Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: vvwmdd+kpoRxlWd4M4U8AAy1S/9aMYZorfDKoN8xV1U=
Subject key identifier: D7:F3:8B:54:D6:3D:22:81:76:BE:92:99:7E:EF:92:6A:8B:5C:32:BC
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 019D2960B493A3D2E8B357D6A0C0AA59305B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 09:01:36 +0000
Manifest this update: Thu 26 Mar 2026 09:01:36 +0000
Manifest next update: Fri 27 Mar 2026 09:01:36 +0000
Files and hashes: 1: 6LQC_WZqbsxqpCNxITLwNmSvDPk.roa (hash: 2jpqjh4IYhaGl+W39lws2/CQFWFrqFjpyZKUsxZ8H+0=)
2: CO_VzBu4gFZGQo6TZVLREcCwUwY.roa (hash: LG1jfCe3GnKEfOBNBBGC9FiXFKQ/e+HVoB0Wq69YJpQ=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: 6BcxpL7UUAa6MHtDnImLx/giYCBBm7p/ZuJiuQxpkE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b4:93:a3:d2:e8:b3:57:d6:a0:c0:aa:59:30:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Mar 26 09:01:36 2026 GMT
Not After : Mar 27 09:01:36 2026 GMT
Subject: CN=d7f38b54d63d228176be92997eef926a8b5c32bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:27:76:b4:f4:87:e3:db:59:70:f9:b1:e3:
3b:81:80:3e:1a:08:e0:dd:bc:de:ea:70:4b:a8:c1:
49:47:73:51:89:d5:58:fa:4b:4c:96:d0:4b:be:a2:
14:df:39:a2:b9:0d:bf:d3:e0:9a:d0:3a:61:01:46:
00:52:97:52:09:f6:a7:19:c3:ac:bc:93:4e:bb:ea:
6c:2e:db:b0:42:37:7a:60:9c:03:89:74:4d:7a:87:
04:48:71:fa:40:8a:77:d9:be:99:9e:76:26:e8:c0:
19:07:34:f6:e2:5e:70:22:d8:66:a1:f6:10:19:68:
ac:84:f1:1e:63:20:56:0e:3f:cb:f9:5f:13:5e:22:
bd:e1:9a:73:f1:d2:ff:53:8e:f3:36:d2:ff:53:d9:
a6:6f:b7:7d:31:c1:4d:c4:13:68:1a:9e:03:c0:15:
d5:6e:69:30:d9:22:bd:8d:48:2a:35:b7:f9:26:ce:
ba:92:50:b9:5f:1b:e1:84:ac:4d:98:0e:50:3b:b3:
5c:fa:8c:83:f2:72:4e:65:df:91:9f:42:08:8c:6b:
98:a0:b2:31:c3:07:ff:77:5a:27:e8:30:55:db:31:
fa:57:41:58:8c:65:32:46:aa:2f:9e:0c:92:2b:22:
60:3d:aa:51:a7:55:33:23:6d:24:4d:5c:d0:e4:ad:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F3:8B:54:D6:3D:22:81:76:BE:92:99:7E:EF:92:6A:8B:5C:32:BC
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:07:ed:d5:1a:da:9d:df:1b:75:a9:8e:bc:d5:31:17:03:4b:
4e:16:24:f0:de:82:98:85:8b:06:bd:a1:a0:52:70:89:ad:7a:
c9:39:14:cf:91:e1:a4:70:20:ea:7f:64:de:f1:35:5d:e3:76:
12:61:c7:0c:96:ba:9d:51:f2:1b:a7:58:9a:44:cc:fd:24:82:
ce:cc:71:ef:80:5b:bc:b8:3f:fb:8d:b2:f7:7f:f8:4e:66:ba:
82:a3:a9:0d:a5:c9:ed:ab:cd:aa:25:d0:5b:84:7d:b9:42:15:
4e:a7:1f:fe:36:3e:dc:76:4a:01:f6:fc:e1:6e:c8:7c:5d:ad:
ee:11:fd:61:24:aa:9b:63:9c:00:8f:d6:ee:6c:90:de:b1:e6:
56:7b:17:77:ae:d5:c2:25:2f:b5:5d:df:04:04:e3:ca:da:11:
9c:41:8a:42:b2:3d:1a:c9:fd:bb:6f:bd:bb:87:4c:a8:bd:cd:
13:5d:65:e8:a7:a8:f2:c7:6d:a0:cb:8b:09:f7:6f:09:9f:98:
ef:0c:80:8e:d2:66:4d:44:a5:5f:7e:8a:d1:7c:6c:da:1c:f6:
e5:f9:28:6c:ca:6d:c7:85:85:30:53:94:d0:90:c8:e5:55:69:
43:b6:50:86:9d:e3:44:ed:20:bf:6d:90:c9:9b:e6:25:02:a9:
c5:bf:8f:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYLSTo9Los1fWoMCqWTBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWE4ZGQxMTg3NjZhZWQzYjA5ZWQ2OWYyZTQ3ZGMxZDJj
MTYxNTkwHhcNMjYwMzI2MDkwMTM2WhcNMjYwMzI3MDkwMTM2WjAzMTEwLwYDVQQD
EyhkN2YzOGI1NGQ2M2QyMjgxNzZiZTkyOTk3ZWVmOTI2YThiNWMzMmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5YndrT0h+PbWXD5seM7gYA+Ggjg
3bze6nBLqMFJR3NRidVY+ktMltBLvqIU3zmiuQ2/0+Ca0DphAUYAUpdSCfanGcOs
vJNOu+psLtuwQjd6YJwDiXRNeocESHH6QIp32b6ZnnYm6MAZBzT24l5wIthmofYQ
GWishPEeYyBWDj/L+V8TXiK94Zpz8dL/U47zNtL/U9mmb7d9McFNxBNoGp4DwBXV
bmkw2SK9jUgqNbf5Js66klC5XxvhhKxNmA5QO7Nc+oyD8nJOZd+Rn0IIjGuYoLIx
wwf/d1on6DBV2zH6V0FYjGUyRqovngySKyJgPapRp1UzI20kTVzQ5K2QPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfzi1TWPSKBdr6SmX7vkmqLXDK8MB8GA1UdIwQY
MBaAFKOqjdEYdmrtOwntafLkfcHSwWFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zOTFlNTQtYzIxYS00MDVhLTg4YWEt
NjA3OTc4OTEwMGNhLzEvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zOTFlNTQtYzIxYS00MDVhLTg4YWEtNjA3OTc4OTEwMGNh
LzEvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQft1Rra
nd8bdamOvNUxFwNLThYk8N6CmIWLBr2hoFJwia16yTkUz5HhpHAg6n9k3vE1XeN2
EmHHDJa6nVHyG6dYmkTM/SSCzsxx74BbvLg/+42y93/4Tma6gqOpDaXJ7avNqiXQ
W4R9uUIVTqcf/jY+3HZKAfb84W7IfF2t7hH9YSSqm2OcAI/W7myQ3rHmVnsXd67V
wiUvtV3fBATjytoRnEGKQrI9Gsn9u2+9u4dMqL3NE11l6Keo8sdtoMuLCfdvCZ+Y
7wyAjtJmTUSlX36K0Xxs2hz25fkobMptx4WFMFOU0JDI5VVpQ7ZQhp3jRO0gv22Q
yZvmJQKpxb+PYg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:12 2026 by rpki-client