJWn7FoPljzx1ml7XiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:3c:a5:4b:19:f8:00:ca:12:08:41:41:09:fc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Sep 24 16:01:10 2026 GMT
Not After : Sep 25 16:01:10 2026 GMT
Subject: CN=62a6c311d71d43146ab6f5b273f9817789eea44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:45:d6:ba:24:a7:c0:c5:65:bd:08:a9:a1:e3:
15:4a:05:80:da:74:f3:a7:35:a2:4f:a5:2b:2d:3d:
72:7b:a8:bc:c7:ed:20:32:4d:ab:26:6f:57:5a:28:
08:89:e0:38:bb:d2:25:63:8b:52:87:e0:ed:59:50:
7e:e8:02:60:50:53:95:49:ed:21:14:3e:31:28:2c:
5d:89:93:e6:0b:53:c8:46:95:0c:77:8f:23:63:b2:
4c:50:f4:94:08:8a:30:a9:6c:06:78:7d:00:62:64:
7d:5f:7e:2f:e1:17:1d:05:cd:bf:a8:66:6f:78:a0:
b0:83:dd:70:2b:db:ee:6a:04:de:5f:e4:14:6b:b6:
de:92:7c:63:cc:d7:59:dd:6a:7d:8e:3a:9f:7a:5a:
c3:69:6e:19:fe:26:d1:b7:ba:53:02:a7:8d:55:ec:
81:c4:9f:b9:5c:64:91:6e:c7:be:a2:33:5d:e1:a7:
c8:98:20:c2:05:68:eb:8b:8d:bb:a9:48:fc:22:5e:
d6:ca:7f:4f:58:f2:6b:80:ee:b9:48:1a:23:c5:21:
af:d4:92:40:e8:3e:ac:3a:37:9e:42:bf:60:2a:0c:
6c:11:6f:b9:e9:6c:91:05:c1:27:a7:dc:08:93:27:
61:a1:07:cb:65:86:ea:8d:a6:06:f6:0b:57:a7:78:
ce:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A6:C3:11:D7:1D:43:14:6A:B6:F5:B2:73:F9:81:77:89:EE:A4:4C
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7c:0f:75:0a:66:ca:c8:d2:cd:e8:79:d7:db:12:59:27:3f:
9e:8f:80:59:c8:7a:e6:87:1e:e7:8b:b4:7b:0f:36:2b:43:98:
d0:e2:77:8c:0b:25:96:73:40:40:3b:c3:42:84:dc:91:72:c8:
4c:c9:56:25:90:67:21:2b:53:39:ef:ef:fa:6d:99:16:be:04:
24:51:27:39:31:e3:b1:90:f6:7e:37:bc:9a:17:b6:57:c2:50:
bf:b4:4b:fc:37:d2:00:99:0c:8d:67:02:e3:e1:88:98:92:eb:
7a:42:e1:d7:4b:6e:7b:63:ab:d9:73:75:61:ee:11:e8:85:f5:
ce:12:3a:24:cb:ce:99:eb:fd:db:40:1e:32:99:5a:a6:37:e0:
19:f1:a7:f4:8b:61:e5:cd:2f:76:68:04:63:02:26:ed:06:73:
54:b0:23:e7:a2:7a:16:c0:80:ac:0d:a3:4e:15:8c:94:12:27:
ab:e6:45:f2:dd:f2:12:82:9f:64:5e:d2:38:a6:b8:28:e5:b5:
37:21:01:3f:6d:34:c5:17:fa:08:e4:62:f7:44:a0:c8:5d:6b:
74:23:30:1c:36:22:99:37:fd:ef:cf:a6:b6:28:90:51:32:d6:
ed:5a:64:13:39:5b:db:57:0e:69:66:b0:28:ae:e5:d1:0e:a0:
f0:2c:65:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJjylSxn4AMoSCEFBCfx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5
YjIzOGYwHhcNMjYwOTI0MTYwMTEwWhcNMjYwOTI1MTYwMTEwWjAzMTEwLwYDVQQD
Eyg2MmE2YzMxMWQ3MWQ0MzE0NmFiNmY1YjI3M2Y5ODE3Nzg5ZWVhNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50XWuiSnwMVlvQipoeMVSgWA2nTz
pzWiT6UrLT1ye6i8x+0gMk2rJm9XWigIieA4u9IlY4tSh+DtWVB+6AJgUFOVSe0h
FD4xKCxdiZPmC1PIRpUMd48jY7JMUPSUCIowqWwGeH0AYmR9X34v4RcdBc2/qGZv
eKCwg91wK9vuagTeX+QUa7beknxjzNdZ3Wp9jjqfelrDaW4Z/ibRt7pTAqeNVeyB
xJ+5XGSRbse+ojNd4afImCDCBWjri427qUj8Il7Wyn9PWPJrgO65SBojxSGv1JJA
6D6sOjeeQr9gKgxsEW+56WyRBcEnp9wIkydhoQfLZYbqjaYG9gtXp3jOpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKmwxHXHUMUarb1snP5gXeJ7qRMMB8GA1UdIwQY
MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt
MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl
LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnwPdQpm
ysjSzeh519sSWSc/no+AWch65oce54u0ew82K0OY0OJ3jAsllnNAQDvDQoTckXLI
TMlWJZBnIStTOe/v+m2ZFr4EJFEnOTHjsZD2fje8mhe2V8JQv7RL/DfSAJkMjWcC
4+GImJLrekLh10tue2Or2XN1Ye4R6IX1zhI6JMvOmev920AeMplapjfgGfGn9Ith
5c0vdmgEYwIm7QZzVLAj56J6FsCArA2jThWMlBInq+ZF8t3yEoKfZF7SOKa4KOW1
NyEBP200xRf6CORi90SgyF1rdCMwHDYimTf978+mtiiQUTLW7VpkEzlb21cOaWaw
KK7l0Q6g8CxlKg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:39:39 2026 by rpki-client