Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: 2WgjsLH26Fr2425qj+b3txWxH9f/Zlrfu1cU1Bh5D1I=
Subject key identifier: FA:8E:04:75:6B:9D:72:90:D3:DA:9D:55:9C:C9:EB:CC:AA:9B:99:52
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019F3898689D1221E98FE1DC6C07D9215874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0F25
Signing time: Mon 06 Jul 2026 18:02:20 +0000
Manifest this update: Mon 06 Jul 2026 18:02:20 +0000
Manifest next update: Tue 07 Jul 2026 18:02:20 +0000
Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: 4IVw7uGsQzM6UqZ4MBK43/KNw4X8EeIKclNH+koC270=)
2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=)
3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=)
4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:98:68:9d:12:21:e9:8f:e1:dc:6c:07:d9:21:58:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Jul 6 18:02:20 2026 GMT
Not After : Jul 7 18:02:20 2026 GMT
Subject: CN=fa8e04756b9d7290d3da9d559cc9ebccaa9b9952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:bc:85:a0:33:80:92:1e:86:4d:ef:90:6b:
5e:06:b9:7f:f6:3f:a1:fb:66:db:70:8f:03:c5:b3:
57:70:e7:83:ba:0d:ad:3c:83:31:02:ba:ec:d5:9a:
91:60:ac:4f:05:36:da:09:73:ce:d3:0c:3f:9b:de:
f6:fe:88:28:68:9a:87:82:07:22:c6:bf:92:ca:57:
98:a1:23:63:31:59:ce:44:c0:4f:9b:63:67:1f:6d:
40:41:96:ef:14:75:63:9c:5c:39:b7:bd:24:6f:19:
00:49:87:e1:a8:fb:5a:cc:54:da:63:be:e3:b9:40:
45:88:9a:5d:e7:41:bc:26:86:f1:42:2c:e3:05:21:
40:a7:77:12:9c:da:b5:f9:a9:fa:21:a2:7d:8f:cc:
27:6f:af:3a:5b:42:b0:1c:61:9f:13:c4:a6:79:c5:
57:28:0c:8c:ce:4d:59:a5:0d:55:e5:b6:21:c4:d5:
77:e8:d6:94:38:86:3c:81:db:d3:c7:f6:28:2b:06:
e7:e6:03:8e:31:fe:30:ea:66:ae:bc:0b:77:15:02:
14:db:3b:24:da:0c:16:0b:ed:58:f8:20:3e:06:4c:
33:ee:0a:65:f6:74:e0:75:8d:9f:3a:e0:54:68:89:
9b:89:45:5e:38:6e:8d:1a:d5:53:09:ad:d7:49:04:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:04:75:6B:9D:72:90:D3:DA:9D:55:9C:C9:EB:CC:AA:9B:99:52
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b8:4f:c3:c1:fd:50:b1:6b:9b:72:4d:29:73:3f:cf:e1:28:
df:d2:a3:b5:67:af:bd:16:47:44:2b:2f:cd:c3:4c:fb:cc:e1:
f4:78:92:96:4e:da:3b:2b:32:68:00:f8:77:51:84:b2:c5:89:
2c:21:5f:ff:2e:10:ae:ee:1c:59:b1:cd:5d:e8:51:2a:e6:3c:
08:93:7e:77:1a:28:98:91:dc:3d:3b:5d:cc:32:76:d1:ee:0d:
0f:e3:04:40:14:56:bd:74:98:75:7e:74:82:f0:f0:b9:21:10:
d0:a2:83:c9:79:ab:f0:99:95:9b:0e:f6:49:f9:20:f2:f9:aa:
09:bd:4d:62:7c:6a:fe:47:46:4f:ea:c4:2b:3a:c7:3e:3e:bb:
40:24:20:14:ce:9d:89:77:10:b1:72:96:c1:3b:0e:82:1a:2d:
67:67:81:97:14:8f:1b:7a:80:1f:8b:01:20:7a:5a:bb:65:f2:
0b:ba:ff:b6:2d:0b:01:4c:e4:8d:39:ac:05:7f:09:bc:22:14:
4e:9a:b1:06:0e:a1:a6:d3:95:19:9f:95:51:c1:04:fd:91:08:
3d:8e:88:b1:a5:30:54:6f:23:e3:72:a8:3b:8f:42:70:18:8c:
ea:9a:15:45:59:c9:6e:ca:f8:60:19:e3:94:42:4e:18:96:31:
b2:b1:d6:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ84mGidEiHpj+HcbAfZIVh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOWEyNTFlNWQxZDNiYWJlNGM1NzljOTFlYjNlMGFjMzdm
N2JmMmEwHhcNMjYwNzA2MTgwMjIwWhcNMjYwNzA3MTgwMjIwWjAzMTEwLwYDVQQD
EyhmYThlMDQ3NTZiOWQ3MjkwZDNkYTlkNTU5Y2M5ZWJjY2FhOWI5OTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yK8haAzgJIehk3vkGteBrl/9j+h
+2bbcI8DxbNXcOeDug2tPIMxArrs1ZqRYKxPBTbaCXPO0ww/m972/ogoaJqHggci
xr+SyleYoSNjMVnORMBPm2NnH21AQZbvFHVjnFw5t70kbxkASYfhqPtazFTaY77j
uUBFiJpd50G8JobxQizjBSFAp3cSnNq1+an6IaJ9j8wnb686W0KwHGGfE8SmecVX
KAyMzk1ZpQ1V5bYhxNV36NaUOIY8gdvTx/YoKwbn5gOOMf4w6mauvAt3FQIU2zsk
2gwWC+1Y+CA+Bkwz7gpl9nTgdY2fOuBUaImbiUVeOG6NGtVTCa3XSQSadQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqOBHVrnXKQ09qdVZzJ68yqm5lSMB8GA1UdIwQY
MBaAFDuaJR5dHTur5MV5yR6z4Kw3978qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAt
YzY2MzJjYzAxNGIwLzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAtYzY2MzJjYzAxNGIw
LzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7hPw8H9
ULFrm3JNKXM/z+Eo39KjtWevvRZHRCsvzcNM+8zh9HiSlk7aOysyaAD4d1GEssWJ
LCFf/y4Qru4cWbHNXehRKuY8CJN+dxoomJHcPTtdzDJ20e4ND+MEQBRWvXSYdX50
gvDwuSEQ0KKDyXmr8JmVmw72Sfkg8vmqCb1NYnxq/kdGT+rEKzrHPj67QCQgFM6d
iXcQsXKWwTsOghotZ2eBlxSPG3qAH4sBIHpau2XyC7r/ti0LAUzkjTmsBX8JvCIU
TpqxBg6hptOVGZ+VUcEE/ZEIPY6IsaUwVG8j43KoO49CcBiM6poVRVnJbsr4YBnj
lEJOGJYxsrHW9g==
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:11:00 2026 by rpki-client