Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
File: O47zaZ48ewDP9VFOVME2EqO8CBA.mft (raw, json)
Hash identifier: xJmA0M7HFLEn53zC0E+aKd3Cz+8/Th8elLvLb4pWir8=
Subject key identifier: 49:1A:A3:CA:13:D3:55:85:EC:06:63:24:AA:C4:46:C1:8C:79:46:25
Authority key identifier: 3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
Certificate issuer: /CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Certificate serial: 01A1250C65E076C48DBBCA674012F9313082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
Manifest number: 025F
Signing time: Sat 10 Oct 2026 09:02:11 +0000
Manifest this update: Sat 10 Oct 2026 09:02:11 +0000
Manifest next update: Sun 11 Oct 2026 09:02:11 +0000
Files and hashes: 1: O47zaZ48ewDP9VFOVME2EqO8CBA.crl (hash: p9KvPkYHrzY+uRlJq4Rq4VEdhKpsrTASiz0LEqKTnGw=)
2: sLLadZHcLuLxJyRCEcg6ugP5rdc.roa (hash: z14c08hX3kPcGJfG3drJX75MFVvqokGJtQr08nJp+rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0c:65:e0:76:c4:8d:bb:ca:67:40:12:f9:31:30:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Validity
Not Before: Oct 10 09:02:11 2026 GMT
Not After : Oct 11 09:02:11 2026 GMT
Subject: CN=491aa3ca13d35585ec066324aac446c18c794625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:73:6c:fa:31:da:7d:f3:9d:4d:75:28:1e:
44:d1:2e:af:f9:cb:fd:cc:87:6c:46:e3:ab:ba:e2:
f0:74:cf:5c:e9:d9:75:d3:1c:a9:6c:5a:33:65:b1:
78:88:2c:2a:85:09:25:61:3c:ae:33:b0:67:f7:e2:
9b:9e:ee:d2:0a:4c:52:fb:77:24:c1:f7:16:3f:18:
65:11:19:9c:94:bb:53:f9:ed:00:ac:f6:3b:a4:98:
e4:3f:6d:e6:f1:56:d5:62:0f:92:cd:da:da:25:fd:
49:b1:29:b2:33:38:1c:f7:e0:cd:72:94:1f:58:4e:
9d:e8:56:78:5b:9e:59:68:f9:2e:ec:82:da:64:41:
1c:f2:c4:7f:58:0a:1b:2a:85:cc:52:57:03:0e:8c:
78:c9:db:23:f9:27:1a:6d:5e:ea:9c:0c:e8:41:e9:
a7:14:34:cb:b6:ea:05:4a:3f:6d:a0:b9:08:8c:13:
38:b7:40:9e:da:ec:37:d5:22:a5:ed:66:b0:e9:32:
4d:c6:d6:3a:22:ae:36:5d:fa:32:6f:12:de:7f:7a:
95:a4:c7:13:32:8b:0f:2a:79:b4:86:4e:66:af:74:
9f:b8:6c:02:3e:47:5a:ac:12:df:da:ac:3f:5e:72:
98:14:a4:e0:27:91:e1:fe:3e:ba:e8:66:0c:e4:b0:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1A:A3:CA:13:D3:55:85:EC:06:63:24:AA:C4:46:C1:8C:79:46:25
X509v3 Authority Key Identifier:
keyid:3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:16:bf:95:5e:81:33:00:65:ca:fa:5a:0f:85:4b:d5:0f:0c:
93:69:8c:86:93:32:c1:c6:6b:7f:46:7b:e2:4a:23:25:6b:17:
