Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
File: O618kdgYkaWUfX4UpmhJEgY6Xdk.mft (raw, json)
Hash identifier: wAjUjnTsucuaDpwBd7PnCi2AXq+1HfeniIlF2TDd+tU=
Subject key identifier: 53:6A:FE:10:0F:20:3B:4C:2E:1C:FD:4E:DC:2B:31:89:04:EF:61:6F
Authority key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
Certificate issuer: /CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Certificate serial: 01A03D4CBD96871FAF466BA96A9F63D0A896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
Manifest number: 0283
Signing time: Wed 26 Aug 2026 09:00:34 +0000
Manifest this update: Wed 26 Aug 2026 09:00:34 +0000
Manifest next update: Thu 27 Aug 2026 09:00:34 +0000
Files and hashes: 1: GPjTkixHgXgtIDNDsyb7i-Nlleo.roa (hash: 0MyLo6ZK/tC1RGqYqyZYKLVLfr7W+2VBizLdr/A1dio=)
2: O618kdgYkaWUfX4UpmhJEgY6Xdk.crl (hash: 2wupv83M1lIz59ODxzPF7NWrK2iICSG2Y90A8IUfE24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4c:bd:96:87:1f:af:46:6b:a9:6a:9f:63:d0:a8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Validity
Not Before: Aug 26 09:00:34 2026 GMT
Not After : Aug 27 09:00:34 2026 GMT
Subject: CN=536afe100f203b4c2e1cfd4edc2b318904ef616f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:49:30:7a:b3:df:7d:6d:3d:11:af:dc:b8:
2b:eb:ce:34:34:e0:a2:ce:1a:32:88:b3:88:d3:18:
35:bb:51:c8:90:1b:48:3a:84:7d:54:c4:47:f2:2b:
b9:0f:4e:a8:90:be:e0:e4:37:27:17:39:a8:40:e6:
d7:ee:52:fc:71:18:10:75:fe:4b:9b:2b:7e:be:ad:
28:35:68:1f:b2:ef:e3:a6:eb:ca:d4:2b:fd:35:dc:
0e:1b:81:83:a3:e4:87:bc:35:89:06:b7:2a:8e:64:
73:f6:9c:87:17:08:a7:8a:3b:c6:ce:82:a0:7d:2e:
76:d1:bc:db:ff:9e:d0:32:08:17:18:d4:02:b1:46:
d8:09:e4:0f:21:2b:54:e7:95:9d:aa:81:4a:dc:fe:
a7:cc:8c:7f:e9:a6:81:0d:0c:89:5b:4a:ba:72:6d:
57:0f:b2:8e:92:a9:d9:fd:42:7c:9a:bb:4f:4c:95:
10:13:cd:fd:bf:20:1f:b3:1b:c6:dd:be:d2:9c:73:
e0:87:48:2a:0e:05:50:8e:6a:f6:74:f6:ec:df:2c:
b2:4b:df:8c:8f:49:c0:c1:5b:8b:66:b6:60:40:8d:
44:1c:f4:44:13:d0:bc:a0:f1:c3:6f:b9:6d:7c:ed:
bc:2c:d7:8d:a0:7a:6f:48:46:f5:32:41:b8:87:82:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6A:FE:10:0F:20:3B:4C:2E:1C:FD:4E:DC:2B:31:89:04:EF:61:6F
X509v3 Authority Key Identifier:
keyid:3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:de:a8:ed:f8:87:14:b0:d9:47:e1:46:6d:7c:37:b5:27:b9:
45:c2:e1:91:84:3e:39:6a:fa:fe:7e:1b:74:d6:45:d5:ae:1f:
