Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: VSgK+FSytgBUqkkW4Ywn44RJhEPbmHek16kJ0zBPetQ=
Subject key identifier: 2E:D1:0E:E9:80:FA:31:50:F6:7C:7B:F1:A9:84:63:62:23:10:13:8D
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 01A08B6845D68ED3DBB732D2F78A119BB2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 13:01:01 +0000
Manifest this update: Thu 10 Sep 2026 13:01:01 +0000
Manifest next update: Fri 11 Sep 2026 13:01:01 +0000
Files and hashes: 1: KalgMqPxE7vA7DP0hA4DsBQ8daM.roa (hash: D97KocjmOXeCpIu9eUlLkx7HYIqygCIPtcR0T7mqTEA=)
2: f8cxDtGsT2Ikp6eF_zj9ggqQBiQ.roa (hash: CbPEI2G5Y9W39zpXifforX4BNfoULMQ57Hb8GhyiU7s=)
3: gYIWsUvi3Tex-jz_h6e6eiEViZ0.roa (hash: Gb2ivhnS90IYgEWVgAR/fXTt/Lo6la3jpAyCRBH7e/o=)
4: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: H9TG7HnLo52vzUYQSnOxqWT/jOpucVmBGxmBGKtHEi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:45:d6:8e:d3:db:b7:32:d2:f7:8a:11:9b:b2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Sep 10 13:01:01 2026 GMT
Not After : Sep 11 13:01:01 2026 GMT
Subject: CN=2ed10ee980fa3150f67c7bf1a98463622310138d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fb:e3:38:f6:96:a1:30:f0:bf:8c:25:3d:53:
6e:d7:f8:68:d3:47:6b:a2:ab:a9:ad:54:a5:7c:3e:
61:d7:80:2e:13:9f:33:58:5a:d5:17:40:27:e4:d0:
a4:88:da:95:13:88:cb:8d:a8:d7:9c:0f:60:4b:e3:
ee:4d:8f:f1:ac:e4:f4:de:f2:3c:f2:9f:a7:9d:73:
1c:1e:9f:f2:8f:f6:7d:72:38:7e:7b:49:e9:ee:73:
f3:e4:9a:f4:8d:04:9c:81:64:b8:e7:7d:9a:89:e9:
cf:90:ce:a7:70:0f:7a:f2:a9:8a:ea:fa:77:d3:5f:
86:55:6f:5d:ef:b9:67:dc:23:e7:41:4c:45:ec:52:
35:08:e1:64:ff:22:9e:52:96:24:f3:59:85:e7:73:
a9:5f:08:06:1a:26:41:05:b1:f5:78:8c:71:f9:32:
c5:93:e1:46:92:26:be:26:68:a6:c3:5c:d6:3c:e3:
82:76:bf:fa:81:50:8f:8c:dd:d3:a7:16:61:c8:a8:
34:0b:4a:ba:f4:28:bd:05:21:cc:f3:7d:c0:ce:87:
56:52:4e:36:7f:7c:86:1c:fb:e1:17:52:60:a3:e1:
51:db:5b:b8:42:36:6d:03:e8:7c:9e:82:68:eb:06:
a1:04:07:8a:d0:70:20:29:b8:b7:f3:86:68:76:34:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D1:0E:E9:80:FA:31:50:F6:7C:7B:F1:A9:84:63:62:23:10:13:8D
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:10:b4:ac:1d:61:45:2f:7c:40:66:df:9e:8c:85:23:68:72:
fe:85:ad:94:20:55:26:2e:e4:55:d1:93:36:2a:94:59:af:48:
e7:e0:91:0b:06:24:81:ed:70:c7:4f:f4:0c:0e:4e:95:c5:fd:
ab:ad:70:63:fa:2a:96:50:49:7c:50:98:5c:6a:15:29:61:65:
36:70:f2:86:e8:c7:50:10:ed:f5:fe:5f:8f:4c:72:3b:5a:fb:
78:90:95:a3:f2:ad:77:0c:72:5e:83:e9:9a:0e:80:dd:a8:b0:
df:69:69:ad:ad:49:99:87:d8:31:bf:6e:06:2b:a5:c4:9b:7c:
44:eb:df:74:f8:4f:37:86:79:f7:8f:4f:ad:86:06:a6:df:3f:
de:5a:51:03:a3:88:ec:fb:f7:7f:ad:c9:50:2c:f5:77:5b:d2:
41:70:81:ab:97:4a:6e:59:54:4b:de:c1:9f:c8:c6:a8:eb:2b:
02:b7:25:ce:0e:55:b8:15:4f:5c:35:63:e9:45:41:66:cf:67:
a6:f6:8c:8e:88:e5:66:d7:3d:2a:78:ca:cd:82:f4:09:c5:40:
61:f9:ef:40:a7:92:72:2a:ab:75:90:c4:7f:51:90:8a:59:ac:
f4:a0:36:83:20:f5:c8:9b:70:4f:64:ae:ab:bf:01:78:2e:82:
0d:c8:20:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaEXWjtPbtzLS94oRm7LJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjk4YjAxMDUzOTExNjA3ZWRiMmE3NjA5MGE2YWNlZDk1
YTNlZDUwHhcNMjYwOTEwMTMwMTAxWhcNMjYwOTExMTMwMTAxWjAzMTEwLwYDVQQD
EygyZWQxMGVlOTgwZmEzMTUwZjY3YzdiZjFhOTg0NjM2MjIzMTAxMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fvjOPaWoTDwv4wlPVNu1/ho00dr
oquprVSlfD5h14AuE58zWFrVF0An5NCkiNqVE4jLjajXnA9gS+PuTY/xrOT03vI8
8p+nnXMcHp/yj/Z9cjh+e0np7nPz5Jr0jQScgWS4532aienPkM6ncA968qmK6vp3
01+GVW9d77ln3CPnQUxF7FI1COFk/yKeUpYk81mF53OpXwgGGiZBBbH1eIxx+TLF
k+FGkia+Jmimw1zWPOOCdr/6gVCPjN3TpxZhyKg0C0q69Ci9BSHM833AzodWUk42
f3yGHPvhF1Jgo+FR21u4QjZtA+h8noJo6wahBAeK0HAgKbi384ZodjT1bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7RDumA+jFQ9nx78amEY2IjEBONMB8GA1UdIwQY
MBaAFKNpiwEFORFgftsqdgkKas7ZWj7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTIt
YmJkMzExMTg2OTUwLzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTItYmJkMzExMTg2OTUw
LzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchC0rB1h
RS98QGbfnoyFI2hy/oWtlCBVJi7kVdGTNiqUWa9I5+CRCwYkge1wx0/0DA5OlcX9
q61wY/oqllBJfFCYXGoVKWFlNnDyhujHUBDt9f5fj0xyO1r7eJCVo/KtdwxyXoPp
mg6A3aiw32lpra1JmYfYMb9uBiulxJt8ROvfdPhPN4Z5949PrYYGpt8/3lpRA6OI
7Pv3f63JUCz1d1vSQXCBq5dKbllUS97Bn8jGqOsrArclzg5VuBVPXDVj6UVBZs9n
pvaMjojlZtc9KnjKzYL0CcVAYfnvQKeSciqrdZDEf1GQilms9KA2gyD1yJtwT2Su
q78BeC6CDcggBQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:31:23 2026 by rpki-client