Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json)
Hash identifier: cDgqLDIcId2w2JbfvCYIhPCWrACM/9e/GMx3hdrw8pE=
Subject key identifier: 92:BB:BD:B7:1C:90:B5:A3:8E:BB:95:C6:58:C1:F6:19:D9:27:B1:87
Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Certificate serial: 01A17C97AB4FEC8B9A76EF9CCFD446F5F19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
Manifest number: 03F5
Signing time: Tue 27 Oct 2026 09:01:16 +0000
Manifest this update: Tue 27 Oct 2026 09:01:16 +0000
Manifest next update: Wed 28 Oct 2026 09:01:16 +0000
Files and hashes: 1: hRuDhXhX54qw1wEPjhcbUnyv6xs.roa (hash: TAW6RX8CSvyYletMRNoT2k5BjZvitleWVxLZc1Ntn/4=)
2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: cf7MpCIjqoUoGzBbuh1AdyFyT4nIZpS+/sWiSZ6dP+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:ab:4f:ec:8b:9a:76:ef:9c:cf:d4:46:f5:f1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Validity
Not Before: Oct 27 09:01:16 2026 GMT
Not After : Oct 28 09:01:16 2026 GMT
Subject: CN=92bbbdb71c90b5a38ebb95c658c1f619d927b187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:c1:6f:7d:99:d1:7a:76:e4:83:c1:e8:6f:
1c:b3:08:19:a5:23:2e:6e:55:89:54:20:06:47:26:
b0:af:39:e5:31:89:8f:bb:9c:01:fd:21:96:8c:3f:
10:be:3b:78:be:10:9b:ec:d2:fc:de:08:e2:d7:59:
b2:b7:f6:af:c0:a7:5a:3e:b4:42:8e:9d:ce:b8:87:
34:f5:1a:86:cf:c6:bb:34:6d:ff:2b:69:c4:fc:11:
79:70:49:e8:74:04:95:af:c2:12:99:64:17:35:9b:
e4:cd:ad:55:d8:cf:ac:33:02:d0:da:ab:83:25:ee:
31:db:40:bb:d4:a3:bc:7e:26:dd:64:31:25:d0:26:
eb:da:78:22:93:49:c1:57:47:43:14:fc:bb:38:d8:
0b:3f:d0:ca:a7:b1:3f:79:a7:06:97:ea:f2:83:ec:
d4:b7:5f:a9:f4:1b:0d:ea:58:7d:8c:05:f4:17:da:
f6:3f:a0:dd:79:ae:b2:d4:d0:af:f5:b6:28:f9:97:
0d:91:31:88:f0:5a:68:b8:09:69:71:e1:40:3b:e7:
1a:83:bf:7a:bd:97:65:1d:09:7a:63:0d:6f:1a:3d:
a5:91:11:68:ef:65:79:e9:66:90:ec:46:34:4f:e7:
9f:69:46:ec:f8:4a:77:a9:32:c8:97:ae:bb:64:78:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BB:BD:B7:1C:90:B5:A3:8E:BB:95:C6:58:C1:F6:19:D9:27:B1:87
X509v3 Authority Key Identifier:
keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c4:66:ee:4e:86:97:3e:9b:7c:d9:ae:0f:71:3a:e4:41:f0:
2d:15:46:db:11:2d:0f:30:3b:61:ba:3c:cc:65:74:d0:50:60:
26:f0:5e:33:bc:11:08:77:0f:ab:12:0e:1e:13:98:0f:2a:8e:
bb:c4:ce:ee:f8:7a:95:e6:39:38:e3:86:90:5b:1b:e3:65:5c:
ea:6e:83:ca:58:9d:2e:76:6f:43:3e:1e:14:aa:65:06:8c:01:
af:b6:a6:06:26:38:72:df:e3:37:55:ed:83:1a:22:df:31:97:
41:19:39:8c:24:17:96:08:d4:21:ba:16:1f:d3:9f:74:b8:18:
19:77:18:d6:21:55:b9:a3:58:38:7f:55:92:32:cf:f0:d2:3d:
5c:aa:ef:23:14:c6:00:7b:8a:f0:e1:10:87:43:fd:9d:5d:c7:
ed:41:2d:d4:c7:9d:53:a9:2a:55:16:21:62:38:ee:06:c5:0f:
73:63:58:5d:82:82:77:25:69:92:f2:6b:18:69:db:1a:b7:14:
3c:a9:17:fc:c8:0c:d6:5e:46:b5:c5:ed:8e:0d:88:84:3b:e9:
bd:1d:e0:4a:e5:c7:fc:fa:dc:13:64:6e:f9:c4:3b:6b:69:3b:
d8:c5:c1:fb:9b:c2:3c:48:c7:06:f6:94:2a:eb:f1:8e:86:ac:
38:29:90:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8l6tP7Iuadu+cz9RG9fGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjlmNGI3OGNjNGQ5MzVmYjFmMzliYmRlY2M4YTQxM2Iw
ZmFmOWQwHhcNMjYxMDI3MDkwMTE2WhcNMjYxMDI4MDkwMTE2WjAzMTEwLwYDVQQD
Eyg5MmJiYmRiNzFjOTBiNWEzOGViYjk1YzY1OGMxZjYxOWQ5MjdiMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1nBb32Z0Xp25IPB6G8cswgZpSMu
blWJVCAGRyawrznlMYmPu5wB/SGWjD8Qvjt4vhCb7NL83gji11myt/avwKdaPrRC
jp3OuIc09RqGz8a7NG3/K2nE/BF5cEnodASVr8ISmWQXNZvkza1V2M+sMwLQ2quD
Je4x20C71KO8fibdZDEl0Cbr2ngik0nBV0dDFPy7ONgLP9DKp7E/eacGl+ryg+zU
t1+p9BsN6lh9jAX0F9r2P6Ddea6y1NCv9bYo+ZcNkTGI8FpouAlpceFAO+cag796
vZdlHQl6Yw1vGj2lkRFo72V56WaQ7EY0T+efaUbs+Ep3qTLIl667ZHjLmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK7vbcckLWjjruVxljB9hnZJ7GHMB8GA1UdIwQY
MBaAFKNp9LeMxNk1+x85u97MikE7D6+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUt
YjBhZGVjOTM0NjcxLzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUtYjBhZGVjOTM0Njcx
LzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcRm7k6G
lz6bfNmuD3E65EHwLRVG2xEtDzA7Ybo8zGV00FBgJvBeM7wRCHcPqxIOHhOYDyqO
u8TO7vh6leY5OOOGkFsb42Vc6m6DylidLnZvQz4eFKplBowBr7amBiY4ct/jN1Xt
gxoi3zGXQRk5jCQXlgjUIboWH9OfdLgYGXcY1iFVuaNYOH9VkjLP8NI9XKrvIxTG
AHuK8OEQh0P9nV3H7UEt1MedU6kqVRYhYjjuBsUPc2NYXYKCdyVpkvJrGGnbGrcU
PKkX/MgM1l5GtcXtjg2IhDvpvR3gSuXH/PrcE2Ru+cQ7a2k72MXB+5vCPEjHBvaU
KuvxjoasOCmQcw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:33 2026 by rpki-client