Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
File: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft (raw, json)
Hash identifier: XUAiMWCmVtQXoKnCR+BKTXDD3WrHICy7JjYWE7txnzw=
Subject key identifier: 2D:A5:7B:3B:2B:40:0B:AB:97:D5:3D:EC:20:D7:73:BF:00:4B:53:CD
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial: 01A0F4C4FC2C76B7AD2CEFEDBEE74D92C3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
Manifest number: 0288
Signing time: Thu 01 Oct 2026 00:02:25 +0000
Manifest this update: Thu 01 Oct 2026 00:02:25 +0000
Manifest next update: Fri 02 Oct 2026 00:02:25 +0000
Files and hashes: 1: 17iDKnMCPzF4M2zO_EMSp433meI.asa (hash: IN8ZKdhOHTTTwuLE4YUbOHesEFUMPKZ5d6iCYuk1AHk=)
2: 8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa (hash: ggJLncnSKUJfbzTsD0cgxExXtCcR+Y6TnGQ+ZK/8VVg=)
3: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl (hash: fF+MxLwywqdJb7rPbCUmj62rpjVGhOXidmiknwQSS8I=)
4: UmhoW5VfIZWn13lemnKnlkHqPAs.roa (hash: DGzNzZVpk2iVMIiaSeZ6GUmQLgsZVVAd5WcJYRZRIwU=)
5: bF4AIoJbZesIwX86iDSdyGssluQ.roa (hash: mpdkvKaWVXrslEPSu3+IjnM2tbW2AQwtygmvrWacIvU=)
6: hSst--j5VCqGQF-z8DIf_npvY-Y.roa (hash: BqwaIWDOiFPECUGgrwgZoSY04WbWfryAxU75uG2cx4A=)
7: xkCFgW6AhRTzlPFYxIdYyO_Kfgc.roa (hash: ujOmUW3uo+zC741aDRMzurWVfgMAgyR64bWgpanO+zs=)
8: y-sWnGP-0hQwy4lYSwzVC6rKYt0.asa (hash: 9jRAa+Up2q3z80Ly9J5h5nlaT4zsmd3d7aVIdsnLuHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 00:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:c4:fc:2c:76:b7:ad:2c:ef:ed:be:e7:4d:92:c3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
Validity
Not Before: Oct 1 00:02:25 2026 GMT
Not After : Oct 2 00:02:25 2026 GMT
Subject: CN=2da57b3b2b400bab97d53dec20d773bf004b53cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d5:ca:9a:32:79:85:24:be:c2:6f:e4:dc:7c:
f6:58:e5:0d:3d:86:c8:f8:cb:db:cf:f2:ef:86:de:
ee:02:d3:d5:09:43:11:78:b0:e7:21:fd:67:c5:9d:
5d:b2:9b:eb:b2:64:da:a7:e3:27:bb:b7:ad:59:ca:
f2:10:98:4f:1d:c7:bb:bb:1d:ee:52:b5:46:4e:de:
99:1a:7b:f5:ab:bb:43:b9:aa:b8:a9:c8:f9:92:ac:
68:bf:d1:71:87:ba:0b:93:e3:88:e3:5c:ac:a1:ea:
9c:91:aa:4d:f4:a6:75:0a:5c:2d:56:5c:6a:e1:89:
6e:6d:83:cc:c5:a0:6c:06:2b:95:b8:f6:6d:58:90:
d8:23:96:cb:44:f9:5f:19:27:58:cb:56:61:de:1a:
d6:74:99:80:51:f6:31:0c:b2:55:10:34:33:06:6a:
ee:d4:b2:62:fc:07:0a:84:16:bc:b7:8a:3d:7f:07:
b9:6b:12:29:92:f1:89:d7:18:d4:be:c2:1a:a8:75:
4a:a7:87:6e:74:d6:4f:5c:f3:25:c1:3e:8d:c7:64:
cf:57:63:16:96:bd:a0:a6:55:d9:f9:9f:ae:84:b0:
33:98:06:3b:b3:33:43:59:f8:71:5c:d9:82:ed:50:
