Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
File: O618kdgYkaWUfX4UpmhJEgY6Xdk.mft (raw, json)
Hash identifier: sG6CKRi3BbOrGpKlVcadz2Ec/Fjxou88rsSq28630eE=
Subject key identifier: 77:9A:AA:59:7A:29:2B:E5:99:15:39:49:0F:BF:83:16:C5:06:FF:A2
Authority key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
Certificate issuer: /CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Certificate serial: 01A17A041F9DF75A80B5DF560BDC20A469FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
Manifest number: 0327
Signing time: Mon 26 Oct 2026 21:00:52 +0000
Manifest this update: Mon 26 Oct 2026 21:00:52 +0000
Manifest next update: Tue 27 Oct 2026 21:00:52 +0000
Files and hashes: 1: GPjTkixHgXgtIDNDsyb7i-Nlleo.roa (hash: 0MyLo6ZK/tC1RGqYqyZYKLVLfr7W+2VBizLdr/A1dio=)
2: O618kdgYkaWUfX4UpmhJEgY6Xdk.crl (hash: 4cv4zicbA34UEV+xeeqqVFLQG5Mmoko39TjiKWBPB5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:1f:9d:f7:5a:80:b5:df:56:0b:dc:20:a4:69:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Validity
Not Before: Oct 26 21:00:52 2026 GMT
Not After : Oct 27 21:00:52 2026 GMT
Subject: CN=779aaa597a292be5991539490fbf8316c506ffa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:16:b4:ab:87:5a:f1:3b:df:af:93:71:bf:
9e:0a:01:c7:e0:f6:76:b2:b3:c8:6a:e1:30:8a:e8:
2d:d4:30:7a:65:5a:28:0b:63:49:7b:ce:16:80:15:
ec:ec:f6:57:ff:e7:b6:ee:a6:2a:33:c8:f0:67:17:
e2:84:71:04:f7:2e:14:92:fb:87:d0:bf:19:01:15:
fb:a5:dd:e6:a8:3c:07:a9:95:88:69:40:36:c6:2d:
18:ea:65:12:09:dc:74:88:25:91:5b:74:68:a1:89:
8e:4a:e4:b2:6f:01:3e:75:bb:6e:0f:2e:b5:4a:c5:
b9:d3:b6:20:6a:3f:78:db:b1:67:bf:36:06:bc:d9:
74:83:be:34:fc:3b:cf:23:90:44:f5:45:39:4a:12:
48:7d:b1:8b:cf:10:3f:7b:24:7f:f8:8d:fb:66:b6:
84:55:fa:f5:de:2b:fe:24:c7:52:16:bf:7c:b9:3f:
ef:19:1b:82:60:15:a2:ff:45:cf:bb:15:41:90:8d:
00:22:11:6a:2e:d7:19:d4:3f:bc:54:26:1c:29:84:
5b:32:c6:73:b2:93:0e:16:be:18:53:cb:f3:2c:5b:
32:6a:fc:18:71:9c:63:82:d3:eb:cb:0e:36:e5:cf:
d6:70:f4:67:5d:b0:84:76:43:fe:9f:93:15:bb:96:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9A:AA:59:7A:29:2B:E5:99:15:39:49:0F:BF:83:16:C5:06:FF:A2
X509v3 Authority Key Identifier:
keyid:3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:79:2e:f6:68:11:fc:eb:43:d9:30:34:8c:b3:bb:13:54:
67:f4:0d:10:c4:2e:f9:29:ae:99:b8:c7:d9:64:5a:fd:c9:e3:
18:92:0e:7c:ae:73:b6:cc:49:23:3e:5d:23:49:61:c5:81:01:
35:1c:38:95:a3:70:3c:1d:37:1b:1e:af:88:12:3b:40:0c:7b:
0d:3d:b0:be:cc:97:3d:1b:e6:83:98:a1:22:0a:bb:01:1f:dc:
05:2f:3e:9f:a6:fc:9b:13:d9:eb:3a:f8:c5:70:9c:d4:05:01:
91:0d:be:e8:9f:d5:62:6f:bd:be:5a:c5:e8:6a:6b:fa:cc:30:
f4:c3:1c:f3:28:f4:44:98:ec:5f:58:94:3c:6e:f5:41:1e:4f:
96:b6:6b:1e:90:3d:aa:be:15:ed:bc:8e:9d:5a:c7:0d:9d:ce:
06:bd:d9:71:38:b2:db:5e:db:01:40:23:ad:83:21:b3:18:06:
a7:ed:15:51:2a:29:e3:29:f3:fa:a5:48:c8:d2:96:18:d6:c4:
4a:0b:62:ed:d8:03:28:d5:21:b5:81:c1:0a:3c:f9:18:51:2a:
1f:ab:97:86:58:b5:e9:ee:9b:66:c1:1d:17:7e:56:55:06:0b:
39:35:ad:41:b9:03:08:03:1a:52:ff:89:0d:27:63:46:c3:cb:
a2:0c:b1:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6BB+d91qAtd9WC9wgpGn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYWQ3YzkxZDgxODkxYTU5NDdkN2UxNGE2Njg0OTEyMDYz
YTVkZDkwHhcNMjYxMDI2MjEwMDUyWhcNMjYxMDI3MjEwMDUyWjAzMTEwLwYDVQQD
Eyg3NzlhYWE1OTdhMjkyYmU1OTkxNTM5NDkwZmJmODMxNmM1MDZmZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+sWtKuHWvE736+Tcb+eCgHH4PZ2
srPIauEwiugt1DB6ZVooC2NJe84WgBXs7PZX/+e27qYqM8jwZxfihHEE9y4UkvuH
0L8ZARX7pd3mqDwHqZWIaUA2xi0Y6mUSCdx0iCWRW3RooYmOSuSybwE+dbtuDy61
SsW507Ygaj9427FnvzYGvNl0g740/DvPI5BE9UU5ShJIfbGLzxA/eyR/+I37ZraE
Vfr13iv+JMdSFr98uT/vGRuCYBWi/0XPuxVBkI0AIhFqLtcZ1D+8VCYcKYRbMsZz
spMOFr4YU8vzLFsyavwYcZxjgtPryw425c/WcPRnXbCEdkP+n5MVu5b8/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeaqll6KSvlmRU5SQ+/gxbFBv+iMB8GA1UdIwQY
MBaAFDutfJHYGJGllH1+FKZoSRIGOl3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzYxOGtkZ1lrYVdVZlg0VXBtaEpFZ1k2WGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85NDkzZWUtN2EwNS00MWVmLWJjZjYt
NDIyMDIyNDk5YWNhLzEvTzYxOGtkZ1lrYVdVZlg0VXBtaEpFZ1k2WGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85NDkzZWUtN2EwNS00MWVmLWJjZjYtNDIyMDIyNDk5YWNh
LzEvTzYxOGtkZ1lrYVdVZlg0VXBtaEpFZ1k2WGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBJ5LvZo
EfzrQ9kwNIyzuxNUZ/QNEMQu+SmumbjH2WRa/cnjGJIOfK5ztsxJIz5dI0lhxYEB
NRw4laNwPB03Gx6viBI7QAx7DT2wvsyXPRvmg5ihIgq7AR/cBS8+n6b8mxPZ6zr4
xXCc1AUBkQ2+6J/VYm+9vlrF6Gpr+sww9MMc8yj0RJjsX1iUPG71QR5PlrZrHpA9
qr4V7byOnVrHDZ3OBr3ZcTiy217bAUAjrYMhsxgGp+0VUSop4ynz+qVIyNKWGNbE
Sgti7dgDKNUhtYHBCjz5GFEqH6uXhli16e6bZsEdF35WVQYLOTWtQbkDCAMaUv+J
DSdjRsPLogyxLA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:21:09 2026 by rpki-client