Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: fMwBoeanW1aRqmxj4mutkAm1tFo1ROzyGr6wtxw15BU=
Subject key identifier: 2B:7D:EE:DB:32:ED:07:8A:80:B6:77:CE:12:C8:02:62:CC:98:05:8D
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 019D26965DA29B949E7C90CE6395609432B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: AB
Signing time: Wed 25 Mar 2026 20:01:21 +0000
Manifest this update: Wed 25 Mar 2026 20:01:21 +0000
Manifest next update: Thu 26 Mar 2026 20:01:21 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: 0TgPBxjWoLPdAMqrxPKTBq1/OAUcRNcyNhaXXtUuj4g=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:5d:a2:9b:94:9e:7c:90:ce:63:95:60:94:32:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: Mar 25 20:01:21 2026 GMT
Not After : Mar 26 20:01:21 2026 GMT
Subject: CN=2b7deedb32ed078a80b677ce12c80262cc98058d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:28:18:f2:8c:33:58:41:2e:17:eb:ea:f6:
b3:3c:5c:5f:89:01:82:44:20:33:2e:95:7e:0c:07:
02:7f:c5:90:40:dc:51:3c:81:0f:60:de:ac:37:ae:
82:d5:54:7f:fd:07:a4:e3:86:48:b8:5d:64:a4:b6:
d1:3b:c0:86:9c:a7:be:98:7c:d3:7e:a4:a8:33:e5:
38:17:65:93:cd:1c:d6:8f:e9:ec:6f:e1:a2:e4:d4:
27:8e:c8:40:5d:1d:7a:bf:f0:12:99:eb:e1:ca:3a:
d6:5d:bd:0e:96:c4:43:08:ca:7d:e0:98:b9:95:de:
25:38:27:13:b0:cd:f0:4e:de:59:df:96:39:be:b3:
cf:af:db:57:66:d2:e2:c7:cc:af:0f:71:2e:3d:8f:
92:69:31:6c:42:cc:55:ee:06:e7:97:e7:76:29:d9:
3e:da:cf:18:78:59:68:2f:98:60:ec:f9:0f:a0:64:
31:3e:d9:a0:e2:2b:77:a1:4c:83:3e:a3:cf:33:2d:
4b:8c:6a:9e:5e:48:80:d8:70:78:43:a5:01:c0:0c:
71:ce:a3:60:d7:89:a0:53:58:8f:94:68:23:dd:1f:
c8:87:4a:24:27:f7:42:ee:57:80:72:07:0b:77:16:
2d:64:63:4b:2a:e5:8e:13:3d:ff:0d:d7:d2:a6:bd:
39:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7D:EE:DB:32:ED:07:8A:80:B6:77:CE:12:C8:02:62:CC:98:05:8D
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:70:aa:66:1c:0f:77:b4:cd:1c:b6:c8:a4:4a:64:bf:70:cd:
3d:95:fd:d1:a3:83:27:f1:76:2a:3e:48:03:ea:d8:1f:f3:1b:
3a:b1:5a:f0:2a:c6:d8:bf:5c:4a:9c:19:be:60:38:0f:b9:ff:
40:10:6d:cb:84:a2:26:26:20:5f:91:d6:65:2e:20:91:ae:93:
29:59:b3:2b:3a:62:17:87:56:8c:ed:1b:c3:18:b5:54:95:0d:
6d:6d:10:db:0e:3d:ec:a6:2a:df:cc:35:19:84:86:f7:c2:e1:
19:03:6f:cd:8b:5f:94:3a:36:5a:e6:59:1e:33:8e:c5:71:69:
75:69:cc:1f:4e:4a:57:9f:6a:09:cf:34:5a:b4:8c:76:8b:2b:
7c:34:0d:9c:37:ad:b7:3b:e5:a1:cb:00:be:4a:f4:5d:ff:3c:
ce:9d:b5:c4:05:a3:7d:d5:1a:62:9d:dc:be:27:25:99:94:75:
9f:a7:cb:45:17:a6:0c:32:9b:d0:39:d2:25:fa:43:cf:d3:d5:
10:db:e3:22:d4:7d:93:d9:e0:4f:dd:31:06:5f:34:d6:55:e2:
d1:f0:c2:9a:28:83:a4:f9:c3:e3:81:0b:72:ab:96:5f:89:7a:
fc:c3:c4:b0:e6:3c:2e:39:70:38:2d:5f:e2:ee:8a:fc:c9:f9:
76:86:13:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mll2im5SefJDOY5VglDKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOGUwNzk0MGRjZDYzNDRlMWE4MTYyMGJkNzhhMjY4YmU5
YzM3OTgwHhcNMjYwMzI1MjAwMTIxWhcNMjYwMzI2MjAwMTIxWjAzMTEwLwYDVQQD
EygyYjdkZWVkYjMyZWQwNzhhODBiNjc3Y2UxMmM4MDI2MmNjOTgwNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLYoGPKMM1hBLhfr6vazPFxfiQGC
RCAzLpV+DAcCf8WQQNxRPIEPYN6sN66C1VR//Qek44ZIuF1kpLbRO8CGnKe+mHzT
fqSoM+U4F2WTzRzWj+nsb+Gi5NQnjshAXR16v/ASmevhyjrWXb0OlsRDCMp94Ji5
ld4lOCcTsM3wTt5Z35Y5vrPPr9tXZtLix8yvD3EuPY+SaTFsQsxV7gbnl+d2Kdk+
2s8YeFloL5hg7PkPoGQxPtmg4it3oUyDPqPPMy1LjGqeXkiA2HB4Q6UBwAxxzqNg
14mgU1iPlGgj3R/Ih0okJ/dC7leAcgcLdxYtZGNLKuWOEz3/DdfSpr05gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCt97tsy7QeKgLZ3zhLIAmLMmAWNMB8GA1UdIwQY
MBaAFDqOB5QNzWNE4agWIL14omi+nDeYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jOGUyMGEtNTg5Zi00NGZjLTk2NGEt
NWE2OTQ2MDc0MzVlLzEvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jOGUyMGEtNTg5Zi00NGZjLTk2NGEtNWE2OTQ2MDc0MzVl
LzEvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHCqZhwP
d7TNHLbIpEpkv3DNPZX90aODJ/F2Kj5IA+rYH/MbOrFa8CrG2L9cSpwZvmA4D7n/
QBBty4SiJiYgX5HWZS4gka6TKVmzKzpiF4dWjO0bwxi1VJUNbW0Q2w497KYq38w1
GYSG98LhGQNvzYtflDo2WuZZHjOOxXFpdWnMH05KV59qCc80WrSMdosrfDQNnDet
tzvlocsAvkr0Xf88zp21xAWjfdUaYp3cviclmZR1n6fLRRemDDKb0DnSJfpDz9PV
ENvjItR9k9ngT90xBl801lXi0fDCmiiDpPnD44ELcquWX4l6/MPEsOY8LjlwOC1f
4u6K/Mn5doYT7A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:01 2026 by rpki-client