Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.mft
File: o-bULY3pgsA5-oG_CEuhYYM6zjA.mft (raw, json)
Hash identifier: JIrwryUeglffrzPNdQlZK8cDisla585eRa2E12DfAA4=
Subject key identifier: 10:67:DE:F8:06:E0:88:A5:80:E5:2C:1B:1F:5E:99:49:61:16:ED:DA
Authority key identifier: A3:E6:D4:2D:8D:E9:82:C0:39:FA:81:BF:08:4B:A1:61:83:3A:CE:30
Certificate issuer: /CN=a3e6d42d8de982c039fa81bf084ba161833ace30
Certificate serial: 019E2926E3B5BE1A1BE41D58FD5DBC4CA1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bULY3pgsA5-oG_CEuhYYM6zjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.mft
Manifest number: 03
Signing time: Fri 15 May 2026 01:01:14 +0000
Manifest this update: Fri 15 May 2026 01:01:14 +0000
Manifest next update: Sat 16 May 2026 01:01:14 +0000
Files and hashes: 1: 8OrZ-Y_HP7mNK0Wg5q6pTzrFWIY.asa (hash: Q/V+vcg97mJxJxbUvevFdo9sCyk5TMEA0ORHq1KOCLc=)
2: o-bULY3pgsA5-oG_CEuhYYM6zjA.crl (hash: 4jqkUJPnnFIFYgXvKh0tCmYgUMOv514ng3bzmByNf4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bULY3pgsA5-oG_CEuhYYM6zjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:e3:b5:be:1a:1b:e4:1d:58:fd:5d:bc:4c:a1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6d42d8de982c039fa81bf084ba161833ace30
Validity
Not Before: May 15 01:01:14 2026 GMT
Not After : May 16 01:01:14 2026 GMT
Subject: CN=1067def806e088a580e52c1b1f5e99496116edda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:63:c7:ed:8e:6f:46:e4:b6:71:56:e7:aa:
77:a9:70:3d:c7:ce:e6:3f:dd:33:d0:01:fe:ea:e6:
7b:de:34:b7:74:fd:bd:86:d0:df:88:db:d8:21:63:
1a:a2:87:e8:de:48:1d:e4:a0:e8:63:87:ec:0b:cf:
c2:12:4c:72:0c:19:35:bf:39:97:98:16:1f:73:4b:
33:39:0e:c2:66:1d:36:7f:af:7a:9f:1c:cd:e1:44:
16:41:7f:e0:a2:bf:f3:ee:4b:c3:d9:23:fe:7e:8c:
b8:53:d1:19:c6:cb:0a:11:57:6f:cd:96:cd:9e:91:
24:ad:f0:53:76:c3:7f:9a:47:2b:e6:3d:1b:f0:3c:
69:d8:b2:36:e0:c6:23:fd:2b:80:bc:37:4c:55:2b:
f9:11:5e:0d:d4:c6:ad:7b:94:bf:2b:25:4d:6f:2d:
5d:a9:07:cc:fe:28:dd:56:3e:c6:b7:ee:0c:4f:5b:
4b:23:ab:a7:af:42:59:33:ee:55:15:21:0e:42:f6:
83:62:bd:a4:fe:c3:e8:74:84:ed:54:0f:06:61:e1:
23:cf:03:b5:fd:49:4a:4a:bf:cf:0b:7b:1a:ee:0d:
d5:d4:b0:f9:36:46:0f:e5:00:df:45:11:ff:0c:76:
65:a7:f7:e5:9a:87:2c:d4:21:45:6b:cc:66:fc:15:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:67:DE:F8:06:E0:88:A5:80:E5:2C:1B:1F:5E:99:49:61:16:ED:DA
X509v3 Authority Key Identifier:
keyid:A3:E6:D4:2D:8D:E9:82:C0:39:FA:81:BF:08:4B:A1:61:83:3A:CE:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bULY3pgsA5-oG_CEuhYYM6zjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:32:80:4b:90:e8:fc:c5:7b:9a:14:0c:fa:26:88:18:50:4d:
