
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
File: oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft (raw, json)
Hash identifier: c7rSN383TY3QQBKwjNpIxt6vtv7Vcf8CPdJJ1pPSYgY=
Subject key identifier: 6B:E3:81:BB:1D:36:24:FB:FB:96:54:71:43:3B:A3:D3:EB:A1:C7:55
Authority key identifier: A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
Certificate issuer: /CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Certificate serial: 019DDD5D8EA9B9BBDCD4BA2226EBD058EC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
Manifest number: 02
Signing time: Thu 30 Apr 2026 07:49:49 +0000
Manifest this update: Thu 30 Apr 2026 07:49:49 +0000
Manifest next update: Fri 01 May 2026 07:49:49 +0000
Files and hashes: 1: aPHgHDs8wZHtsWjj-BGNDzZUqVw.asa (hash: xCblPYPS0g+4wFl3k4nN7Rdc1pcGx5xLzvzdxGTb7kU=)
2: oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl (hash: pdJFph+gznW33iqy1IqK/okSc9qBsTDoFZAaaku4BdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:5d:8e:a9:b9:bb:dc:d4:ba:22:26:eb:d0:58:ec:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Validity
Not Before: Apr 30 07:49:49 2026 GMT
Not After : May 1 07:49:49 2026 GMT
Subject: CN=6be381bb1d3624fbfb965471433ba3d3eba1c755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:2a:1a:54:e9:21:a0:06:6c:dc:69:7c:40:
0a:af:2d:f8:3f:1e:cc:fe:92:11:c3:48:df:b2:04:
8d:03:1e:77:b0:a7:25:88:21:47:c6:ae:34:a5:5a:
e5:79:86:19:a2:10:e3:39:2d:78:38:13:a2:bb:2d:
8d:a6:7d:94:08:61:3f:bd:b9:4e:30:84:51:dd:e3:
f6:07:e4:a1:de:2f:d7:d2:bc:95:87:71:7a:26:0b:
2c:43:dc:28:bc:d6:19:10:e7:56:96:a6:2f:c9:9d:
fa:2d:bd:4c:50:30:96:ad:98:06:18:7d:c5:c4:10:
51:28:eb:78:f0:6b:53:6c:75:18:a3:2d:5a:a0:78:
ee:00:04:f8:63:73:40:d8:39:74:80:60:ce:12:f6:
93:df:8e:78:6b:70:dd:11:11:76:4c:96:18:70:22:
b8:e3:ea:90:06:b4:0f:62:0e:0a:6d:78:7f:e9:5b:
b5:58:33:c6:44:76:f3:9c:0d:09:dc:65:19:39:5a:
12:03:73:40:35:38:93:ac:81:38:cc:d8:50:f4:d7:
8f:0d:e1:4c:19:e0:93:1e:31:55:f4:f9:a6:74:6a:
42:d0:50:c6:4a:36:8d:84:46:d9:3f:82:26:0e:ab:
33:b8:a9:d0:55:79:61:ee:9c:04:cf:0f:26:3a:1c:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E3:81:BB:1D:36:24:FB:FB:96:54:71:43:3B:A3:D3:EB:A1:C7:55
X509v3 Authority Key Identifier:
keyid:A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ca:74:a1:7f:37:c4:62:7e:00:e5:4c:96:67:a3:28:35:7c:
87:e8:49:a7:6d:6b:bf:ed:96:b5:b7:ef:50:e8:ea:4a:11:87:
