Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: 0FGVh0Se8u5UEUe2aAesHeB6ZAVR7vkynPwXqdclXkg=
Subject key identifier: B2:21:C9:D6:0F:42:D2:1F:E8:AB:33:82:79:83:41:D5:04:39:EF:C1
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 019D2771F4E051E249499EA9A3B8F05377EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 1205
Signing time: Thu 26 Mar 2026 00:01:12 +0000
Manifest this update: Thu 26 Mar 2026 00:01:12 +0000
Manifest next update: Fri 27 Mar 2026 00:01:12 +0000
Files and hashes: 1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: G9MwKF2y3Q7w1bBZ2KSapeGRIoXuauPxGp8nb/Sq00w=)
2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f4:e0:51:e2:49:49:9e:a9:a3:b8:f0:53:77:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Mar 26 00:01:12 2026 GMT
Not After : Mar 27 00:01:12 2026 GMT
Subject: CN=b221c9d60f42d21fe8ab3382798341d50439efc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:30:9f:18:2a:93:65:ce:66:92:06:63:06:
72:79:de:b8:b5:8f:76:88:cd:34:4e:17:22:4e:6f:
22:0c:a3:b4:9a:23:77:a3:52:c5:bc:1b:6f:96:a4:
44:ce:2c:63:7b:05:09:e5:75:55:f5:17:c2:26:c3:
60:51:95:f5:5a:68:56:fa:44:e7:f4:e4:9d:41:b0:
fa:c9:81:2c:5e:cb:dc:ae:58:d7:48:23:97:0a:17:
bc:c5:18:6b:25:33:82:94:a3:19:1a:56:5f:b9:31:
02:3c:f6:aa:d0:4b:71:5c:88:5f:1a:cb:e3:2a:79:
2a:6c:57:77:3f:0f:ba:d8:23:07:27:8f:6d:20:a7:
65:55:c9:53:ff:82:70:f2:67:99:d1:33:84:7d:4b:
1b:82:3a:3f:5a:0f:0c:2f:cb:19:5a:8f:a8:a0:71:
73:24:28:16:be:46:6f:1e:c5:94:0e:ed:3d:dc:f5:
1e:e1:74:7e:59:f3:49:a9:82:83:23:08:d4:9c:94:
f4:88:0a:0c:e9:da:11:5f:e1:a6:b1:e1:da:cd:49:
b3:fe:02:01:a0:aa:ec:96:12:e0:cc:ba:56:64:51:
f4:47:c0:89:64:bd:19:61:00:0b:b7:87:5c:6e:54:
74:40:bf:b8:ab:e2:14:0f:ab:2e:b4:da:5c:18:2a:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:C9:D6:0F:42:D2:1F:E8:AB:33:82:79:83:41:D5:04:39:EF:C1
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d2:34:2c:c9:59:6d:bd:f1:1d:95:07:42:34:d9:fa:60:5f:
0b:06:5b:b4:b2:ac:d0:d6:d2:a2:b5:67:8e:5a:f9:06:b4:e7:
f0:0e:3d:8e:f3:e5:6a:9a:b3:45:97:b1:3c:07:f6:d2:00:e3:
25:31:98:00:2f:e9:e7:09:a6:44:30:bf:19:f5:3e:e1:33:22:
84:cb:13:92:6b:6f:16:29:04:f5:00:45:42:ef:29:be:0a:98:
78:b1:5a:ef:ba:a3:e1:6a:21:a6:51:29:63:c9:05:1f:5e:15:
8c:c6:12:4b:2e:f1:5a:5f:45:d2:36:02:ff:50:ec:1b:37:6b:
b5:1c:49:0e:46:10:d9:66:7a:eb:bc:20:aa:8b:14:ab:02:5d:
11:ff:88:53:7a:9d:92:bb:6d:30:52:c7:06:87:37:8b:f6:47:
f4:9f:77:48:d5:0f:12:79:62:d5:8c:9a:79:a1:68:ae:ca:d7:
61:fd:d7:72:7e:35:f5:07:56:d8:b1:8e:a8:04:95:19:a7:bc:
cb:83:0a:d8:99:fd:8b:58:95:4b:23:15:4f:93:a3:35:6e:cc:
e6:53:dd:a0:4c:d2:69:32:24:d1:5b:07:02:2e:f6:26:49:f9:
1e:3f:3f:c6:ba:9f:68:26:18:57:85:45:d8:b4:a3:63:6c:98:
ca:e5:84:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncfTgUeJJSZ6po7jwU3fqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTM5ZjFkYjg1OGIxNTVmMjViYzM0Mzc1OWY1YmUyYjcz
NmM4MTgwHhcNMjYwMzI2MDAwMTEyWhcNMjYwMzI3MDAwMTEyWjAzMTEwLwYDVQQD
EyhiMjIxYzlkNjBmNDJkMjFmZThhYjMzODI3OTgzNDFkNTA0MzllZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMwwnxgqk2XOZpIGYwZyed64tY92
iM00ThciTm8iDKO0miN3o1LFvBtvlqREzixjewUJ5XVV9RfCJsNgUZX1WmhW+kTn
9OSdQbD6yYEsXsvcrljXSCOXChe8xRhrJTOClKMZGlZfuTECPPaq0EtxXIhfGsvj
KnkqbFd3Pw+62CMHJ49tIKdlVclT/4Jw8meZ0TOEfUsbgjo/Wg8ML8sZWo+ooHFz
JCgWvkZvHsWUDu093PUe4XR+WfNJqYKDIwjUnJT0iAoM6doRX+GmseHazUmz/gIB
oKrslhLgzLpWZFH0R8CJZL0ZYQALt4dcblR0QL+4q+IUD6sutNpcGCp/tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIhydYPQtIf6KszgnmDQdUEOe/BMB8GA1UdIwQY
MBaAFKOjnx24WLFV8lvDQ3WfW+K3NsgYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgt
NDUwZDIyOTViYTQ5LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgtNDUwZDIyOTViYTQ5
LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdI0LMlZ
bb3xHZUHQjTZ+mBfCwZbtLKs0NbSorVnjlr5BrTn8A49jvPlapqzRZexPAf20gDj
JTGYAC/p5wmmRDC/GfU+4TMihMsTkmtvFikE9QBFQu8pvgqYeLFa77qj4WohplEp
Y8kFH14VjMYSSy7xWl9F0jYC/1DsGzdrtRxJDkYQ2WZ667wgqosUqwJdEf+IU3qd
krttMFLHBoc3i/ZH9J93SNUPEnli1YyaeaForsrXYf3Xcn419QdW2LGOqASVGae8
y4MK2Jn9i1iVSyMVT5OjNW7M5lPdoEzSaTIk0VsHAi72Jkn5Hj8/xrqfaCYYV4VF
2LSjY2yYyuWEYg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:20:13 2026 by rpki-client