Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: Ngm3EL/K5TfQG5CxA77FjeuY2gO1KEHkyzmtQGY4+j4=
Subject key identifier: 1B:B8:41:50:79:F3:44:11:7D:53:BE:6D:3B:C0:67:17:89:45:75:90
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 01A06CB8E3E687C54399765F1488141D58EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 0643
Signing time: Fri 04 Sep 2026 14:00:51 +0000
Manifest this update: Fri 04 Sep 2026 14:00:51 +0000
Manifest next update: Sat 05 Sep 2026 14:00:51 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: x9So5LgR643Swsehp7Bf4aIjjuXpj/8uPxQspGgNk5M=)
2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:b8:e3:e6:87:c5:43:99:76:5f:14:88:14:1d:58:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Sep 4 14:00:51 2026 GMT
Not After : Sep 5 14:00:51 2026 GMT
Subject: CN=1bb8415079f344117d53be6d3bc0671789457590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:2f:27:4f:d8:6e:5e:62:b3:2d:07:20:88:
3d:b1:fe:4c:81:f1:fa:6b:e8:ff:c0:f6:bb:5d:50:
c4:22:fe:d9:85:5f:ac:6d:18:4c:ed:87:aa:91:67:
70:e1:b3:57:9d:fb:c1:72:bb:3e:ba:b9:52:e6:0e:
46:3c:95:01:e3:3f:55:95:c1:0d:05:78:94:7e:5d:
4e:75:7e:10:04:6b:cd:11:af:da:21:93:72:2d:ef:
1c:61:91:a0:26:e1:90:86:16:0c:52:b7:09:83:20:
f6:75:d8:5d:dc:70:3a:08:db:03:41:af:b8:8b:06:
77:24:5d:4a:fc:13:59:ae:f5:98:25:d5:29:d3:d4:
bc:78:dc:79:93:22:e1:8d:a7:d2:f1:45:0e:3a:cb:
be:65:d4:de:75:72:a1:61:32:4f:be:48:1d:6d:0a:
7e:1b:e8:7b:17:f6:1f:71:41:4c:84:38:a2:00:32:
96:59:19:5f:d2:dd:39:1d:99:dc:9f:3f:08:a5:fe:
9b:9b:bb:28:eb:28:f0:52:c5:ba:ea:ac:49:37:49:
de:26:de:6d:53:8c:76:66:81:70:10:05:67:23:a5:
18:fd:75:52:85:99:cb:ee:3c:9f:82:07:c6:d7:51:
57:a4:b7:a5:11:b1:2a:5d:1d:f5:fc:41:4e:ba:bd:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:41:50:79:F3:44:11:7D:53:BE:6D:3B:C0:67:17:89:45:75:90
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:24:b9:aa:1e:eb:ce:72:6e:c1:9f:8e:d0:9e:22:d7:18:bf:
5e:a1:77:04:f3:33:3d:9a:3e:aa:6b:54:02:dc:dc:31:41:1c:
c9:9c:7f:ee:fa:ee:79:d5:f0:1a:86:fe:a6:9f:7f:01:85:08:
d8:2e:70:1d:35:05:68:c2:e1:f5:ec:32:d0:b5:48:e4:15:5e:
c9:9d:77:1a:e8:10:93:37:ea:09:fe:bc:e4:e4:d7:a9:2a:78:
a5:70:d0:95:14:bf:76:3a:ab:ff:a0:1b:a7:a2:ac:f7:bf:13:
c6:f1:ff:17:c3:19:5e:43:94:5c:8a:e6:c0:3c:5e:ac:f7:39:
6a:05:18:c7:3f:47:58:3e:43:23:95:88:33:d0:4e:49:5c:c9:
54:f8:09:67:d2:fa:fa:b9:d3:6e:b5:ef:1f:21:60:90:e0:3f:
ef:76:df:9d:13:08:39:af:cf:7e:68:ab:1e:db:29:d9:6e:93:
60:7b:8b:7a:28:8b:97:95:5f:97:bb:a7:c4:41:bf:61:e2:1b:
68:72:f1:9b:90:88:8e:70:a9:75:3e:23:bf:86:4d:36:20:52:
d4:36:4e:0e:42:cc:db:ef:53:24:1a:e9:5b:89:41:29:e1:7f:
24:57:8e:92:04:94:aa:dc:f1:ec:b5:b5:63:ec:b1:e0:9b:43:
48:05:fa:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBsuOPmh8VDmXZfFIgUHVjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNThlYjU4YjVjNjFhMjNkMGYyNDY2YzVjZDczY2U5ZWM5
NjViOTYwHhcNMjYwOTA0MTQwMDUxWhcNMjYwOTA1MTQwMDUxWjAzMTEwLwYDVQQD
EygxYmI4NDE1MDc5ZjM0NDExN2Q1M2JlNmQzYmMwNjcxNzg5NDU3NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCIvJ0/Ybl5isy0HIIg9sf5MgfH6
a+j/wPa7XVDEIv7ZhV+sbRhM7YeqkWdw4bNXnfvBcrs+urlS5g5GPJUB4z9VlcEN
BXiUfl1OdX4QBGvNEa/aIZNyLe8cYZGgJuGQhhYMUrcJgyD2ddhd3HA6CNsDQa+4
iwZ3JF1K/BNZrvWYJdUp09S8eNx5kyLhjafS8UUOOsu+ZdTedXKhYTJPvkgdbQp+
G+h7F/YfcUFMhDiiADKWWRlf0t05HZncnz8Ipf6bm7so6yjwUsW66qxJN0neJt5t
U4x2ZoFwEAVnI6UY/XVShZnL7jyfggfG11FXpLelEbEqXR31/EFOur0LiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu4QVB580QRfVO+bTvAZxeJRXWQMB8GA1UdIwQY
MBaAFDtY61i1xhoj0PJGbFzXPOnslluWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2Qt
NzJhYzc5ZDdiYjA5LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2QtNzJhYzc5ZDdiYjA5
LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCS5qh7r
znJuwZ+O0J4i1xi/XqF3BPMzPZo+qmtUAtzcMUEcyZx/7vruedXwGob+pp9/AYUI
2C5wHTUFaMLh9ewy0LVI5BVeyZ13GugQkzfqCf685OTXqSp4pXDQlRS/djqr/6Ab
p6Ks978TxvH/F8MZXkOUXIrmwDxerPc5agUYxz9HWD5DI5WIM9BOSVzJVPgJZ9L6
+rnTbrXvHyFgkOA/73bfnRMIOa/PfmirHtsp2W6TYHuLeiiLl5Vfl7unxEG/YeIb
aHLxm5CIjnCpdT4jv4ZNNiBS1DZODkLM2+9TJBrpW4lBKeF/JFeOkgSUqtzx7LW1
Y+yx4JtDSAX68w==
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:20:15 2026 by rpki-client