Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: 71J+svzcK7DVdo8M2M+bErDOhvuqnPnBhgXbLvVwvmY=
Subject key identifier: 9A:54:EF:1D:5D:AA:1B:14:26:1E:39:5E:5E:DF:66:C3:93:63:7C:FF
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 01A1DF835EEF59C6499932C27D448C8F6929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1B02
Signing time: Sun 15 Nov 2026 14:01:31 +0000
Manifest this update: Sun 15 Nov 2026 14:01:31 +0000
Manifest next update: Mon 16 Nov 2026 14:01:31 +0000
Files and hashes: 1: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: F4wjPTfmqqb0++UPSRFfr/F8KgdeL76xpnxdot4hbtU=)
2: WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa (hash: ZvSkcDxGhvi+aJsfbms5jhxFpHcmll85L+dtrGm8zwg=)
3: csloCIt3CTSVgebL58dJpxOdtC0.roa (hash: esH7P1ArdXIQnwu6qXLQUiXFhHbcU/4jPuyvpFcE9cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:5e:ef:59:c6:49:99:32:c2:7d:44:8c:8f:69:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Nov 15 14:01:31 2026 GMT
Not After : Nov 16 14:01:31 2026 GMT
Subject: CN=9a54ef1d5daa1b14261e395e5edf66c393637cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:d9:25:f9:9c:62:7d:bb:82:b2:6c:d8:0d:
09:5c:df:ea:c4:05:57:e1:42:1d:53:a2:91:95:59:
8c:f2:b8:e3:82:c0:70:33:00:42:90:52:d2:d5:21:
1c:cb:0c:53:d1:a1:63:cb:ef:99:04:b5:9d:89:f9:
ab:b2:62:f1:74:79:fe:e1:67:c7:ad:dc:fa:58:eb:
e1:f2:41:2a:d5:5c:45:68:8e:80:da:c8:a6:0b:9b:
2d:67:2e:3b:d1:c1:4c:cc:10:66:cd:51:ef:ec:60:
45:0a:7d:e2:b2:62:e2:18:aa:87:3d:c8:25:8a:88:
6f:78:80:9f:4b:ad:03:b9:be:b2:bf:d8:00:db:12:
6f:db:eb:da:d9:14:17:7b:b3:c8:b3:bf:e5:33:8d:
6f:12:93:09:92:73:e7:3c:62:17:5e:44:67:c8:f3:
36:02:34:f4:2a:5a:f8:b3:13:99:4b:fa:28:d7:c3:
63:cb:54:19:85:9d:49:af:d1:74:20:18:64:71:44:
d5:58:a1:e1:c5:53:6f:92:e9:ed:b1:e0:68:4e:49:
92:28:85:56:20:5c:7d:c7:d1:49:b8:e7:9b:79:1d:
3e:02:1a:00:ff:9a:75:ee:92:43:b5:c3:84:e5:2c:
e6:66:d3:83:f9:21:6d:8f:53:a6:10:e8:5c:1b:0b:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:EF:1D:5D:AA:1B:14:26:1E:39:5E:5E:DF:66:C3:93:63:7C:FF
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:25:00:27:a9:d0:27:3b:67:32:2b:82:97:54:fd:fb:c7:51:
60:e9:de:c7:9a:97:d4:a0:7e:b0:f2:c3:48:8b:28:56:37:f4:
4b:0c:af:2c:53:01:22:17:76:a7:f7:14:37:74:99:d1:f2:56:
a9:49:ec:76:0c:16:85:70:a7:f8:74:aa:e6:00:6d:0f:97:8c:
0e:8c:66:93:45:04:40:f4:ec:89:5b:ec:70:1f:ad:8c:f8:8a:
85:e1:49:0d:55:06:11:3a:98:de:fd:1e:b5:b5:e9:22:75:00:
dc:8f:8d:d9:a5:32:51:9f:72:09:a8:3d:cf:79:d4:1f:cb:03:
87:35:56:2f:bc:a9:48:ad:b1:9a:5f:f8:ec:bc:19:f6:85:43:
e5:08:20:8d:34:36:34:80:4e:ff:28:8c:bd:15:4a:53:d8:a2:
eb:94:a2:d2:90:e6:c7:15:b7:50:37:ae:c1:98:74:b7:55:30:
1a:f7:e2:47:0f:7c:02:5b:2b:d6:5d:64:76:f1:da:67:4d:78:
7d:a9:77:69:73:e3:9b:7d:c1:4f:28:6f:ba:4f:41:1c:19:94:
7e:82:e8:a2:cd:06:17:54:44:8f:08:ee:a6:e1:aa:98:82:9f:
39:f2:e4:8e:74:77:fd:42:ad:6c:53:81:c2:03:c7:a1:7f:20:
37:4a:54:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfg17vWcZJmTLCfUSMj2kpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3
M2UyNjgwHhcNMjYxMTE1MTQwMTMxWhcNMjYxMTE2MTQwMTMxWjAzMTEwLwYDVQQD
Eyg5YTU0ZWYxZDVkYWExYjE0MjYxZTM5NWU1ZWRmNjZjMzkzNjM3Y2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5LZJfmcYn27grJs2A0JXN/qxAVX
4UIdU6KRlVmM8rjjgsBwMwBCkFLS1SEcywxT0aFjy++ZBLWdifmrsmLxdHn+4WfH
rdz6WOvh8kEq1VxFaI6A2simC5stZy470cFMzBBmzVHv7GBFCn3ismLiGKqHPcgl
iohveICfS60Dub6yv9gA2xJv2+va2RQXe7PIs7/lM41vEpMJknPnPGIXXkRnyPM2
AjT0Klr4sxOZS/oo18Njy1QZhZ1Jr9F0IBhkcUTVWKHhxVNvkuntseBoTkmSKIVW
IFx9x9FJuOebeR0+AhoA/5p17pJDtcOE5SzmZtOD+SFtj1OmEOhcGwussQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpU7x1dqhsUJh45Xl7fZsOTY3z/MB8GA1UdIwQY
MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt
Njg2ZjBhMDYxNmNjLzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj
LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiUAJ6nQ
JztnMiuCl1T9+8dRYOnex5qX1KB+sPLDSIsoVjf0SwyvLFMBIhd2p/cUN3SZ0fJW
qUnsdgwWhXCn+HSq5gBtD5eMDoxmk0UEQPTsiVvscB+tjPiKheFJDVUGETqY3v0e
tbXpInUA3I+N2aUyUZ9yCag9z3nUH8sDhzVWL7ypSK2xml/47LwZ9oVD5QggjTQ2
NIBO/yiMvRVKU9ii65Si0pDmxxW3UDeuwZh0t1UwGvfiRw98Alsr1l1kdvHaZ014
fal3aXPjm33BTyhvuk9BHBmUfoLoos0GF1REjwjupuGqmIKfOfLkjnR3/UKtbFOB
wgPHoX8gN0pUnw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:04:49 2026 by rpki-client