3c:43:ab:9f:6f:62:b5:75:d4:f8:c9:2d:ee:34:4b:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A5:7B:3B:2B:40:0B:AB:97:D5:3D:EC:20:D7:73:BF:00:4B:53:CD
X509v3 Authority Key Identifier:
keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b9:24:74:42:ed:53:da:e3:0d:57:e1:28:93:8d:e3:92:d1:
60:7a:f6:1a:4e:86:c1:e3:c4:5a:ad:c1:3f:0b:04:63:94:fe:
61:f4:0d:c4:a3:44:88:f4:84:50:e1:72:65:6e:79:27:b1:b1:
60:70:ae:49:c8:28:76:c9:d8:53:aa:d8:e5:c8:7c:1a:70:c5:
80:35:30:a0:58:1f:06:c9:51:b4:ee:44:f0:40:6f:cf:8e:3f:
99:88:70:9a:ee:61:8b:6b:8c:69:05:84:9c:ab:0d:04:46:c0:
9f:41:6d:5e:c0:77:02:12:20:36:e8:64:30:3b:ca:93:4a:e8:
18:18:72:b8:49:3b:90:b1:d0:d5:bb:8f:11:22:28:68:c3:e2:
29:3c:84:18:1d:37:95:fd:37:98:1d:a7:c1:f8:1a:3c:76:8e:
59:00:ee:45:99:a3:ae:2a:b8:bd:7e:9c:3c:b4:9c:35:10:91:
72:35:80:07:f3:4c:f5:e0:87:d6:e3:53:fc:6f:1e:5f:f7:37:
95:cd:22:76:3e:39:b1:4e:ca:68:23:c3:9b:db:19:76:f8:e2:
c4:61:bd:0c:99:85:9e:a7:a5:54:22:0b:2f:2b:68:d8:cc:59:
e8:a3:53:cb:f1:cc:9b:c4:c8:91:0d:10:ad:ec:67:e7:4e:69:
ce:ac:e8:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD0xPwsdretLO/tvudNksPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNTM4NjcyODQxMzJlZWNjZDU2ZTZiMTU1Y2Y3ZjYyN2Qy
NjRmNDAwHhcNMjYxMDAxMDAwMjI1WhcNMjYxMDAyMDAwMjI1WjAzMTEwLwYDVQQD
EygyZGE1N2IzYjJiNDAwYmFiOTdkNTNkZWMyMGQ3NzNiZjAwNGI1M2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NXKmjJ5hSS+wm/k3Hz2WOUNPYbI
+Mvbz/Lvht7uAtPVCUMReLDnIf1nxZ1dspvrsmTap+Mnu7etWcryEJhPHce7ux3u
UrVGTt6ZGnv1q7tDuaq4qcj5kqxov9Fxh7oLk+OI41ysoeqckapN9KZ1ClwtVlxq
4YlubYPMxaBsBiuVuPZtWJDYI5bLRPlfGSdYy1Zh3hrWdJmAUfYxDLJVEDQzBmru
1LJi/AcKhBa8t4o9fwe5axIpkvGJ1xjUvsIaqHVKp4dudNZPXPMlwT6Nx2TPV2MW
lr2gplXZ+Z+uhLAzmAY7szNDWfhxXNmC7VA8Q6ufb2K1ddT4yS3uNEt3HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2lezsrQAurl9U97CDXc78AS1PNMB8GA1UdIwQY
MBaAFDtThnKEEy7szVbmsVXPf2J9Jk9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zYWQ1NTgtNTFhMC00ODAwLWJiZjgt
YjIwODU4ZTI5OTNiLzEvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zYWQ1NTgtNTFhMC00ODAwLWJiZjgtYjIwODU4ZTI5OTNi
LzEvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbkkdELt
U9rjDVfhKJON45LRYHr2Gk6GwePEWq3BPwsEY5T+YfQNxKNEiPSEUOFyZW55J7Gx
YHCuScgodsnYU6rY5ch8GnDFgDUwoFgfBslRtO5E8EBvz44/mYhwmu5hi2uMaQWE
nKsNBEbAn0FtXsB3AhIgNuhkMDvKk0roGBhyuEk7kLHQ1buPESIoaMPiKTyEGB03
lf03mB2nwfgaPHaOWQDuRZmjriq4vX6cPLScNRCRcjWAB/NM9eCH1uNT/G8eX/c3
lc0idj45sU7KaCPDm9sZdvjixGG9DJmFnqelVCILLyto2MxZ6KNTy/HMm8TIkQ0Q
rexn505pzqzoMA==
-----END CERTIFICATE-----
Generated at Thu Oct 1 10:41:10 2026 by rpki-client