Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier: W4tRG/1ps3X0CN1jQPea5MLisEl/bjTnnAxD5ojL7nQ=
Subject key identifier: 5B:81:A4:6A:6A:CB:52:00:26:D3:73:5B:43:E9:4B:1D:D1:6E:68:5C
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial: 019E9B854DC7BA4F5F10A61C20F16A3AE818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number: 0438
Signing time: Sat 06 Jun 2026 06:01:05 +0000
Manifest this update: Sat 06 Jun 2026 06:01:05 +0000
Manifest next update: Sun 07 Jun 2026 06:01:05 +0000
Files and hashes: 1: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: qUzHflUkZ/sBKTBk3omQQN6pj6KEL3m7OdOX6fc3oWc=)
2: xZvTVsgAgTHbHn_16cZuYXn4mck.roa (hash: +oE3yDmB7hi9Ypi3E2o3IvseUAbSMG6NeT9277jObu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:85:4d:c7:ba:4f:5f:10:a6:1c:20:f1:6a:3a:e8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Validity
Not Before: Jun 6 06:01:05 2026 GMT
Not After : Jun 7 06:01:05 2026 GMT
Subject: CN=5b81a46a6acb520026d3735b43e94b1dd16e685c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:2e:85:bb:cd:78:7d:3c:fd:c5:70:a2:82:
25:a3:59:40:fa:cd:1e:b1:bd:a7:b3:8c:9a:b6:ba:
26:7d:3a:e7:15:0b:3e:a7:4c:91:9c:29:7a:de:56:
49:b6:05:6b:27:87:cc:3a:9b:9f:b5:87:68:bd:9b:
ff:10:f1:1b:a8:67:ff:5c:f2:39:a1:ff:94:91:f8:
35:4a:12:25:bd:8c:0b:60:53:ed:93:00:2d:0b:76:
78:cb:56:3a:c6:8f:e6:11:7c:50:2c:e6:04:75:14:
69:e3:3c:fa:f4:dc:5e:79:56:bb:51:ed:83:99:85:
97:f4:e7:3e:5c:67:2c:61:e1:ad:6f:a5:3f:a5:a7:
5a:d5:e2:c7:19:da:6d:c4:37:10:e6:aa:42:98:03:
60:b8:70:27:4c:8b:80:08:c3:dd:2f:ad:87:ca:a7:
11:57:75:ea:1d:75:ed:23:97:24:b7:29:bb:b8:3b:
c3:e9:50:00:7d:ac:9d:8e:4e:a0:ce:1a:be:81:52:
da:2a:41:3f:0a:0f:2c:cd:7c:a7:9a:d0:85:3e:4b:
50:70:38:67:c5:b5:3b:14:86:98:d6:3e:6b:29:69:
4a:d1:af:36:08:c1:6d:40:be:4f:5d:3e:1a:9f:de:
3f:a5:97:84:d1:e4:0b:61:02:f3:a0:e1:65:be:dd:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:A4:6A:6A:CB:52:00:26:D3:73:5B:43:E9:4B:1D:D1:6E:68:5C
X509v3 Authority Key Identifier:
keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8b:3f:4d:0a:d1:fb:fd:36:84:a6:15:71:e2:74:1e:ec:ed:
04:04:55:1a:0a:e5:ae:a0:32:95:ed:9f:ef:46:87:c8:6a:a0:
5d:d6:5e:c5:82:21:a6:86:6b:fd:3b:40:6d:6c:d4:ab:81:d0:
63:47:16:dd:1e:91:00:dc:38:aa:cf:11:25:75:0c:cd:94:82:
22:60:5f:f7:8d:bf:47:94:e3:35:c9:7d:e7:8c:ba:d7:cb:da:
4c:a0:7d:f9:64:95:b2:f3:0a:78:cc:3b:91:ad:0b:75:21:74:
89:3b:8b:9e:44:64:3b:5b:54:b6:6d:42:0c:74:4b:e3:86:bd:
9b:f1:43:4e:05:b7:a9:d0:2c:72:cc:0a:43:b9:91:a2:3e:91:
ff:df:61:3a:4e:31:eb:4f:65:c4:00:69:f3:63:cc:9c:f4:5f:
1c:ec:ae:d6:bb:85:9e:67:27:56:dc:cb:46:98:b9:61:89:02:
f4:80:2b:19:47:fe:1f:82:2f:db:36:62:f6:ca:70:68:b3:39:
83:b4:85:22:81:56:17:81:80:ed:62:8c:6a:6e:5a:d1:df:5c:
73:0d:63:1e:ac:57:98:5c:af:1b:02:ff:ac:53:51:15:5d:ed:
80:5d:8e:7b:81:c4:06:cf:8e:df:e0:2a:23:f8:06:76:79:81:
1f:40:ad:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bhU3Huk9fEKYcIPFqOugYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiN2JjNjQ3MmVhNTI1NzVjZTk1YmRjYTc4MjZlOWE1MWZh
YWNlNDkwHhcNMjYwNjA2MDYwMTA1WhcNMjYwNjA3MDYwMTA1WjAzMTEwLwYDVQQD
Eyg1YjgxYTQ2YTZhY2I1MjAwMjZkMzczNWI0M2U5NGIxZGQxNmU2ODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCEuhbvNeH08/cVwooIlo1lA+s0e
sb2ns4yatromfTrnFQs+p0yRnCl63lZJtgVrJ4fMOpuftYdovZv/EPEbqGf/XPI5
of+Ukfg1ShIlvYwLYFPtkwAtC3Z4y1Y6xo/mEXxQLOYEdRRp4zz69NxeeVa7Ue2D
mYWX9Oc+XGcsYeGtb6U/pada1eLHGdptxDcQ5qpCmANguHAnTIuACMPdL62HyqcR
V3XqHXXtI5cktym7uDvD6VAAfaydjk6gzhq+gVLaKkE/Cg8szXynmtCFPktQcDhn
xbU7FIaY1j5rKWlK0a82CMFtQL5PXT4an94/pZeE0eQLYQLzoOFlvt35PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuBpGpqy1IAJtNzW0PpSx3RbmhcMB8GA1UdIwQY
MBaAFDt7xkcupSV1zpW9yngm6aUfqs5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OTNkMjktNDdhOS00OWViLTgwODAt
OTIyNmIzYWM0ZTlkLzEvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80OTNkMjktNDdhOS00OWViLTgwODAtOTIyNmIzYWM0ZTlk
LzEvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbos/TQrR
+/02hKYVceJ0HuztBARVGgrlrqAyle2f70aHyGqgXdZexYIhpoZr/TtAbWzUq4HQ
Y0cW3R6RANw4qs8RJXUMzZSCImBf942/R5TjNcl954y618vaTKB9+WSVsvMKeMw7
ka0LdSF0iTuLnkRkO1tUtm1CDHRL44a9m/FDTgW3qdAscswKQ7mRoj6R/99hOk4x
609lxABp82PMnPRfHOyu1ruFnmcnVtzLRpi5YYkC9IArGUf+H4Iv2zZi9spwaLM5
g7SFIoFWF4GA7WKMam5a0d9ccw1jHqxXmFyvGwL/rFNRFV3tgF2Oe4HEBs+O3+Aq
I/gGdnmBH0CtQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:29:12 2026 by rpki-client