Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: WxEVfe5ufsAHUNZrHGith+jXEb6/oVnLCbRWB+PMM0U=
Subject key identifier: 0C:57:47:9A:68:64:EF:21:98:C0:AC:D2:CC:8F:72:F6:EE:1D:C3:C0
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 01A0D12532409FC8982C7BAFAEE9D14A022A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1A76
Signing time: Thu 24 Sep 2026 02:01:10 +0000
Manifest this update: Thu 24 Sep 2026 02:01:10 +0000
Manifest next update: Fri 25 Sep 2026 02:01:10 +0000
Files and hashes: 1: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: 6LGPTOHviPncNsJUZprI8PdXVKU2sKNvvP9QTSMzp+Q=)
2: WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa (hash: ZvSkcDxGhvi+aJsfbms5jhxFpHcmll85L+dtrGm8zwg=)
3: csloCIt3CTSVgebL58dJpxOdtC0.roa (hash: esH7P1ArdXIQnwu6qXLQUiXFhHbcU/4jPuyvpFcE9cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:25:32:40:9f:c8:98:2c:7b:af:ae:e9:d1:4a:02:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Sep 24 02:01:10 2026 GMT
Not After : Sep 25 02:01:10 2026 GMT
Subject: CN=0c57479a6864ef2198c0acd2cc8f72f6ee1dc3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:e3:63:ca:0a:49:89:a6:18:fd:4b:d5:e2:
c7:f8:05:06:b6:af:76:a3:ef:98:93:4f:8c:24:c6:
aa:65:b7:c0:6b:1a:ba:df:ea:91:09:42:7d:20:8b:
32:d7:5c:eb:9f:76:0e:b0:c0:95:d1:d7:64:f0:e1:
cb:f1:b2:93:b8:7d:1c:97:60:18:de:79:ee:e9:26:
de:62:77:87:a8:c3:74:ec:70:13:82:dc:45:e9:cf:
84:43:d4:72:02:19:12:8b:a8:35:be:de:1f:21:16:
ee:1b:76:ec:4d:16:f6:74:d4:f7:67:f4:2b:e8:a6:
5a:38:ed:56:4d:f3:f2:cf:e8:fa:7a:89:4f:f2:fa:
d4:24:0d:ee:36:7c:61:b8:74:a0:c5:c8:d8:00:5e:
e0:d9:60:95:36:c5:22:12:20:7c:c8:51:fb:65:44:
27:23:22:7b:d8:98:22:dc:3d:84:06:83:9b:59:50:
6f:a8:bc:8a:a1:92:4a:a5:a5:57:b2:9d:b0:1a:ed:
1e:69:35:b3:05:f2:09:54:2e:25:9f:dc:41:fa:ba:
cc:ed:00:cc:bf:41:f5:6b:35:df:27:4a:b3:82:ab:
19:8e:0f:6b:70:71:45:d9:47:f6:c0:58:ae:af:3a:
37:9a:cf:7c:ea:50:ea:ff:d1:2c:c2:70:c9:ec:61:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:57:47:9A:68:64:EF:21:98:C0:AC:D2:CC:8F:72:F6:EE:1D:C3:C0
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:01:27:32:9b:04:af:ca:db:fb:a9:40:ab:dd:4d:cf:57:b0:
88:23:1e:81:4c:74:6c:5e:8e:a7:d7:0b:49:85:74:66:f8:0f:
58:71:74:17:de:cf:8b:a1:dd:c6:c6:66:b0:27:35:15:e7:3a:
6a:9d:8c:42:18:55:65:43:b1:47:93:26:4c:1a:fd:ac:bf:5f:
09:f5:38:df:af:1b:31:5e:ab:68:c6:92:aa:0d:31:6d:f1:90:
55:e6:16:84:37:f8:61:7f:92:26:eb:77:3a:55:52:8b:11:f8:
0d:ef:d5:5f:23:01:56:97:82:6e:d2:f7:66:88:09:db:3d:95:
7c:0a:9d:11:6b:cb:d6:5b:68:7f:3e:e3:65:29:09:90:97:bf:
96:35:cb:e8:98:b3:a9:61:8e:e8:0a:cf:37:5e:21:43:5c:d6:
d1:99:58:9e:76:76:a0:75:17:e1:88:1b:3c:41:f6:e0:60:d7:
fc:29:6a:1e:fe:20:f3:48:1b:bc:5e:48:cc:72:32:54:b3:60:
af:18:e4:61:4e:ad:7f:73:1c:ff:76:15:e5:66:e1:b5:8e:47:
68:35:89:b8:ed:39:de:62:50:c4:bc:63:05:8f:92:5e:e9:2f:
f3:cf:a4:12:a2:36:40:d6:ac:0d:17:bb:88:9f:f9:cf:87:66:
53:15:6a:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJTJAn8iYLHuvrunRSgIqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3
M2UyNjgwHhcNMjYwOTI0MDIwMTEwWhcNMjYwOTI1MDIwMTEwWjAzMTEwLwYDVQQD
EygwYzU3NDc5YTY4NjRlZjIxOThjMGFjZDJjYzhmNzJmNmVlMWRjM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv/jY8oKSYmmGP1L1eLH+AUGtq92
o++Yk0+MJMaqZbfAaxq63+qRCUJ9IIsy11zrn3YOsMCV0ddk8OHL8bKTuH0cl2AY
3nnu6SbeYneHqMN07HATgtxF6c+EQ9RyAhkSi6g1vt4fIRbuG3bsTRb2dNT3Z/Qr
6KZaOO1WTfPyz+j6eolP8vrUJA3uNnxhuHSgxcjYAF7g2WCVNsUiEiB8yFH7ZUQn
IyJ72Jgi3D2EBoObWVBvqLyKoZJKpaVXsp2wGu0eaTWzBfIJVC4ln9xB+rrM7QDM
v0H1azXfJ0qzgqsZjg9rcHFF2Uf2wFiurzo3ms986lDq/9EswnDJ7GEDhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxXR5poZO8hmMCs0syPcvbuHcPAMB8GA1UdIwQY
MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt
Njg2ZjBhMDYxNmNjLzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj
LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5gEnMpsE
r8rb+6lAq91Nz1ewiCMegUx0bF6Op9cLSYV0ZvgPWHF0F97Pi6HdxsZmsCc1Fec6
ap2MQhhVZUOxR5MmTBr9rL9fCfU4368bMV6raMaSqg0xbfGQVeYWhDf4YX+SJut3
OlVSixH4De/VXyMBVpeCbtL3ZogJ2z2VfAqdEWvL1ltofz7jZSkJkJe/ljXL6Jiz
qWGO6ArPN14hQ1zW0ZlYnnZ2oHUX4YgbPEH24GDX/ClqHv4g80gbvF5IzHIyVLNg
rxjkYU6tf3Mc/3YV5WbhtY5HaDWJuO053mJQxLxjBY+SXukv88+kEqI2QNasDRe7
iJ/5z4dmUxVqyw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:45:01 2026 by rpki-client