14:b8:ee:26:6c:eb:85:e9:0d:67:60:8f:e9:34:4a:7a:17:47:
0f:17:dd:4d:86:bf:c6:19:71:a6:95:40:45:ca:75:b6:f5:e2:
12:1c:ea:f8:0e:f5:cd:b2:d4:42:71:8b:89:75:43:cf:84:78:
08:6b:71:48:79:1a:3c:3a:9d:40:78:53:b3:73:2f:4f:4c:a5:
94:61:1c:ed:5a:f8:27:ab:f7:0f:c7:00:b8:42:f2:1e:a2:6d:
4f:c3:f0:77:21:74:0c:ad:00:9b:3b:29:bd:8c:8b:76:31:73:
05:c2:6b:32:cb:f6:b9:59:d9:b0:c6:92:af:4b:f4:17:9c:8d:
9c:2b:a4:ea:b9:b4:1a:bf:1e:b2:ce:8d:83:ba:b5:41:10:db:
b9:9f:43:db:a6:e3:36:2f:ad:1d:e1:3b:88:7f:52:25:81:1c:
c9:d8:6e:18:5a:54:83:b7:3a:1a:25:0a:bb:b2:7a:87:61:97:
ea:e8:d6:08:c3:6a:6f:2c:78:c3:87:b8:b8:fe:7f:1c:3c:bd:
97:0d:7f:25:6a:06:36:4d:fd:3b:10:b2:37:a1:e2:3b:f9:a5:
94:54:99:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA9TL2Whx+vRmupap9j0KiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYWQ3YzkxZDgxODkxYTU5NDdkN2UxNGE2Njg0OTEyMDYz
YTVkZDkwHhcNMjYwODI2MDkwMDM0WhcNMjYwODI3MDkwMDM0WjAzMTEwLwYDVQQD
Eyg1MzZhZmUxMDBmMjAzYjRjMmUxY2ZkNGVkYzJiMzE4OTA0ZWY2MTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYFJMHqz331tPRGv3Lgr6840NOCi
zhoyiLOI0xg1u1HIkBtIOoR9VMRH8iu5D06okL7g5DcnFzmoQObX7lL8cRgQdf5L
myt+vq0oNWgfsu/jpuvK1Cv9NdwOG4GDo+SHvDWJBrcqjmRz9pyHFwinijvGzoKg
fS520bzb/57QMggXGNQCsUbYCeQPIStU55WdqoFK3P6nzIx/6aaBDQyJW0q6cm1X
D7KOkqnZ/UJ8mrtPTJUQE839vyAfsxvG3b7SnHPgh0gqDgVQjmr2dPbs3yyyS9+M
j0nAwVuLZrZgQI1EHPREE9C8oPHDb7ltfO28LNeNoHpvSEb1MkG4h4LSIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNq/hAPIDtMLhz9TtwrMYkE72FvMB8GA1UdIwQY
MBaAFDutfJHYGJGllH1+FKZoSRIGOl3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzYxOGtkZ1lrYVdVZlg0VXBtaEpFZ1k2WGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85NDkzZWUtN2EwNS00MWVmLWJjZjYt
NDIyMDIyNDk5YWNhLzEvTzYxOGtkZ1lrYVdVZlg0VXBtaEpFZ1k2WGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85NDkzZWUtN2EwNS00MWVmLWJjZjYtNDIyMDIyNDk5YWNh
LzEvTzYxOGtkZ1lrYVdVZlg0VXBtaEpFZ1k2WGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwd6o7fiH
FLDZR+FGbXw3tSe5RcLhkYQ+OWr6/n4bdNZF1a4fFLjuJmzrhekNZ2CP6TRKehdH
DxfdTYa/xhlxppVARcp1tvXiEhzq+A71zbLUQnGLiXVDz4R4CGtxSHkaPDqdQHhT
s3MvT0yllGEc7Vr4J6v3D8cAuELyHqJtT8PwdyF0DK0AmzspvYyLdjFzBcJrMsv2
uVnZsMaSr0v0F5yNnCuk6rm0Gr8ess6Ng7q1QRDbuZ9D26bjNi+tHeE7iH9SJYEc
ydhuGFpUg7c6GiUKu7J6h2GX6ujWCMNqbyx4w4e4uP5/HDy9lw1/JWoGNk39OxCy
N6HiO/mllFSZuw==
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:30:42 2026 by rpki-client