Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: FqpUeWuO4JIXe9Qb3naYyF08qY2XnbrZmiBrQJM4I0A=
Subject key identifier: 87:F3:6F:73:B4:3F:86:F0:2F:8A:18:11:5C:87:F7:ED:88:26:F9:B0
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 019D382E4C238758D8DD5B320EC72D74B7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 0A8C
Signing time: Sun 29 Mar 2026 06:00:51 +0000
Manifest this update: Sun 29 Mar 2026 06:00:51 +0000
Manifest next update: Mon 30 Mar 2026 06:00:51 +0000
Files and hashes: 1: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: BlmKIrLWe5N7lWeBGmYsOm62WjObVKx14TF2DXj8L4I=)
2: wVx12s3RofqhZGn1DU5IkoBo6Ek.roa (hash: rtRYGzz5et6AkfKvUX/IWgHJLFa3ZiIV+HrHpHk9/S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4c:23:87:58:d8:dd:5b:32:0e:c7:2d:74:b7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Mar 29 06:00:51 2026 GMT
Not After : Mar 30 06:00:51 2026 GMT
Subject: CN=87f36f73b43f86f02f8a18115c87f7ed8826f9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:66:03:52:bb:7a:6a:5d:65:97:af:a7:b4:
95:90:5f:b6:0c:f6:db:c1:df:9c:60:3b:ff:ff:57:
ec:96:f7:71:b0:09:3b:04:41:c1:3e:3b:fb:6b:36:
80:d0:7b:c4:2a:f9:e1:0c:c9:e9:87:a0:f1:27:91:
b2:3b:2a:8f:ca:f5:d5:e7:40:e6:7e:1b:4f:64:35:
80:d9:f5:bd:bf:e8:2a:cc:02:66:de:0e:4e:ad:a2:
1a:18:c5:bb:d0:04:dc:89:26:80:1b:63:b8:5f:31:
2c:72:b5:8c:58:2a:08:7f:aa:5f:88:c6:b5:e0:f9:
32:c6:96:27:35:7a:53:0b:04:1a:0e:f3:23:be:c7:
25:b9:d7:a2:d0:e2:af:40:88:11:3d:45:14:41:3a:
f7:bc:1d:e3:4c:2e:4d:73:1f:68:5d:e6:4f:a1:91:
f7:ce:5e:d6:b2:78:db:a0:7a:5f:32:6d:f6:4a:9e:
c1:f2:b1:09:01:97:36:39:94:b5:19:db:91:ce:e9:
fb:2c:fa:c2:68:31:b9:b9:3b:d8:8e:0f:25:25:e1:
25:85:c3:9a:30:42:a7:d1:ae:2f:e7:09:b7:64:12:
77:f0:4d:89:6f:c1:19:e5:90:3f:4d:4b:e6:70:cd:
5c:c5:c9:f1:f8:11:0c:b1:39:bd:81:2f:e7:46:08:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F3:6F:73:B4:3F:86:F0:2F:8A:18:11:5C:87:F7:ED:88:26:F9:B0
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:53:75:09:1e:89:37:58:1f:fa:ec:09:cf:38:c8:b8:9b:1b:
78:0a:b7:42:6f:af:05:d7:2d:95:7e:8c:f1:6a:e9:6c:b6:65:
6c:c0:79:fc:bd:41:b2:0a:b8:58:16:f6:0b:cc:63:5e:d6:cc:
8b:6e:55:0f:94:01:14:80:42:93:d1:05:91:a8:1f:87:6b:b8:
f2:50:ea:f3:8a:06:bd:5f:e3:bf:33:18:86:4f:28:83:59:b7:
43:57:c2:0a:94:53:83:d7:fa:76:9e:db:39:32:fe:65:77:d0:
e3:8f:49:94:08:75:d2:bc:5d:04:13:1b:dc:8c:6d:5b:f4:63:
8c:fe:3e:ad:8c:a5:da:01:e2:2f:12:02:26:fc:3f:75:0e:46:
ec:01:dc:cc:88:88:79:d2:e5:c6:e2:35:66:04:9f:4f:4a:4f:
7a:6b:6a:d6:c7:72:79:1a:34:a3:39:bd:70:4f:8d:78:c2:5f:
ac:71:33:b6:86:07:25:3c:85:3a:53:69:da:76:53:7b:8a:ad:
e3:77:4f:fc:8d:d2:d5:be:0b:af:16:d3:10:9a:d2:7c:e4:94:
65:2b:53:09:4d:0f:63:75:d4:49:77:b0:c1:1b:3a:fa:32:e8:
5e:8b:58:4d:01:6d:6a:2d:f7:f9:a6:0b:0c:2c:f4:fc:f1:30:
9e:42:09:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lkwjh1jY3VsyDsctdLfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWNlNzNkYWY1MjEwMmNkYjg0YjdmNTY4MTI5Njk1N2Ew
YzlhNzgwHhcNMjYwMzI5MDYwMDUxWhcNMjYwMzMwMDYwMDUxWjAzMTEwLwYDVQQD
Eyg4N2YzNmY3M2I0M2Y4NmYwMmY4YTE4MTE1Yzg3ZjdlZDg4MjZmOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAritmA1K7empdZZevp7SVkF+2DPbb
wd+cYDv//1fslvdxsAk7BEHBPjv7azaA0HvEKvnhDMnph6DxJ5GyOyqPyvXV50Dm
fhtPZDWA2fW9v+gqzAJm3g5OraIaGMW70ATciSaAG2O4XzEscrWMWCoIf6pfiMa1
4PkyxpYnNXpTCwQaDvMjvscludei0OKvQIgRPUUUQTr3vB3jTC5Ncx9oXeZPoZH3
zl7WsnjboHpfMm32Sp7B8rEJAZc2OZS1GduRzun7LPrCaDG5uTvYjg8lJeElhcOa
MEKn0a4v5wm3ZBJ38E2Jb8EZ5ZA/TUvmcM1cxcnx+BEMsTm9gS/nRggGmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfzb3O0P4bwL4oYEVyH9+2IJvmwMB8GA1UdIwQY
MBaAFKOs5z2vUhAs24S39WgSlpV6DJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZ6blBhOVNFQ3piaExmMWFCS1dsWG9NbW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83N2Y1YjktNWI4Yy00NTQ2LTlhMGQt
YjhjNWY4NGQ5Njg3LzEvbzZ6blBhOVNFQ3piaExmMWFCS1dsWG9NbW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83N2Y1YjktNWI4Yy00NTQ2LTlhMGQtYjhjNWY4NGQ5Njg3
LzEvbzZ6blBhOVNFQ3piaExmMWFCS1dsWG9NbW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1N1CR6J
N1gf+uwJzzjIuJsbeAq3Qm+vBdctlX6M8WrpbLZlbMB5/L1Bsgq4WBb2C8xjXtbM
i25VD5QBFIBCk9EFkagfh2u48lDq84oGvV/jvzMYhk8og1m3Q1fCCpRTg9f6dp7b
OTL+ZXfQ449JlAh10rxdBBMb3IxtW/RjjP4+rYyl2gHiLxICJvw/dQ5G7AHczIiI
edLlxuI1ZgSfT0pPemtq1sdyeRo0ozm9cE+NeMJfrHEztoYHJTyFOlNp2nZTe4qt
43dP/I3S1b4LrxbTEJrSfOSUZStTCU0PY3XUSXewwRs6+jLoXotYTQFtai33+aYL
DCz0/PEwnkIJTA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:47 2026 by rpki-client