Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
File: OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json)
Hash identifier: l4h/QtosCuXjT1CC90xfZs71CgoNWqBV8TXCnBwJVRc=
Subject key identifier: 86:AC:62:C9:4E:09:B0:8F:C6:24:35:9B:59:F9:22:A6:D5:15:2D:42
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 019D3977F7DC7E373FCF1464FB41EFE0552A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
Manifest number: 12B4
Signing time: Sun 29 Mar 2026 12:00:56 +0000
Manifest this update: Sun 29 Mar 2026 12:00:56 +0000
Manifest next update: Mon 30 Mar 2026 12:00:56 +0000
Files and hashes: 1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: SLUOqpO+OfhpHasdoPIUMGuURmhBRCoOis52A71BWwo=)
2: Wsump-ruMTHeCIUMQYq9YHizRHM.roa (hash: PRDR807Wy2QehMf95nyisTATR9YQb1obROcnB9juLnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f7:dc:7e:37:3f:cf:14:64:fb:41:ef:e0:55:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Mar 29 12:00:56 2026 GMT
Not After : Mar 30 12:00:56 2026 GMT
Subject: CN=86ac62c94e09b08fc624359b59f922a6d5152d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:85:78:ba:1b:6a:8e:d2:55:11:c8:e5:dc:
42:22:7d:d1:18:ef:11:92:a4:f7:af:bb:a4:5a:3a:
83:08:86:70:67:45:d7:6f:52:2f:a8:c5:66:6b:e2:
6b:65:61:7d:85:9b:36:49:66:99:b9:67:ae:b7:1e:
61:cb:94:1d:f9:13:d6:b7:9f:c4:cd:ed:d0:43:35:
95:67:04:4b:04:36:97:a9:28:c8:c1:81:cb:44:bf:
e1:87:8e:a0:7d:63:fa:36:d3:90:3b:f8:7d:6f:91:
2a:7f:06:9a:09:37:a0:a8:b7:d3:63:b5:23:a8:11:
ab:3b:f0:64:b0:d5:c5:54:b0:6d:15:30:a2:70:52:
7d:ba:b0:21:7f:0b:33:98:64:f3:4c:67:c1:ba:b1:
30:98:4d:ee:54:5e:d8:8e:fb:58:75:0d:bd:44:ee:
67:8e:97:6b:0c:89:66:c9:bc:eb:16:5f:95:b4:9d:
da:4d:e6:31:15:9a:6d:3b:a1:10:b8:1a:a1:01:c9:
ad:6f:f5:c2:dd:c4:32:d4:02:0c:cc:7a:05:da:9a:
23:1c:20:b5:6f:45:4c:e8:67:1b:45:26:fe:9a:21:
f0:f7:76:ae:7c:db:69:4c:eb:62:c7:41:41:09:4f:
ff:7c:a0:ad:84:99:ea:35:68:4b:91:f6:15:24:98:
e9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AC:62:C9:4E:09:B0:8F:C6:24:35:9B:59:F9:22:A6:D5:15:2D:42
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2a:77:8d:d2:39:19:3d:f4:b9:32:6c:66:c7:55:46:2e:a6:
ac:80:21:29:d2:01:e4:da:9e:c0:70:27:74:cd:11:8d:5d:e6:
1c:27:53:27:3c:b6:00:63:23:9a:e4:60:56:d5:d8:1d:4f:27:
77:40:c9:d2:47:4a:a5:b1:44:30:22:dc:b3:62:f1:7e:0b:eb:
2e:8d:52:05:d1:26:03:4f:5a:d9:a7:91:bc:00:49:40:f0:18:
1e:7a:26:03:91:9c:50:3c:ae:3c:1f:fd:31:98:a5:a7:95:30:
d0:8d:36:c3:8b:4c:0e:52:9a:65:96:02:3e:14:df:79:43:14:
eb:7b:c2:8f:ab:fc:08:bc:c2:7f:50:1a:cb:f2:26:0c:c8:bf:
bd:89:68:06:61:1e:96:29:c6:e6:e0:19:0a:09:2e:58:1f:2f:
81:64:ad:95:b2:d2:5c:06:eb:82:26:9d:f3:b3:21:e2:1b:41:
95:20:06:b1:5e:b1:f5:42:1d:1d:80:b3:0c:62:32:6c:ee:e4:
c0:4a:2b:8c:8a:02:e4:4e:3c:ea:83:3f:e4:9c:99:aa:11:e1:
72:95:e1:aa:c1:c7:6f:d0:c7:0a:12:52:8e:63:32:17:b2:a4:
0c:07:f3:02:9b:ba:d1:7e:bd:da:34:a1:f1:12:4c:f5:20:63:
4c:ed:5f:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d/fcfjc/zxRk+0Hv4FUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5N2Q5ZjNkYmZjMzY1MzMyZTI4MmJkMTc2YTY4MDc1NDQ2
ZDFkMWIwHhcNMjYwMzI5MTIwMDU2WhcNMjYwMzMwMTIwMDU2WjAzMTEwLwYDVQQD
Eyg4NmFjNjJjOTRlMDliMDhmYzYyNDM1OWI1OWY5MjJhNmQ1MTUyZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHGFeLobao7SVRHI5dxCIn3RGO8R
kqT3r7ukWjqDCIZwZ0XXb1IvqMVma+JrZWF9hZs2SWaZuWeutx5hy5Qd+RPWt5/E
ze3QQzWVZwRLBDaXqSjIwYHLRL/hh46gfWP6NtOQO/h9b5EqfwaaCTegqLfTY7Uj
qBGrO/BksNXFVLBtFTCicFJ9urAhfwszmGTzTGfBurEwmE3uVF7YjvtYdQ29RO5n
jpdrDIlmybzrFl+VtJ3aTeYxFZptO6EQuBqhAcmtb/XC3cQy1AIMzHoF2pojHCC1
b0VM6GcbRSb+miHw93aufNtpTOtix0FBCU//fKCthJnqNWhLkfYVJJjpFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIasYslOCbCPxiQ1m1n5IqbVFS1CMB8GA1UdIwQY
MBaAFDl9nz2/w2UzLigr0XamgHVEbR0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZjJmOGYtMTIxMi00OTQzLWJkMGMt
ZDg2YWIyZmU3NjQ4LzEvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hZjJmOGYtMTIxMi00OTQzLWJkMGMtZDg2YWIyZmU3NjQ4
LzEvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCp3jdI5
GT30uTJsZsdVRi6mrIAhKdIB5NqewHAndM0RjV3mHCdTJzy2AGMjmuRgVtXYHU8n
d0DJ0kdKpbFEMCLcs2LxfgvrLo1SBdEmA09a2aeRvABJQPAYHnomA5GcUDyuPB/9
MZilp5Uw0I02w4tMDlKaZZYCPhTfeUMU63vCj6v8CLzCf1Aay/ImDMi/vYloBmEe
linG5uAZCgkuWB8vgWStlbLSXAbrgiad87Mh4htBlSAGsV6x9UIdHYCzDGIybO7k
wEorjIoC5E486oM/5JyZqhHhcpXhqsHHb9DHChJSjmMyF7KkDAfzApu60X692jSh
8RJM9SBjTO1fBw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:24 2026 by rpki-client