Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
File: o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json)
Hash identifier: aYg4UMkvtfgnOHuYkgtnQieSTamTQiLYn/G156ZY5as=
Subject key identifier: 88:59:11:3D:21:88:F1:E3:A5:B7:CB:55:46:79:FB:1B:D5:27:FC:F2
Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Certificate issuer: /CN=a37244348e71ec1be5f5007c8d5efe7125920722
Certificate serial: 019D37C0A85F9782D7E78E1E074B4E21985A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
Manifest number: 0BBA
Signing time: Sun 29 Mar 2026 04:01:05 +0000
Manifest this update: Sun 29 Mar 2026 04:01:05 +0000
Manifest next update: Mon 30 Mar 2026 04:01:05 +0000
Files and hashes: 1: RijzbLPJNYBBaQUNmuNuIQrf5Xw.roa (hash: v10XXGdmUOPRJJS1MaufQ22rkW2n2zH/GaaX/HJobRg=)
2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: PUEzqomJ3Vah6IuaosC3zfQIK2IEOMAegZW4nb06LX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a8:5f:97:82:d7:e7:8e:1e:07:4b:4e:21:98:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722
Validity
Not Before: Mar 29 04:01:05 2026 GMT
Not After : Mar 30 04:01:05 2026 GMT
Subject: CN=8859113d2188f1e3a5b7cb554679fb1bd527fcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:a7:58:67:da:75:db:31:41:ae:4d:f6:48:
eb:0d:4c:94:ad:b3:db:44:ce:5c:86:3e:13:0d:6c:
3e:9e:b5:0d:d9:be:e0:5e:b9:3a:28:23:51:f2:fc:
a2:6c:62:b7:49:29:2d:8c:46:ea:23:84:83:df:fe:
dd:eb:3a:c4:41:d9:af:2d:c1:d6:a8:d2:e3:45:30:
ae:57:98:b4:c4:3f:f7:f1:1a:b9:9e:55:22:48:99:
e6:47:78:bc:05:79:f3:a7:6e:34:91:9f:c9:05:7d:
ec:74:a1:ce:97:1a:be:b0:4e:82:53:6b:4f:37:9c:
18:6d:76:50:42:8a:8c:c9:ee:d9:5e:30:f4:76:94:
47:fc:73:0d:7c:98:ad:66:f3:87:ba:97:60:82:7e:
2a:96:45:ae:c5:14:35:b3:8a:d0:f1:55:53:13:6f:
75:f9:80:d3:45:a6:6d:8c:09:31:d2:0b:f6:e4:d6:
a4:6d:12:77:5d:4f:62:07:32:03:0a:9a:48:8a:67:
60:46:cb:61:7c:7f:b9:f1:be:d2:63:6b:af:68:e7:
ac:bc:78:1f:c0:11:a3:da:cf:9c:c8:23:36:87:47:
7a:c1:7e:af:8d:67:d2:34:af:00:6b:78:f1:b0:c3:
f6:0b:58:e8:f4:d5:f1:6f:b2:1c:49:9a:63:af:a6:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:59:11:3D:21:88:F1:E3:A5:B7:CB:55:46:79:FB:1B:D5:27:FC:F2
X509v3 Authority Key Identifier:
keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:60:55:ac:48:cf:c5:b9:07:9d:da:8d:c9:44:7c:ee:7e:d9:
b2:f1:16:03:a2:44:38:2e:a7:25:59:08:65:a3:55:4e:30:6d:
4b:1d:5b:ea:b4:7a:ba:51:33:53:bf:7f:e0:dc:77:ef:34:81:
7e:dc:f7:01:6a:ee:6d:6e:b1:38:d1:c1:91:d5:eb:d8:89:04:
a8:f2:4f:37:05:6e:bd:03:97:a0:20:02:de:b7:61:03:69:89:
61:15:0f:ad:50:ce:f7:82:2d:66:e5:51:76:cd:20:25:d6:d2:
98:56:17:e7:b6:7d:52:c6:9e:5d:43:b5:1f:5e:c3:dc:30:40:
5e:6f:89:b2:8e:64:75:0d:87:9e:bf:ca:cd:e4:12:4b:73:c2:
b3:ab:00:6f:60:9b:91:00:c8:a8:3b:e4:67:aa:0b:b7:15:0a:
21:99:15:09:ad:18:45:bc:90:da:e5:0b:98:de:54:17:6f:2c:
dc:96:fe:a8:34:ad:af:e3:c1:46:5f:90:d0:60:f8:cf:81:e8:
8f:7d:e3:35:f3:71:cf:ed:ff:f6:91:22:c5:e4:9c:bb:c2:cb:
7c:07:ca:a4:26:40:31:1a:f0:c3:92:3b:2d:81:53:39:71:b7:
17:e8:de:33:52:ad:bc:67:47:a8:92:e0:ff:d9:3a:dd:0f:10:
ab:04:06:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wKhfl4LX544eB0tOIZhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzI0NDM0OGU3MWVjMWJlNWY1MDA3YzhkNWVmZTcxMjU5
MjA3MjIwHhcNMjYwMzI5MDQwMTA1WhcNMjYwMzMwMDQwMTA1WjAzMTEwLwYDVQQD
Eyg4ODU5MTEzZDIxODhmMWUzYTViN2NiNTU0Njc5ZmIxYmQ1MjdmY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt16nWGfaddsxQa5N9kjrDUyUrbPb
RM5chj4TDWw+nrUN2b7gXrk6KCNR8vyibGK3SSktjEbqI4SD3/7d6zrEQdmvLcHW
qNLjRTCuV5i0xD/38Rq5nlUiSJnmR3i8BXnzp240kZ/JBX3sdKHOlxq+sE6CU2tP
N5wYbXZQQoqMye7ZXjD0dpRH/HMNfJitZvOHupdggn4qlkWuxRQ1s4rQ8VVTE291
+YDTRaZtjAkx0gv25NakbRJ3XU9iBzIDCppIimdgRsthfH+58b7SY2uvaOesvHgf
wBGj2s+cyCM2h0d6wX6vjWfSNK8Aa3jxsMP2C1jo9NXxb7IcSZpjr6YjAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhZET0hiPHjpbfLVUZ5+xvVJ/zyMB8GA1UdIwQY
MBaAFKNyRDSOcewb5fUAfI1e/nElkgciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNKRU5JNXg3QnZsOVFCOGpWNy1jU1dTQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iNGFkODUtMTZhOC00ODdhLThhNzct
ODg1MmE1MzJhZDQ1LzEvbzNKRU5JNXg3QnZsOVFCOGpWNy1jU1dTQnlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iNGFkODUtMTZhOC00ODdhLThhNzctODg1MmE1MzJhZDQ1
LzEvbzNKRU5JNXg3QnZsOVFCOGpWNy1jU1dTQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemBVrEjP
xbkHndqNyUR87n7ZsvEWA6JEOC6nJVkIZaNVTjBtSx1b6rR6ulEzU79/4Nx37zSB
ftz3AWrubW6xONHBkdXr2IkEqPJPNwVuvQOXoCAC3rdhA2mJYRUPrVDO94ItZuVR
ds0gJdbSmFYX57Z9UsaeXUO1H17D3DBAXm+Jso5kdQ2Hnr/KzeQSS3PCs6sAb2Cb
kQDIqDvkZ6oLtxUKIZkVCa0YRbyQ2uULmN5UF28s3Jb+qDStr+PBRl+Q0GD4z4Ho
j33jNfNxz+3/9pEixeScu8LLfAfKpCZAMRrww5I7LYFTOXG3F+jeM1KtvGdHqJLg
/9k63Q8QqwQG7Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:39 2026 by rpki-client