Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: k3JMmkc68IXE8IHNG1B3LZdClrcf38uuG6ivfpScGX8=
Subject key identifier: 4B:DB:D5:99:E7:37:F1:16:F3:E7:56:C5:E7:2C:EF:98:C2:81:58:29
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 01A180E208B2854712BEF254FC94325DD53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 05:00:59 +0000
Manifest this update: Wed 28 Oct 2026 05:00:59 +0000
Manifest next update: Thu 29 Oct 2026 05:00:59 +0000
Files and hashes: 1: gNrEO1fd_UO2lkW7If9ASyI8mM0.roa (hash: oiXIC9NyYqB7VON1tGxWLy+Yto6YiZWA2pyQHSZiaiQ=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: tGdkQq4aB8up6ihH3Uh0RXiWXRSO7+6iMw0FdlbAdao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:08:b2:85:47:12:be:f2:54:fc:94:32:5d:d5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Oct 28 05:00:59 2026 GMT
Not After : Oct 29 05:00:59 2026 GMT
Subject: CN=4bdbd599e737f116f3e756c5e72cef98c2815829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:15:38:8d:08:15:8f:3e:59:db:e1:7e:49:84:
5b:e8:e5:7c:72:e8:d7:9d:45:39:98:86:5d:e4:a0:
8e:5c:b3:ad:76:87:ac:f9:bc:65:90:ce:f0:a0:76:
94:8c:85:70:36:65:7e:07:52:59:31:d1:46:c7:c4:
20:42:33:c3:7e:8e:8f:64:cc:f1:63:49:02:4c:e4:
69:51:3c:cf:7d:6b:2e:90:b9:9f:a3:fd:5e:8f:9c:
06:05:91:3c:a6:db:4a:05:34:a3:18:a9:5a:a4:87:
72:14:7f:c2:b3:22:ba:a4:f9:de:b9:35:ec:26:b6:
a9:62:52:78:e3:cd:8c:30:b5:6e:c9:ce:d8:45:52:
d5:ee:ff:14:8d:53:b2:a2:b8:8c:a5:d9:ae:a0:20:
f4:d9:1e:15:8f:af:f2:12:4d:b1:6f:5d:22:85:a3:
a8:4e:4b:43:ab:c6:77:c6:8a:2e:36:60:f8:1b:73:
7e:b5:45:be:59:fa:bb:5a:3d:e9:bb:16:88:74:99:
18:dd:3c:35:3e:b4:90:61:da:ee:b9:a8:cf:64:2b:
e4:ca:eb:28:31:49:f9:35:30:d4:e6:1a:75:84:76:
2b:e0:fe:1b:6b:5f:67:f1:9c:28:53:48:9f:f2:ad:
77:0d:fa:90:68:cb:ab:68:15:bd:49:d4:73:26:a1:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DB:D5:99:E7:37:F1:16:F3:E7:56:C5:E7:2C:EF:98:C2:81:58:29
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:a5:9c:0f:09:a0:9c:f7:ee:56:03:4f:39:a2:3a:e1:c4:
f7:f1:b0:80:34:61:3d:25:6b:5e:c8:77:7e:40:fa:6c:06:bd:
c2:66:22:86:a4:14:1e:cb:7f:81:9a:49:c1:fc:cb:71:2c:a2:
cd:a5:cd:8b:ab:49:32:b1:7c:25:76:59:4c:33:e8:77:80:e8:
0d:07:16:71:a1:2b:16:de:4d:0c:93:7b:aa:d4:8e:99:b9:4f:
e7:f9:c7:40:05:e2:71:7f:f5:a9:d1:1c:d6:a9:f7:40:5b:3b:
93:5b:e7:4c:64:14:d0:04:86:62:39:30:69:85:e1:17:a2:6d:
76:ae:dc:f5:6c:2e:0d:cd:d1:fd:b2:34:b2:06:59:17:b4:b2:
53:41:75:c1:b0:ea:00:d2:2b:9f:ab:7a:91:f5:b0:b4:3b:1f:
f5:93:99:34:20:11:a0:5c:49:96:a2:ae:4f:47:65:8e:34:da:
58:10:b1:3e:2a:e7:0d:75:3f:94:e8:21:d5:87:28:6d:f4:db:
7d:ea:a2:3e:ed:f6:91:ce:e5:38:5d:c2:7a:23:d0:bc:11:89:
58:c1:08:cf:5d:ce:c7:a0:d6:df:f1:95:e6:42:2e:f1:f8:bf:
a0:8f:84:ff:0b:00:00:a2:d1:28:28:31:ab:99:ea:d5:d2:2d:
61:28:bd:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGA4giyhUcSvvJU/JQyXdU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzN2ExMjZkNzg1NGVjZDU2NWFlODI5NzBjNjkzZjMzNTlm
ODVmMzcwHhcNMjYxMDI4MDUwMDU5WhcNMjYxMDI5MDUwMDU5WjAzMTEwLwYDVQQD
Eyg0YmRiZDU5OWU3MzdmMTE2ZjNlNzU2YzVlNzJjZWY5OGMyODE1ODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RU4jQgVjz5Z2+F+SYRb6OV8cujX
nUU5mIZd5KCOXLOtdoes+bxlkM7woHaUjIVwNmV+B1JZMdFGx8QgQjPDfo6PZMzx
Y0kCTORpUTzPfWsukLmfo/1ej5wGBZE8pttKBTSjGKlapIdyFH/CsyK6pPneuTXs
JrapYlJ4482MMLVuyc7YRVLV7v8UjVOyoriMpdmuoCD02R4Vj6/yEk2xb10ihaOo
TktDq8Z3xoouNmD4G3N+tUW+Wfq7Wj3puxaIdJkY3Tw1PrSQYdruuajPZCvkyuso
MUn5NTDU5hp1hHYr4P4ba19n8ZwoU0if8q13DfqQaMuraBW9SdRzJqEWxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvb1ZnnN/EW8+dWxecs75jCgVgpMB8GA1UdIwQY
MBaAFKN6Em14VOzVZa6ClwxpPzNZ+F83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MzQ0MDctMTYzZC00MTBjLWI5NDkt
Nzg2Y2IxMjk2ZTU4LzEvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84MzQ0MDctMTYzZC00MTBjLWI5NDktNzg2Y2IxMjk2ZTU4
LzEvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlalnA8J
oJz37lYDTzmiOuHE9/GwgDRhPSVrXsh3fkD6bAa9wmYihqQUHst/gZpJwfzLcSyi
zaXNi6tJMrF8JXZZTDPod4DoDQcWcaErFt5NDJN7qtSOmblP5/nHQAXicX/1qdEc
1qn3QFs7k1vnTGQU0ASGYjkwaYXhF6Jtdq7c9WwuDc3R/bI0sgZZF7SyU0F1wbDq
ANIrn6t6kfWwtDsf9ZOZNCARoFxJlqKuT0dljjTaWBCxPirnDXU/lOgh1YcobfTb
feqiPu32kc7lOF3CeiPQvBGJWMEIz13Ox6DW3/GV5kIu8fi/oI+E/wsAAKLRKCgx
q5nq1dItYSi9Sw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 10:33:24 2026 by rpki-client