fa:cb:83:05:e5:3b:ac:16:85:fd:3e:b5:2e:26:e2:9c:be:f9:
e4:c1:69:ce:ff:ba:d2:d1:ab:09:3a:8d:d2:37:b0:50:c9:15:
e3:2c:bc:83:64:fd:8c:ea:c2:a5:e8:a8:cb:f9:02:13:53:ee:
44:dc:bc:e6:b0:0b:73:33:ea:78:11:7a:d2:53:52:f8:43:00:
cf:a5:8f:06:e4:0b:b6:ec:cf:b1:67:15:f8:9e:0d:18:6d:58:
ba:62:bd:15:71:1e:d6:3f:f9:df:79:7c:a3:33:e9:9d:d3:d0:
94:c2:c6:a3:b5:43:f6:b6:88:9b:51:03:46:4b:67:f0:a4:87:
2d:2e:d6:0a:b4:69:b2:5c:8f:0c:61:35:76:5c:e4:98:74:86:
97:c3:e2:c4:12:73:fd:68:db:9a:bf:00:fe:0b:48:4c:e9:f2:
22:db:50:8b:ac:de:6a:47:c8:5b:1f:ac:22:e0:8a:9b:1d:16:
04:ab:c5:61:83:b7:0c:13:ab:e2:1f:cb:58:65:80:00:ec:d9:
04:d9:cb:7c:ae:53:aa:ae:ae:4a:7c:b3:a5:d6:5f:33:98:f0:
62:50:c9:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElDGXgdsSNu8pnQBL5MTCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOGVmMzY5OWUzYzdiMDBjZmY1NTE0ZTU0YzEzNjEyYTNi
YzA4MTAwHhcNMjYxMDEwMDkwMjExWhcNMjYxMDExMDkwMjExWjAzMTEwLwYDVQQD
Eyg0OTFhYTNjYTEzZDM1NTg1ZWMwNjYzMjRhYWM0NDZjMThjNzk0NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz1zbPox2n3znU11KB5E0S6v+cv9
zIdsRuOruuLwdM9c6dl10xypbFozZbF4iCwqhQklYTyuM7Bn9+Kbnu7SCkxS+3ck
wfcWPxhlERmclLtT+e0ArPY7pJjkP23m8VbVYg+SzdraJf1JsSmyMzgc9+DNcpQf
WE6d6FZ4W55ZaPku7ILaZEEc8sR/WAobKoXMUlcDDox4ydsj+ScabV7qnAzoQemn
FDTLtuoFSj9toLkIjBM4t0Ce2uw31SKl7Waw6TJNxtY6Iq42XfoybxLef3qVpMcT
MosPKnm0hk5mr3SfuGwCPkdarBLf2qw/XnKYFKTgJ5Hh/j666GYM5LBAKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkao8oT01WF7AZjJKrERsGMeUYlMB8GA1UdIwQY
MBaAFDuO82mePHsAz/VRTlTBNhKjvAgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzQ3emFaNDhld0RQOVZGT1ZNRTJFcU84Q0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83MTAyMzktMzE3Ny00NjNhLTg5ODUt
YjIxZGE2ZDAxMjhlLzEvTzQ3emFaNDhld0RQOVZGT1ZNRTJFcU84Q0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83MTAyMzktMzE3Ny00NjNhLTg5ODUtYjIxZGE2ZDAxMjhl
LzEvTzQ3emFaNDhld0RQOVZGT1ZNRTJFcU84Q0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRa/lV6B
MwBlyvpaD4VL1Q8Mk2mMhpMywcZrf0Z74kojJWsX+suDBeU7rBaF/T61LibinL75
5MFpzv+60tGrCTqN0jewUMkV4yy8g2T9jOrCpeioy/kCE1PuRNy85rALczPqeBF6
0lNS+EMAz6WPBuQLtuzPsWcV+J4NGG1YumK9FXEe1j/533l8ozPpndPQlMLGo7VD
9raIm1EDRktn8KSHLS7WCrRpslyPDGE1dlzkmHSGl8PixBJz/Wjbmr8A/gtITOny
IttQi6zeakfIWx+sIuCKmx0WBKvFYYO3DBOr4h/LWGWAAOzZBNnLfK5Tqq6uSnyz
pdZfM5jwYlDJzA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 19:13:59 2026 by rpki-client