62:51:ae:04:e3:c0:86:0b:7f:8f:5c:51:ea:41:ae:d4:bc:e2:
d9:98:58:7b:1c:26:e7:19:27:97:0b:d9:df:11:63:b8:e8:8a:
9b:51:30:d7:e1:02:a4:c5:7d:9d:f0:c6:7a:01:32:a7:4c:e2:
e9:17:cf:a9:62:9c:ca:0b:20:0a:68:7d:49:04:6b:44:fc:d2:
34:d3:4e:78:0a:3c:ae:5c:90:c2:c2:90:c0:11:10:37:ca:ac:
d9:16:e3:b9:dd:01:0b:2f:df:09:0b:09:13:af:6e:82:aa:92:
d6:80:b3:c9:05:4b:7f:b3:2c:d5:b0:cf:a6:7c:03:c2:10:ea:
f9:ff:7f:ec:26:6b:91:0d:c5:03:30:5d:73:ce:a7:54:12:e2:
6e:6e:7a:86:48:6f:52:11:41:10:4f:de:ab:26:ac:ca:40:61:
1e:d1:dc:62:78:99:f5:fd:fc:b2:42:56:42:4f:f6:c1:bd:32:
02:f5:09:60:14:b8:a8:56:ed:76:0a:8d:2d:c6:88:4e:96:7c:
6e:af:b9:08:3f:e6:0b:8a:4e:37:97:86:99:d2:ce:7a:52:a3:
2c:5a:7a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3dXY6pubvc1LoiJuvQWOwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMWYwNTdlYjJlNjQ4MWM1NWYzZTg4ZjQ1N2VkOGNkYTFj
OGFkYzMwHhcNMjYwNDMwMDc0OTQ5WhcNMjYwNTAxMDc0OTQ5WjAzMTEwLwYDVQQD
Eyg2YmUzODFiYjFkMzYyNGZiZmI5NjU0NzE0MzNiYTNkM2ViYTFjNzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzYqGlTpIaAGbNxpfEAKry34Px7M
/pIRw0jfsgSNAx53sKcliCFHxq40pVrleYYZohDjOS14OBOiuy2Npn2UCGE/vblO
MIRR3eP2B+Sh3i/X0ryVh3F6JgssQ9wovNYZEOdWlqYvyZ36Lb1MUDCWrZgGGH3F
xBBRKOt48GtTbHUYoy1aoHjuAAT4Y3NA2Dl0gGDOEvaT3454a3DdERF2TJYYcCK4
4+qQBrQPYg4KbXh/6Vu1WDPGRHbznA0J3GUZOVoSA3NANTiTrIE4zNhQ9NePDeFM
GeCTHjFV9PmmdGpC0FDGSjaNhEbZP4ImDqszuKnQVXlh7pwEzw8mOhzkHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvjgbsdNiT7+5ZUcUM7o9ProcdVMB8GA1UdIwQY
MBaAFKAfBX6y5kgcVfPoj0V+2M2hyK3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0I4RmZyTG1TQnhWOC1pUFJYN1l6YUhJcmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kNzU0N2QtYTQyMy00ZjkwLWI4ZDkt
ZGRlYmIwNTU5MjVhLzEvb0I4RmZyTG1TQnhWOC1pUFJYN1l6YUhJcmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kNzU0N2QtYTQyMy00ZjkwLWI4ZDktZGRlYmIwNTU5MjVh
LzEvb0I4RmZyTG1TQnhWOC1pUFJYN1l6YUhJcmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsp0oX83
xGJ+AOVMlmejKDV8h+hJp21rv+2WtbfvUOjqShGHYlGuBOPAhgt/j1xR6kGu1Lzi
2ZhYexwm5xknlwvZ3xFjuOiKm1Ew1+ECpMV9nfDGegEyp0zi6RfPqWKcygsgCmh9
SQRrRPzSNNNOeAo8rlyQwsKQwBEQN8qs2Rbjud0BCy/fCQsJE69ugqqS1oCzyQVL
f7Ms1bDPpnwDwhDq+f9/7CZrkQ3FAzBdc86nVBLibm56hkhvUhFBEE/eqyasykBh
HtHcYniZ9f38skJWQk/2wb0yAvUJYBS4qFbtdgqNLcaITpZ8bq+5CD/mC4pON5eG
mdLOelKjLFp6Tw==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:19 2026 by rpki-client