Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: LcQVu6yejRzi9L9lDKLCpBmBRR/LQM4ZhPUhFFZVgGw=
Subject key identifier: 27:05:DD:C3:48:4D:7D:EC:A5:FA:FF:65:FE:D3:0F:12:CA:28:78:D8
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 019D3A54026242F44158FB8AD0FAC4A91AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 16:01:17 +0000
Manifest this update: Sun 29 Mar 2026 16:01:17 +0000
Manifest next update: Mon 30 Mar 2026 16:01:17 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: IMxXMZUVcHiMpjSKMphdVDtDX2s+UlNeIRwyvrs9J/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:02:62:42:f4:41:58:fb:8a:d0:fa:c4:a9:1a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Mar 29 16:01:17 2026 GMT
Not After : Mar 30 16:01:17 2026 GMT
Subject: CN=2705ddc3484d7deca5faff65fed30f12ca2878d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:92:33:cf:e3:62:43:32:6f:5a:21:bc:20:
85:f6:a2:2d:f0:f7:81:0d:cd:10:de:05:95:05:81:
ab:14:34:ae:92:68:c6:fd:b5:6e:f4:70:87:d5:c4:
50:cb:91:62:d9:2b:23:0d:80:be:e0:93:51:d2:e8:
6e:56:53:e2:d5:a0:33:1a:a6:93:22:fa:4b:62:42:
17:dd:f6:1a:b9:17:f4:ea:95:db:fd:00:23:3c:b9:
2c:2b:b2:ea:ec:f5:58:4e:b1:61:d1:b2:20:0c:ed:
d3:4a:7a:60:bf:6b:84:65:22:3c:f2:18:59:04:96:
56:aa:ba:9f:47:53:74:8a:db:81:dd:3c:bf:59:91:
36:4d:44:3a:0e:2e:db:77:91:6f:3a:cc:14:d6:7e:
1d:b4:76:dc:60:80:8b:44:86:7b:a2:ce:6c:ac:ff:
cc:46:02:91:7d:b6:f4:3e:7b:48:e6:d3:8e:93:b3:
99:6f:7a:f6:da:b9:88:d6:0a:72:2b:bd:74:d5:b9:
73:ca:8a:50:a2:3f:75:2e:2c:c4:cc:b2:09:96:f6:
cc:12:08:9a:00:05:d1:e7:2b:32:84:a9:b1:d2:08:
02:24:9e:4b:ba:fd:f5:9f:81:a7:8d:e9:bd:09:44:
07:d9:6b:f1:3a:84:60:76:db:66:d7:5c:c9:80:8b:
ad:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:DD:C3:48:4D:7D:EC:A5:FA:FF:65:FE:D3:0F:12:CA:28:78:D8
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b6:f3:16:7e:81:56:b7:7a:e2:1a:13:b8:17:6e:33:a6:fb:
60:5a:53:5c:d7:fc:ca:33:85:7c:78:a6:9c:a9:c7:78:3e:90:
13:90:50:d5:c0:86:a8:23:0c:f4:8f:1a:a3:8a:69:82:f0:c1:
fe:4b:f5:74:b0:51:f0:05:4b:39:a8:5b:75:8e:ce:1a:81:15:
f1:0e:d5:88:a7:ca:e1:c2:d3:52:49:66:23:17:55:c7:9e:d3:
8d:97:68:6b:38:50:4f:3e:0b:c2:e5:20:04:e5:91:6a:bd:50:
4e:86:97:05:e6:6e:d4:1e:b2:dd:32:3a:a8:b2:9f:d1:8c:e3:
4b:52:0b:75:85:3d:e5:8f:55:0c:06:f4:56:83:af:dd:6c:66:
c2:71:57:6f:7b:f5:94:73:dd:b4:3d:09:9e:22:38:77:e6:06:
47:b4:ee:9d:4a:04:1a:53:72:4f:f5:d9:72:34:5c:dc:75:c7:
c3:49:cd:db:65:de:1f:c8:0e:dc:16:e4:6d:96:38:74:47:96:
41:64:88:85:67:36:be:76:24:70:49:bb:21:e9:40:ca:b2:71:
9c:2a:7e:f4:ab:90:ef:28:1d:0e:83:bd:26:8d:01:4f:7f:fa:
07:5c:d6:db:4b:4c:9a:2e:0b:51:82:6c:15:5e:0f:d9:02:91:
d7:b4:c5:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VAJiQvRBWPuK0PrEqRrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTU1NjA0NTk3YjA2YjBlYWNlODhhZmIxYTkwZmZmOTM3
ZDk3ZWEwHhcNMjYwMzI5MTYwMTE3WhcNMjYwMzMwMTYwMTE3WjAzMTEwLwYDVQQD
EygyNzA1ZGRjMzQ4NGQ3ZGVjYTVmYWZmNjVmZWQzMGYxMmNhMjg3OGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU6SM8/jYkMyb1ohvCCF9qIt8PeB
Dc0Q3gWVBYGrFDSukmjG/bVu9HCH1cRQy5Fi2SsjDYC+4JNR0uhuVlPi1aAzGqaT
IvpLYkIX3fYauRf06pXb/QAjPLksK7Lq7PVYTrFh0bIgDO3TSnpgv2uEZSI88hhZ
BJZWqrqfR1N0ituB3Ty/WZE2TUQ6Di7bd5FvOswU1n4dtHbcYICLRIZ7os5srP/M
RgKRfbb0PntI5tOOk7OZb3r22rmI1gpyK7101blzyopQoj91LizEzLIJlvbMEgia
AAXR5ysyhKmx0ggCJJ5Luv31n4Gnjem9CUQH2WvxOoRgdttm11zJgIuthQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcF3cNITX3spfr/Zf7TDxLKKHjYMB8GA1UdIwQY
MBaAFKOlVgRZewaw6s6Ir7GpD/+TfZfqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEt
ZmFjNGJiODNlZDI4LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEtZmFjNGJiODNlZDI4
LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrbzFn6B
Vrd64hoTuBduM6b7YFpTXNf8yjOFfHimnKnHeD6QE5BQ1cCGqCMM9I8ao4ppgvDB
/kv1dLBR8AVLOahbdY7OGoEV8Q7ViKfK4cLTUklmIxdVx57TjZdoazhQTz4LwuUg
BOWRar1QToaXBeZu1B6y3TI6qLKf0YzjS1ILdYU95Y9VDAb0VoOv3WxmwnFXb3v1
lHPdtD0JniI4d+YGR7TunUoEGlNyT/XZcjRc3HXHw0nN22XeH8gO3BbkbZY4dEeW
QWSIhWc2vnYkcEm7IelAyrJxnCp+9KuQ7ygdDoO9Jo0BT3/6B1zW20tMmi4LUYJs
FV4P2QKR17TFAw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:51 2026 by rpki-client