Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier: bSLjMTH+xiX810TMCN+9UnrOs7KszxTmdPybFz2+Exs=
Subject key identifier: C1:F9:CF:F0:7C:AF:03:DF:45:06:D4:1A:13:8D:90:14:D8:EE:EB:3F
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial: 01A06CF0646C49BE4BE381C4C4D1AA9294F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number: 0529
Signing time: Fri 04 Sep 2026 15:01:28 +0000
Manifest this update: Fri 04 Sep 2026 15:01:28 +0000
Manifest next update: Sat 05 Sep 2026 15:01:28 +0000
Files and hashes: 1: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: CewFd/HnALP/YVGcBHkQyJSE2mkMOW87CBbVE7HWzJM=)
2: xZvTVsgAgTHbHn_16cZuYXn4mck.roa (hash: +oE3yDmB7hi9Ypi3E2o3IvseUAbSMG6NeT9277jObu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f0:64:6c:49:be:4b:e3:81:c4:c4:d1:aa:92:94:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Validity
Not Before: Sep 4 15:01:28 2026 GMT
Not After : Sep 5 15:01:28 2026 GMT
Subject: CN=c1f9cff07caf03df4506d41a138d9014d8eeeb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:3f:22:16:6d:fa:e0:71:8f:d5:96:a9:1a:
12:c5:ed:35:c6:b4:36:e9:46:a4:94:a4:a5:66:ae:
0a:48:94:37:3a:1c:96:99:43:3c:37:b8:48:e5:12:
70:3a:95:9d:ba:42:83:39:40:65:56:ad:50:33:31:
a8:5a:1c:ab:11:c3:7d:f4:97:2f:ae:03:20:39:fa:
b5:6a:10:ba:22:85:51:5f:54:7c:2d:5e:4b:f2:cf:
cb:a9:15:ea:ec:d1:91:f6:2b:a9:98:cc:97:33:39:
a6:77:42:a0:29:f2:a9:48:aa:e7:5b:3d:dc:ae:9b:
b0:db:5c:5b:4e:3b:6a:84:64:09:f4:0f:28:11:f5:
d1:d2:f0:49:20:cf:60:17:f8:67:19:56:df:2f:08:
d6:56:c3:89:68:d4:a8:f2:df:8a:c1:14:13:10:3c:
6c:38:d0:20:22:22:d3:e8:46:62:e3:5b:53:c8:e0:
71:22:c0:d5:68:06:9f:e9:98:6a:a0:c4:54:f5:df:
ba:c6:6c:02:28:0f:4b:08:b2:25:b8:53:be:fe:ad:
0e:77:fd:20:3b:2c:cf:34:bf:12:46:48:f9:c2:aa:
36:f5:40:4b:90:d4:65:61:92:56:ea:a6:43:b1:bf:
96:bc:2e:e3:eb:d5:c5:4b:3d:a7:64:d7:f0:c5:eb:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F9:CF:F0:7C:AF:03:DF:45:06:D4:1A:13:8D:90:14:D8:EE:EB:3F
X509v3 Authority Key Identifier:
keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6e:d9:2e:6c:21:7d:b7:2a:49:06:d3:f7:fe:99:13:1d:25:
93:59:0d:73:3b:a1:79:66:db:44:af:be:7c:91:ae:7d:62:85:
82:87:b4:37:10:21:f6:8c:d9:f0:fa:d5:cd:f5:12:a6:b3:ab:
78:ab:0a:56:1d:c1:c6:df:b3:0a:b6:e3:66:9d:72:a3:0a:2b:
3f:57:c4:33:6b:3f:9d:9d:80:97:06:78:17:19:b3:6d:92:c2:
20:47:c4:d2:da:c4:90:bc:17:91:21:62:ae:23:2d:a8:f7:f7:
30:22:48:73:39:5a:3c:be:dc:ac:28:67:c6:72:51:bc:74:21:
a1:8d:34:ff:c7:07:ac:ae:70:33:78:96:0f:c5:a2:52:5b:84:
d9:f5:d1:e9:64:d5:36:ae:3d:54:e5:45:db:e3:d5:e1:d1:ee:
e1:57:32:21:71:9c:8d:79:49:d8:bb:88:f1:f5:af:60:4b:7b:
e7:4e:bc:df:cc:9b:32:07:76:a0:54:e3:18:cb:53:8a:c3:ba:
71:e4:ad:50:9e:c7:5c:e6:a5:a9:40:d0:70:1f:ab:b2:29:0a:
15:99:cd:fb:bd:5b:f9:f8:a5:04:d2:af:c9:91:c9:a8:6b:d2:
88:81:b0:28:42:f8:4f:ea:d5:a4:8f:3d:f1:17:26:3e:26:93:
16:c4:a9:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBs8GRsSb5L44HExNGqkpTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiN2JjNjQ3MmVhNTI1NzVjZTk1YmRjYTc4MjZlOWE1MWZh
YWNlNDkwHhcNMjYwOTA0MTUwMTI4WhcNMjYwOTA1MTUwMTI4WjAzMTEwLwYDVQQD
EyhjMWY5Y2ZmMDdjYWYwM2RmNDUwNmQ0MWExMzhkOTAxNGQ4ZWVlYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwI/IhZt+uBxj9WWqRoSxe01xrQ2
6UaklKSlZq4KSJQ3OhyWmUM8N7hI5RJwOpWdukKDOUBlVq1QMzGoWhyrEcN99Jcv
rgMgOfq1ahC6IoVRX1R8LV5L8s/LqRXq7NGR9iupmMyXMzmmd0KgKfKpSKrnWz3c
rpuw21xbTjtqhGQJ9A8oEfXR0vBJIM9gF/hnGVbfLwjWVsOJaNSo8t+KwRQTEDxs
ONAgIiLT6EZi41tTyOBxIsDVaAaf6ZhqoMRU9d+6xmwCKA9LCLIluFO+/q0Od/0g
OyzPNL8SRkj5wqo29UBLkNRlYZJW6qZDsb+WvC7j69XFSz2nZNfwxeskNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH5z/B8rwPfRQbUGhONkBTY7us/MB8GA1UdIwQY
MBaAFDt7xkcupSV1zpW9yngm6aUfqs5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OTNkMjktNDdhOS00OWViLTgwODAt
OTIyNmIzYWM0ZTlkLzEvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80OTNkMjktNDdhOS00OWViLTgwODAtOTIyNmIzYWM0ZTlk
LzEvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGG7ZLmwh
fbcqSQbT9/6ZEx0lk1kNczuheWbbRK++fJGufWKFgoe0NxAh9ozZ8PrVzfUSprOr
eKsKVh3Bxt+zCrbjZp1yoworP1fEM2s/nZ2AlwZ4FxmzbZLCIEfE0trEkLwXkSFi
riMtqPf3MCJIczlaPL7crChnxnJRvHQhoY00/8cHrK5wM3iWD8WiUluE2fXR6WTV
Nq49VOVF2+PV4dHu4VcyIXGcjXlJ2LuI8fWvYEt7506838ybMgd2oFTjGMtTisO6
ceStUJ7HXOalqUDQcB+rsikKFZnN+71b+filBNKvyZHJqGvSiIGwKEL4T+rVpI89
8RcmPiaTFsSpaw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:01:43 2026 by rpki-client