f5:4d:64:10:1c:33:97:da:cc:72:79:38:bb:e0:5a:13:0b:9a:
b1:0d:1a:39:7c:9f:fe:37:66:e0:10:b7:06:d6:9c:e2:7c:e7:
36:4f:b3:83:ea:af:4f:cb:ae:d9:8e:24:5c:e6:f3:61:44:e4:
52:3f:74:fe:05:c0:1b:f4:59:cc:1b:80:26:98:7e:dd:e3:45:
ab:05:36:94:1d:b6:ad:16:8d:80:30:ca:07:14:c1:ef:88:36:
4f:d5:d2:89:3d:f6:26:bb:9d:55:9c:75:b6:ab:d9:68:b6:13:
80:51:41:0a:10:1a:51:3c:19:3e:be:49:e5:2c:96:ac:bb:9b:
01:7f:56:e7:71:83:92:37:58:ec:7a:75:a7:99:22:55:30:d1:
3a:e4:82:d6:68:b6:1c:3f:27:ab:54:f1:90:77:dc:c0:f6:cf:
14:4b:a4:cb:c9:a0:be:4e:f7:98:fb:7d:bf:49:68:d0:e7:4b:
da:9f:33:e6:22:05:08:0f:c4:43:3c:27:dd:30:00:2b:67:0b:
7c:be:fe:10:67:d2:ab:bd:f9:5f:f9:cf:e1:15:6c:44:3e:c8:
09:9c:82:d4:9a:4a:2c:48:de:18:c9:62:fe:c3:42:59:4f:20:
3b:69:48:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pJuO1vhob5B1Y/V28TKGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTZkNDJkOGRlOTgyYzAzOWZhODFiZjA4NGJhMTYxODMz
YWNlMzAwHhcNMjYwNTE1MDEwMTE0WhcNMjYwNTE2MDEwMTE0WjAzMTEwLwYDVQQD
EygxMDY3ZGVmODA2ZTA4OGE1ODBlNTJjMWIxZjVlOTk0OTYxMTZlZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg1jx+2Ob0bktnFW56p3qXA9x87m
P90z0AH+6uZ73jS3dP29htDfiNvYIWMaoofo3kgd5KDoY4fsC8/CEkxyDBk1vzmX
mBYfc0szOQ7CZh02f696nxzN4UQWQX/gor/z7kvD2SP+foy4U9EZxssKEVdvzZbN
npEkrfBTdsN/mkcr5j0b8Dxp2LI24MYj/SuAvDdMVSv5EV4N1Mate5S/KyVNby1d
qQfM/ijdVj7Gt+4MT1tLI6unr0JZM+5VFSEOQvaDYr2k/sPodITtVA8GYeEjzwO1
/UlKSr/PC3sa7g3V1LD5NkYP5QDfRRH/DHZlp/flmocs1CFFa8xm/BXt9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBn3vgG4IilgOUsGx9emUlhFu3aMB8GA1UdIwQY
MBaAFKPm1C2N6YLAOfqBvwhLoWGDOs4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1iVUxZM3Bnc0E1LW9HX0NFdWhZWU02empBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82NzBkMjQtN2Y1Yy00M2ViLWExZWQt
ZGMzYmE5NDhkNzFlLzEvby1iVUxZM3Bnc0E1LW9HX0NFdWhZWU02empBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82NzBkMjQtN2Y1Yy00M2ViLWExZWQtZGMzYmE5NDhkNzFl
LzEvby1iVUxZM3Bnc0E1LW9HX0NFdWhZWU02empBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDKAS5Do
/MV7mhQM+iaIGFBN9U1kEBwzl9rMcnk4u+BaEwuasQ0aOXyf/jdm4BC3Btac4nzn
Nk+zg+qvT8uu2Y4kXObzYUTkUj90/gXAG/RZzBuAJph+3eNFqwU2lB22rRaNgDDK
BxTB74g2T9XSiT32JrudVZx1tqvZaLYTgFFBChAaUTwZPr5J5SyWrLubAX9W53GD
kjdY7Hp1p5kiVTDROuSC1mi2HD8nq1TxkHfcwPbPFEuky8mgvk73mPt9v0lo0OdL
2p8z5iIFCA/EQzwn3TAAK2cLfL7+EGfSq735X/nP4RVsRD7ICZyC1JpKLEjeGMli
/sNCWU8gO2lImQ==
-----END CERTIFICATE-----
Generated at Fri May 15 06:14:39 2026 by rpki-client