Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: OGS+5DMFuAzokFUriZuuQAvIYDZtKsdiQNOjvxrvUy4=
Subject key identifier: 91:F3:88:DA:61:53:DE:FB:3E:41:74:DC:6D:6C:EF:5E:EE:55:82:FC
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 019D390A61F8E82E4B04D5FB11B8BE009298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 0352
Signing time: Sun 29 Mar 2026 10:01:14 +0000
Manifest this update: Sun 29 Mar 2026 10:01:14 +0000
Manifest next update: Mon 30 Mar 2026 10:01:14 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: /QwSIUCpC6oDIi00YnF/E5Pt0cpERL1gcxsb55jQL3s=)
2: dXAskw5YKw-xbAInYF21THIeAbA.roa (hash: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:61:f8:e8:2e:4b:04:d5:fb:11:b8:be:00:92:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Mar 29 10:01:14 2026 GMT
Not After : Mar 30 10:01:14 2026 GMT
Subject: CN=91f388da6153defb3e4174dc6d6cef5eee5582fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:61:60:ef:cf:87:d0:ec:06:dc:c9:ef:7e:
c5:da:0a:b8:3c:99:a6:89:11:1c:50:12:bc:5b:7e:
da:cb:12:e6:e6:9c:be:be:4c:90:9a:78:63:72:01:
3b:65:c1:c9:8c:4e:f0:06:b6:03:9f:8f:d1:ed:85:
9f:b6:68:87:aa:06:4c:8f:84:70:b5:56:6c:52:d1:
e2:db:03:16:fa:7b:d6:36:15:48:a4:a3:7a:df:38:
b6:7f:68:fe:ea:26:7f:0c:c2:7a:13:2d:21:b4:94:
99:76:8a:7f:04:14:e4:a8:01:79:44:bc:8f:e2:f1:
84:d0:2b:31:13:f8:65:47:b4:6d:65:30:f5:0b:2e:
26:67:8f:82:9e:fb:f2:cf:81:10:af:6f:ed:06:83:
f8:13:01:b1:12:b2:2f:78:5b:e8:9f:bd:d6:ac:13:
ae:6e:bb:f1:c6:90:70:ec:fa:b6:be:52:d4:a0:58:
49:fe:05:45:76:04:16:b7:9a:b1:10:35:97:09:ac:
93:c7:42:89:f7:f6:b1:dd:cf:03:67:01:43:d9:76:
17:56:81:94:a0:10:40:cf:b2:34:ae:96:e1:1d:96:
a7:9c:52:06:75:97:d6:62:c8:dc:43:ab:1a:fa:64:
c6:1d:de:7b:62:14:30:8c:f0:d2:46:a6:c4:a6:d8:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F3:88:DA:61:53:DE:FB:3E:41:74:DC:6D:6C:EF:5E:EE:55:82:FC
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:76:22:9f:20:fe:ef:bd:9e:ee:3f:b3:f2:e8:8b:9f:03:af:
ad:7d:6f:29:d9:42:15:cc:4e:11:3f:23:42:ff:2d:20:77:ea:
2d:32:8c:7e:b3:97:c4:0f:37:70:d8:7b:61:6f:47:ab:a1:f6:
a3:92:8d:dd:21:06:cc:5d:eb:ad:95:85:5b:bf:85:eb:9b:7c:
98:17:1b:14:a3:75:bd:78:67:0a:7b:b5:64:8d:d9:5c:62:64:
f2:64:cd:e4:a8:99:95:60:de:44:50:d6:0e:20:63:e3:0f:11:
d2:50:b6:a1:44:00:35:a3:98:87:7e:65:6b:60:7d:47:0c:fa:
87:0e:08:7f:57:39:a4:2a:f8:bf:1b:d4:91:80:81:0b:14:53:
70:f0:26:f1:16:44:28:27:c1:32:0b:9d:36:e8:79:cf:f9:42:
70:8a:8c:4e:45:c8:95:e2:28:87:1e:94:6a:17:63:5e:5d:a4:
b0:4b:5f:76:2d:5f:54:81:73:ec:9d:14:f0:77:65:7e:f1:b3:
91:90:e7:4b:e4:bd:63:a8:9f:5c:fe:13:70:c9:14:4f:f4:b3:
fb:a3:2b:27:db:47:80:aa:3b:38:4f:ec:a5:73:5d:f0:bc:48:
97:ba:e9:65:8c:2a:b3:f0:d0:64:d3:ea:5d:c7:2a:0c:85:cb:
4d:2c:e9:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CmH46C5LBNX7Ebi+AJKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGYwZTBhOGUwMGYxYTZkOGMxYzI2NmUzZjQzNmQ0NmU3
MWU4NzcwHhcNMjYwMzI5MTAwMTE0WhcNMjYwMzMwMTAwMTE0WjAzMTEwLwYDVQQD
Eyg5MWYzODhkYTYxNTNkZWZiM2U0MTc0ZGM2ZDZjZWY1ZWVlNTU4MmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRFhYO/Ph9DsBtzJ737F2gq4PJmm
iREcUBK8W37ayxLm5py+vkyQmnhjcgE7ZcHJjE7wBrYDn4/R7YWftmiHqgZMj4Rw
tVZsUtHi2wMW+nvWNhVIpKN63zi2f2j+6iZ/DMJ6Ey0htJSZdop/BBTkqAF5RLyP
4vGE0CsxE/hlR7RtZTD1Cy4mZ4+Cnvvyz4EQr2/tBoP4EwGxErIveFvon73WrBOu
brvxxpBw7Pq2vlLUoFhJ/gVFdgQWt5qxEDWXCayTx0KJ9/ax3c8DZwFD2XYXVoGU
oBBAz7I0rpbhHZannFIGdZfWYsjcQ6sa+mTGHd57YhQwjPDSRqbEpthHlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHziNphU977PkF03G1s717uVYL8MB8GA1UdIwQY
MBaAFNAPDgqOAPGm2MHCZuP0NtRuceh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAt
NjVhYjBkMzUxZjI3LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAtNjVhYjBkMzUxZjI3
LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHYinyD+
772e7j+z8uiLnwOvrX1vKdlCFcxOET8jQv8tIHfqLTKMfrOXxA83cNh7YW9Hq6H2
o5KN3SEGzF3rrZWFW7+F65t8mBcbFKN1vXhnCnu1ZI3ZXGJk8mTN5KiZlWDeRFDW
DiBj4w8R0lC2oUQANaOYh35la2B9Rwz6hw4If1c5pCr4vxvUkYCBCxRTcPAm8RZE
KCfBMgudNuh5z/lCcIqMTkXIleIohx6UahdjXl2ksEtfdi1fVIFz7J0U8HdlfvGz
kZDnS+S9Y6ifXP4TcMkUT/Sz+6MrJ9tHgKo7OE/spXNd8LxIl7rpZYwqs/DQZNPq
XccqDIXLTSzpdA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:15 2026 by rpki-client