Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
File: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json)
Hash identifier: PX+NbPwWkiFvr0hXF0LYbH48HHlyYsZKtL+0BP3ZQ+E=
Subject key identifier: AC:7B:35:0A:71:6F:1C:D6:09:7E:14:D5:36:C7:73:38:7D:32:B0:20
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Certificate issuer: /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial: 01A13E25A36496AA62CECB96EC7560907474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 06:00:16 +0000
Manifest this update: Thu 15 Oct 2026 06:00:16 +0000
Manifest next update: Fri 16 Oct 2026 06:00:16 +0000
Files and hashes: 1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: KX4cm+uqOIo4WG33w0+ombSBm83gR5ehtSHEVGsXhYY=)
2: UFUNHcp59zFp-s7epnaBCk3fSDI.roa (hash: 5JNnpeUYOHWtCY7aisWTKc4iY+kJ/fdA3iBaqT6fPPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:a3:64:96:aa:62:ce:cb:96:ec:75:60:90:74:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Validity
Not Before: Oct 15 06:00:16 2026 GMT
Not After : Oct 16 06:00:16 2026 GMT
Subject: CN=ac7b350a716f1cd6097e14d536c773387d32b020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:15:36:71:e6:bc:1f:f5:96:d3:2c:87:0f:
86:9a:c5:27:ec:01:ae:2b:fa:30:0e:95:40:b5:ae:
dc:11:f4:66:63:e8:25:73:10:36:23:70:99:49:7c:
56:8e:95:c1:b0:7f:d1:db:f5:e8:f3:8f:13:0f:17:
61:e1:ed:dd:9f:10:3a:0e:44:e9:e3:f1:20:d4:e2:
46:c5:b1:e9:14:44:4f:28:82:08:7e:45:07:8c:47:
c5:c6:6b:82:10:cd:e9:51:af:1f:80:5f:9b:57:81:
3f:77:41:24:5c:58:9d:fc:52:62:76:da:11:53:48:
7b:28:36:44:d9:30:55:71:45:80:2a:d6:76:e8:8f:
8e:3c:39:e4:0f:ab:1d:70:d8:cd:9c:68:7f:37:7e:
9a:67:b0:6b:ba:7c:ab:3a:9a:96:94:5b:d9:10:7d:
ba:50:51:25:0f:d2:08:89:6f:f3:c3:a9:42:e9:5a:
bc:c5:19:68:fa:69:f6:fc:90:9e:ba:ed:ae:ee:8d:
3e:fe:5c:54:ce:38:99:19:46:4b:6c:1b:77:9b:3d:
6e:49:29:66:17:0d:65:25:5b:31:21:79:5f:31:19:
c8:7e:f4:b3:65:93:54:10:18:7b:b4:d3:d1:32:3f:
4e:9f:da:e7:85:da:63:34:39:35:4e:80:50:01:f2:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7B:35:0A:71:6F:1C:D6:09:7E:14:D5:36:C7:73:38:7D:32:B0:20
X509v3 Authority Key Identifier:
keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d7:d4:88:f0:09:ad:7a:ff:f9:7d:12:63:56:e2:a2:65:5a:
0f:55:ef:db:f5:42:2d:52:28:8a:9c:df:ee:6f:6a:74:2e:f3:
ba:d3:45:0c:58:71:ef:1c:6b:9d:2e:a3:32:e6:7d:5d:4c:e6:
ab:ed:c0:16:79:32:bc:f9:d2:cc:d2:57:ed:77:f2:b4:25:75:
c1:26:13:d7:69:f0:87:33:0c:1d:6e:5a:0b:62:14:e7:04:84:
19:c6:2c:7f:ab:95:bc:76:c4:77:4c:81:ce:aa:86:34:1b:6f:
76:6f:0e:3b:74:06:5a:aa:91:27:28:2b:e0:ce:3c:b3:c6:e7:
d6:db:a7:d9:e2:8b:11:0b:f7:3b:45:86:f0:5c:4f:7d:be:88:
22:0d:7c:13:da:f7:49:0e:46:95:a2:9b:40:d8:d6:6a:6a:da:
85:41:0d:30:22:a2:63:97:6b:77:d2:8c:ac:7d:58:60:25:be:
2c:fa:01:53:b9:1a:4c:f0:9d:70:f7:3c:7b:16:81:d4:5d:54:
f6:91:68:a8:b3:83:30:5c:b5:e7:11:44:73:0a:70:9b:eb:31:
a8:1a:3d:23:5d:25:a4:ac:0a:20:31:ea:84:d6:22:83:1d:97:
f5:1c:a5:7a:dd:5d:81:bf:a1:98:a6:1c:11:4f:76:12:68:2f:
f0:df:a2:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JaNklqpizsuW7HVgkHR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTY1YmVjNWM3NjVjODUwZWU4ZmY5N2NjNDFiMzgwMzFk
MWQ4M2EwHhcNMjYxMDE1MDYwMDE2WhcNMjYxMDE2MDYwMDE2WjAzMTEwLwYDVQQD
EyhhYzdiMzUwYTcxNmYxY2Q2MDk3ZTE0ZDUzNmM3NzMzODdkMzJiMDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst8VNnHmvB/1ltMshw+GmsUn7AGu
K/owDpVAta7cEfRmY+glcxA2I3CZSXxWjpXBsH/R2/Xo848TDxdh4e3dnxA6DkTp
4/Eg1OJGxbHpFERPKIIIfkUHjEfFxmuCEM3pUa8fgF+bV4E/d0EkXFid/FJidtoR
U0h7KDZE2TBVcUWAKtZ26I+OPDnkD6sdcNjNnGh/N36aZ7BrunyrOpqWlFvZEH26
UFElD9IIiW/zw6lC6Vq8xRlo+mn2/JCeuu2u7o0+/lxUzjiZGUZLbBt3mz1uSSlm
Fw1lJVsxIXlfMRnIfvSzZZNUEBh7tNPRMj9On9rnhdpjNDk1ToBQAfKT+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKx7NQpxbxzWCX4U1TbHczh9MrAgMB8GA1UdIwQY
MBaAFNDmW+xcdlyFDuj/l8xBs4Ax0dg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9aYjdGeDJYSVVPNlAtWHpFR3pnREhSMkRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82YmI3Y2ItZDBlZC00NjUwLWFkMGEt
MjdhNDc0NTA1NDk5LzEvME9aYjdGeDJYSVVPNlAtWHpFR3pnREhSMkRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS82YmI3Y2ItZDBlZC00NjUwLWFkMGEtMjdhNDc0NTA1NDk5
LzEvME9aYjdGeDJYSVVPNlAtWHpFR3pnREhSMkRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9fUiPAJ
rXr/+X0SY1biomVaD1Xv2/VCLVIoipzf7m9qdC7zutNFDFhx7xxrnS6jMuZ9XUzm
q+3AFnkyvPnSzNJX7XfytCV1wSYT12nwhzMMHW5aC2IU5wSEGcYsf6uVvHbEd0yB
zqqGNBtvdm8OO3QGWqqRJygr4M48s8bn1tun2eKLEQv3O0WG8FxPfb6IIg18E9r3
SQ5GlaKbQNjWamrahUENMCKiY5drd9KMrH1YYCW+LPoBU7kaTPCdcPc8exaB1F1U
9pFoqLODMFy15xFEcwpwm+sxqBo9I10lpKwKIDHqhNYigx2X9Rylet1dgb+hmKYc
EU92Emgv8N+iow==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:17:54 2026 by rpki-client