Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
File: b9O3_1LTsZJWeqzKTZuGInQbf3o.mft (raw, json)
Hash identifier: 9ZATCaQIOaf9Nv4AvAErs3iNc6LTfKrfe7TMk3hThZs=
Subject key identifier: 83:0D:3C:2D:EE:02:03:8C:F1:6A:AB:22:9A:8A:FB:74:70:7A:4F:2F
Authority key identifier: 6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A
Certificate issuer: /CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
Certificate serial: 01A1005B1AF120FE7BCCEF20B4A057210011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
Manifest number: FE
Signing time: Sat 03 Oct 2026 06:02:12 +0000
Manifest this update: Sat 03 Oct 2026 06:02:12 +0000
Manifest next update: Sun 04 Oct 2026 06:02:12 +0000
Files and hashes: 1: b9O3_1LTsZJWeqzKTZuGInQbf3o.crl (hash: sv+e+W5euixOWpqj8mFexU3u5+6gMMCbJZyB/5lzwho=)
2: oezyOEn59V6mni3H8CQ5vs1bQnw.roa (hash: q4IZ+VG661pUAowCN5QrAWUUig5pgHw4H2UhgQ/noNs=)
3: s6GU5a1jn8Ou-UOGgyrZBXIMUto.asa (hash: 9PM53IuTV6JPTHt2d4Dv4yh3Dx6FAU5utGwfVFOGN9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5b:1a:f1:20:fe:7b:cc:ef:20:b4:a0:57:21:00:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
Validity
Not Before: Oct 3 06:02:12 2026 GMT
Not After : Oct 4 06:02:12 2026 GMT
Subject: CN=830d3c2dee02038cf16aab229a8afb74707a4f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:99:43:e6:af:90:58:7e:68:4a:9b:ed:c9:
b9:52:7d:01:1f:35:db:e0:9d:b6:bc:c3:43:6c:51:
17:48:7f:8a:48:5c:e8:88:4a:11:18:a9:d7:16:ef:
42:13:ff:84:dc:e4:73:a2:24:93:aa:48:f8:20:1a:
17:c2:ac:07:44:36:b9:49:9e:ea:35:5d:3c:33:0a:
9d:0b:56:a0:b0:b4:ff:a2:61:84:27:a7:2d:05:76:
7e:17:98:7e:43:c6:b8:c5:8b:24:c4:0a:1a:9b:f6:
ea:49:ac:93:5d:30:45:f2:13:4a:57:c3:2f:38:f3:
9d:59:60:f8:7d:e4:3c:c1:c3:99:d7:cf:54:55:11:
be:75:15:ae:f2:8d:04:0b:d8:27:e2:79:1c:a5:70:
48:c4:c5:8b:28:48:34:d8:4d:ea:7e:49:e7:3f:0d:
6a:87:f0:13:91:4b:c5:c9:34:30:31:f1:38:08:35:
51:05:2b:ce:dc:13:b9:71:1f:00:ad:7d:2a:99:b1:
b1:1e:54:3c:73:ac:20:e0:26:9b:f7:cd:31:e7:9c:
5a:2c:d4:11:61:12:b2:e9:a0:89:38:d2:59:1f:e8:
75:e8:4e:7c:f7:ba:b1:fb:0b:cd:36:7d:e4:a0:9b:
97:71:73:26:a8:cc:a4:9d:0b:85:f4:09:d5:08:16:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0D:3C:2D:EE:02:03:8C:F1:6A:AB:22:9A:8A:FB:74:70:7A:4F:2F
X509v3 Authority Key Identifier:
keyid:6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:b0:50:94:16:c6:0f:0a:0a:b4:0c:5e:ab:c2:2e:02:e5:76:
be:b3:12:9f:ee:71:df:49:9f:77:0a:41:82:09:7b:f7:1f:58:
2d:b1:92:66:14:db:bf:f4:b8:50:d2:c0:6f:85:28:9a:41:0c:
9b:cd:e6:7a:e6:83:13:b3:55:9d:9f:cb:4c:09:ff:8b:b2:c7:
c9:b1:2d:69:64:40:69:64:ba:1f:eb:a8:f3:ea:a8:0a:8e:71:
ca:69:1c:85:ca:86:6c:e9:b7:20:88:f3:b2:22:08:6b:6e:40:
5f:27:bf:e7:ed:f2:2a:cd:e6:d2:44:a9:3e:76:e8:a1:1c:47:
7d:3c:28:04:94:da:b6:df:49:75:5b:ae:9c:c0:0d:ed:12:7e:
4b:d9:8b:74:40:70:b5:f6:18:0c:4c:2f:c3:f6:81:10:f0:3a:
07:50:6d:c5:bf:c5:95:7e:e5:5e:08:5b:81:18:f1:31:21:b0:
9a:b0:58:76:19:6f:ab:78:4c:96:3a:5f:72:90:59:3e:70:53:
84:a6:78:2c:d0:18:a0:00:fd:b4:f1:4c:8a:3c:63:c9:95:ae:
cd:8c:18:f2:ed:38:bb:82:68:73:84:59:4b:5b:be:05:d7:16:
bf:73:ec:02:66:b1:fa:39:f2:b3:46:4d:72:77:17:30:bf:43:
13:41:ef:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAWxrxIP57zO8gtKBXIQARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZDNiN2ZmNTJkM2IxOTI1NjdhYWNjYTRkOWI4NjIyNzQx
YjdmN2EwHhcNMjYxMDAzMDYwMjEyWhcNMjYxMDA0MDYwMjEyWjAzMTEwLwYDVQQD
Eyg4MzBkM2MyZGVlMDIwMzhjZjE2YWFiMjI5YThhZmI3NDcwN2E0ZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVOZQ+avkFh+aEqb7cm5Un0BHzXb
4J22vMNDbFEXSH+KSFzoiEoRGKnXFu9CE/+E3ORzoiSTqkj4IBoXwqwHRDa5SZ7q
NV08MwqdC1agsLT/omGEJ6ctBXZ+F5h+Q8a4xYskxAoam/bqSayTXTBF8hNKV8Mv
OPOdWWD4feQ8wcOZ189UVRG+dRWu8o0EC9gn4nkcpXBIxMWLKEg02E3qfknnPw1q
h/ATkUvFyTQwMfE4CDVRBSvO3BO5cR8ArX0qmbGxHlQ8c6wg4Cab980x55xaLNQR
YRKy6aCJONJZH+h16E5897qx+wvNNn3koJuXcXMmqMyknQuF9AnVCBZ2xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMNPC3uAgOM8WqrIpqK+3Rwek8vMB8GA1UdIwQY
MBaAFG/Tt/9S07GSVnqsyk2bhiJ0G396MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjlPM18xTFRzWkpXZXF6S1RadUdJblFiZjNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zY2JiOWMtNTAwNi00NmJlLWI0YzMt
ZmY4ZjU1NDVlYmEyLzEvYjlPM18xTFRzWkpXZXF6S1RadUdJblFiZjNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zY2JiOWMtNTAwNi00NmJlLWI0YzMtZmY4ZjU1NDVlYmEy
LzEvYjlPM18xTFRzWkpXZXF6S1RadUdJblFiZjNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyLBQlBbG
DwoKtAxeq8IuAuV2vrMSn+5x30mfdwpBggl79x9YLbGSZhTbv/S4UNLAb4UomkEM
m83meuaDE7NVnZ/LTAn/i7LHybEtaWRAaWS6H+uo8+qoCo5xymkchcqGbOm3IIjz
siIIa25AXye/5+3yKs3m0kSpPnbooRxHfTwoBJTatt9JdVuunMAN7RJ+S9mLdEBw
tfYYDEwvw/aBEPA6B1Btxb/FlX7lXghbgRjxMSGwmrBYdhlvq3hMljpfcpBZPnBT
hKZ4LNAYoAD9tPFMijxjyZWuzYwY8u04u4Joc4RZS1u+BdcWv3PsAmax+jnys0ZN
cncXML9DE0Hvzg==
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:26:24 2026 by rpki-client