Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier: vS6eL2uH70j5JMCymd+X1p9vl+5weZXWyyqu58DwRUI=
Subject key identifier: 90:D0:34:A3:5A:F8:6D:B4:57:1A:E8:D6:42:DA:69:26:04:6A:7A:61
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 01A0932159AC5BFED79DBB348BC4B8D556BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number: 1A50
Signing time: Sat 12 Sep 2026 01:00:31 +0000
Manifest this update: Sat 12 Sep 2026 01:00:31 +0000
Manifest next update: Sun 13 Sep 2026 01:00:31 +0000
Files and hashes: 1: cqrDqsllU4angXR7ZhiixighcHI.roa (hash: fhOWug7UyzusWzCmpcbK8cX3/PPspaEdcPiG9KdZ6F4=)
2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: TsM6AHT8YBv53PLzHVNoSix/f5GLbdUCutP5C2PUjtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:93:21:59:ac:5b:fe:d7:9d:bb:34:8b:c4:b8:d5:56:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Sep 12 01:00:31 2026 GMT
Not After : Sep 13 01:00:31 2026 GMT
Subject: CN=90d034a35af86db4571ae8d642da6926046a7a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:f2:85:ca:96:f7:7a:49:f2:f1:aa:97:c4:
90:f2:ef:3a:53:00:40:15:98:ce:7a:6b:e8:af:73:
0a:a2:c2:1e:aa:ea:9a:6f:d2:86:ce:ba:27:4a:75:
42:ba:ff:e6:e9:8e:f0:4b:80:93:98:92:2a:13:46:
05:40:9f:55:2f:f6:39:c4:dd:d6:5a:35:d3:91:51:
0d:6d:fa:43:0e:e0:ac:ad:76:c4:93:36:e7:bb:ec:
63:6a:ba:4e:11:10:be:93:27:0b:50:b0:e2:f6:59:
38:87:45:cb:4c:b6:2c:25:26:fd:4e:fe:01:4c:b7:
65:a0:ff:95:09:1a:e8:ab:58:00:49:69:1d:bc:a6:
5a:f4:5b:6e:09:de:25:b2:5a:cf:14:9f:d4:18:44:
1d:ed:98:fb:fe:8d:fd:56:fb:f0:07:e9:aa:8d:3b:
e4:e6:35:57:6c:7e:b3:84:95:91:21:69:e9:f7:34:
ad:bd:62:cb:49:91:2c:3e:88:d8:f5:48:da:70:c9:
a7:46:6a:1f:ff:a4:38:6c:dd:26:77:da:a5:ff:85:
e8:4e:5d:46:20:59:99:c4:5b:8f:85:d0:4b:ed:eb:
28:0c:e0:d8:9f:da:73:d9:64:5f:bb:f8:68:50:d6:
18:2d:ab:ca:77:0f:57:39:33:58:ee:96:fc:78:b5:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:34:A3:5A:F8:6D:B4:57:1A:E8:D6:42:DA:69:26:04:6A:7A:61
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:90:fc:f2:4f:a6:41:55:a4:f9:32:c8:39:c1:1a:42:ac:cd:
8f:b0:d2:a3:df:b2:8d:4b:c9:33:ce:3a:7e:1b:41:6a:34:01:
94:7e:cb:c7:65:00:48:36:c5:e2:01:b3:92:f8:e8:9e:00:62:
31:b3:5c:1c:34:32:a9:29:f2:56:73:12:24:89:fc:7b:bc:1f:
9a:f5:7f:b0:ee:16:50:e2:38:70:f4:1d:b7:51:b9:b4:05:1c:
25:fe:57:15:12:57:25:3d:b2:15:22:37:01:89:17:cb:46:99:
de:0a:1d:e1:73:b0:27:72:3c:55:b3:a0:a9:fe:fc:9b:e8:d3:
01:8a:4f:80:7b:74:49:8e:19:e4:18:3b:ac:b2:60:f7:fc:61:
fd:d3:14:ba:9f:bd:d0:7c:11:5d:0e:c1:99:83:f8:1f:ed:f6:
e2:da:1e:12:a6:1a:4d:fb:df:8a:89:fb:d6:16:78:93:dd:c9:
65:61:40:49:f9:de:80:bd:02:67:d0:23:a6:5a:60:8f:33:5b:
80:2d:49:3c:2e:1a:f1:c8:bd:31:56:17:1b:ba:b3:cc:7c:62:
88:19:c0:14:a6:b9:68:13:5c:4a:a1:c3:91:bc:ce:db:05:ec:
ea:6a:34:91:99:fd:44:6d:d7:0d:e5:17:fa:b0:96:b6:43:17:
21:57:36:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCTIVmsW/7Xnbs0i8S41Va/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzUzNjliMmQ0YmIyZTJkZWRlNjY4NjQ1MzEzZTM0NGU2
ZjFjYzAwHhcNMjYwOTEyMDEwMDMxWhcNMjYwOTEzMDEwMDMxWjAzMTEwLwYDVQQD
Eyg5MGQwMzRhMzVhZjg2ZGI0NTcxYWU4ZDY0MmRhNjkyNjA0NmE3YTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQryhcqW93pJ8vGql8SQ8u86UwBA
FZjOemvor3MKosIequqab9KGzronSnVCuv/m6Y7wS4CTmJIqE0YFQJ9VL/Y5xN3W
WjXTkVENbfpDDuCsrXbEkzbnu+xjarpOERC+kycLULDi9lk4h0XLTLYsJSb9Tv4B
TLdloP+VCRroq1gASWkdvKZa9FtuCd4lslrPFJ/UGEQd7Zj7/o39VvvwB+mqjTvk
5jVXbH6zhJWRIWnp9zStvWLLSZEsPojY9UjacMmnRmof/6Q4bN0md9ql/4XoTl1G
IFmZxFuPhdBL7esoDODYn9pz2WRfu/hoUNYYLavKdw9XOTNY7pb8eLVB+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDQNKNa+G20Vxro1kLaaSYEanphMB8GA1UdIwQY
MBaAFKN1NpstS7Li3t5mhkUxPjRObxzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQt
MjhiZWM3Yjk5OTI5LzEvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQtMjhiZWM3Yjk5OTI5
LzEvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJD88k+m
QVWk+TLIOcEaQqzNj7DSo9+yjUvJM846fhtBajQBlH7Lx2UASDbF4gGzkvjongBi
MbNcHDQyqSnyVnMSJIn8e7wfmvV/sO4WUOI4cPQdt1G5tAUcJf5XFRJXJT2yFSI3
AYkXy0aZ3god4XOwJ3I8VbOgqf78m+jTAYpPgHt0SY4Z5Bg7rLJg9/xh/dMUup+9
0HwRXQ7BmYP4H+324toeEqYaTfvfion71hZ4k93JZWFASfnegL0CZ9AjplpgjzNb
gC1JPC4a8ci9MVYXG7qzzHxiiBnAFKa5aBNcSqHDkbzO2wXs6mo0kZn9RG3XDeUX
+rCWtkMXIVc2rA==
-----END CERTIFICATE-----
Generated at Sat Sep 12 09:43:03 2026 by rpki-client