Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: rc5kdUwHuWYE3NSpgTYOrxy7LUAH6fouNuv5Kw4oVcc=
Subject key identifier: 3B:39:AD:3D:90:60:06:F4:21:7B:F8:5F:6E:20:E6:73:26:86:1F:9B
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 01A038950214D2052585C886DDECEA5094B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1A1F
Signing time: Tue 25 Aug 2026 11:01:24 +0000
Manifest this update: Tue 25 Aug 2026 11:01:24 +0000
Manifest next update: Wed 26 Aug 2026 11:01:24 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: /dYxE+mOghbKKrDRV0ROrmpDA9JR42VmKnlLhHmMRes=)
2: sKwkfCXbsIoN8Tz06VbLnX982Mw.asa (hash: 71Gnrq1SXo9YWAgxUMMoZvsmt9ojmvRIGQ+aSBy2/Tk=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:95:02:14:d2:05:25:85:c8:86:dd:ec:ea:50:94:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Aug 25 11:01:24 2026 GMT
Not After : Aug 26 11:01:24 2026 GMT
Subject: CN=3b39ad3d906006f4217bf85f6e20e67326861f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:9b:80:f1:84:82:2e:50:d8:7a:27:75:22:
fe:0a:2d:c6:8f:ab:81:db:93:c6:ff:59:aa:e8:78:
79:9c:a5:3f:47:e1:e5:78:d7:e4:2e:6b:b5:0a:bc:
43:61:79:6f:9d:f2:5d:cd:4c:70:8a:2c:12:6d:4b:
f4:f6:a1:f6:a7:be:63:c3:7d:e1:4f:5e:2d:e8:e1:
95:d4:27:38:f3:de:50:3f:eb:1f:74:69:62:42:03:
84:cd:b5:22:14:43:5b:fa:18:09:7e:62:c4:bc:1c:
ac:ba:b9:56:6f:39:c2:78:4a:56:ca:7d:47:95:d2:
54:30:04:d2:a0:e7:49:e0:35:80:ed:2f:2e:a8:56:
c5:97:57:9e:94:ba:fe:f4:f9:f9:a7:b5:90:47:12:
b3:48:d7:16:ba:45:f1:27:0d:42:8a:4c:c5:fe:b9:
cf:bc:33:06:2c:37:75:22:18:06:71:eb:73:c2:18:
d8:d9:67:d3:90:67:26:8e:7c:43:75:7b:5a:61:61:
f7:78:7d:df:86:4a:59:b1:e0:d2:76:00:8f:5c:01:
3c:7c:6c:ed:8e:21:3e:3a:2c:45:c1:f4:5a:40:5b:
2b:6e:41:80:1c:aa:96:de:85:99:e6:65:89:ff:4e:
5f:dc:1c:a1:46:12:3b:44:9b:c6:d5:75:3f:18:aa:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:39:AD:3D:90:60:06:F4:21:7B:F8:5F:6E:20:E6:73:26:86:1F:9B
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:93:67:65:75:6e:28:53:6b:b4:76:70:6e:13:7f:a0:92:1a:
1f:ce:7b:9b:f5:7a:a1:06:f6:90:31:ee:7f:28:a0:cd:68:5f:
8d:41:88:bb:e6:ea:70:cb:14:c3:91:30:b8:b1:5b:95:69:82:
ae:fc:40:cc:7a:48:ca:d9:51:6b:9c:16:de:c0:1d:52:54:12:
6b:eb:94:f8:54:c0:29:ff:c4:fe:16:ba:da:c2:af:bf:b6:5b:
d4:f3:ee:22:98:2d:e9:d3:5f:e7:2b:11:88:e5:bb:19:98:de:
fc:07:ce:75:ee:7f:28:c0:dd:14:4c:fe:b5:4a:60:41:8d:66:
f0:76:89:48:40:ed:41:95:1f:91:39:d2:fb:57:11:30:d9:e4:
7e:92:34:b3:e7:11:3d:83:f5:d0:ee:ab:92:d5:62:dd:59:cb:
37:bc:11:a7:8d:f3:f4:94:dc:bb:84:f5:31:06:64:11:f1:a0:
09:0f:b6:6a:0d:e2:78:ab:c1:62:b3:ac:ef:36:7b:d6:dc:06:
08:7a:17:02:fe:08:0e:0e:ec:b8:b4:09:77:20:5e:bb:ee:70:
64:5a:34:f8:4a:0c:c5:4c:2f:05:86:ad:54:8e:b9:44:54:6e:
60:bc:e8:81:3a:22:d6:b6:4d:07:0e:9c:3f:11:29:ce:89:77:
f3:9f:35:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA4lQIU0gUlhciG3ezqUJSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNGRmOWE1NDYwY2JkNDUwYjRlNzUzODAzOTNhODIxZTg1
Yzc0ZDgwHhcNMjYwODI1MTEwMTI0WhcNMjYwODI2MTEwMTI0WjAzMTEwLwYDVQQD
EygzYjM5YWQzZDkwNjAwNmY0MjE3YmY4NWY2ZTIwZTY3MzI2ODYxZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4abgPGEgi5Q2HondSL+Ci3Gj6uB
25PG/1mq6Hh5nKU/R+HleNfkLmu1CrxDYXlvnfJdzUxwiiwSbUv09qH2p75jw33h
T14t6OGV1Cc4895QP+sfdGliQgOEzbUiFENb+hgJfmLEvBysurlWbznCeEpWyn1H
ldJUMATSoOdJ4DWA7S8uqFbFl1eelLr+9Pn5p7WQRxKzSNcWukXxJw1CikzF/rnP
vDMGLDd1IhgGcetzwhjY2WfTkGcmjnxDdXtaYWH3eH3fhkpZseDSdgCPXAE8fGzt
jiE+OixFwfRaQFsrbkGAHKqW3oWZ5mWJ/05f3ByhRhI7RJvG1XU/GKpBewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs5rT2QYAb0IXv4X24g5nMmhh+bMB8GA1UdIwQY
MBaAFDtN+aVGDL1FC051OAOTqCHoXHTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2Zjkt
OTgxMmQ3Y2ZkNjk0LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2ZjktOTgxMmQ3Y2ZkNjk0
LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipNnZXVu
KFNrtHZwbhN/oJIaH857m/V6oQb2kDHufyigzWhfjUGIu+bqcMsUw5EwuLFblWmC
rvxAzHpIytlRa5wW3sAdUlQSa+uU+FTAKf/E/ha62sKvv7Zb1PPuIpgt6dNf5ysR
iOW7GZje/AfOde5/KMDdFEz+tUpgQY1m8HaJSEDtQZUfkTnS+1cRMNnkfpI0s+cR
PYP10O6rktVi3VnLN7wRp43z9JTcu4T1MQZkEfGgCQ+2ag3ieKvBYrOs7zZ71twG
CHoXAv4IDg7suLQJdyBeu+5wZFo0+EoMxUwvBYatVI65RFRuYLzogToi1rZNBw6c
PxEpzol38581kg==
-----END CERTIFICATE-----
Generated at Tue Aug 25 19:17:28 2026 by rpki-client