Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json)
Hash identifier: GgmMPGjTEYI0Pkx7PMAKwhHeA2MAP8II1VIk/huGwpA=
Subject key identifier: A0:86:D9:0E:0C:32:CC:83:D9:B3:A3:F2:C2:D2:3A:7E:E6:C1:7B:5E
Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Certificate serial: 019DCC3CF977EA55E78BD9C4C969557DEC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
Manifest number: 020C
Signing time: Mon 27 Apr 2026 00:00:41 +0000
Manifest this update: Mon 27 Apr 2026 00:00:41 +0000
Manifest next update: Tue 28 Apr 2026 00:00:41 +0000
Files and hashes: 1: hRuDhXhX54qw1wEPjhcbUnyv6xs.roa (hash: TAW6RX8CSvyYletMRNoT2k5BjZvitleWVxLZc1Ntn/4=)
2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: 1+FFwgSQOzGG9u6vCN0un7c27H7SAncRhr/g2B5+S2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3c:f9:77:ea:55:e7:8b:d9:c4:c9:69:55:7d:ec:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Validity
Not Before: Apr 27 00:00:41 2026 GMT
Not After : Apr 28 00:00:41 2026 GMT
Subject: CN=a086d90e0c32cc83d9b3a3f2c2d23a7ee6c17b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5b:23:31:68:bb:6a:2d:69:9d:0e:e6:63:9e:
a0:ed:0c:78:e9:9a:d0:c9:60:49:14:4c:7b:ae:c1:
93:a7:53:94:65:6c:02:55:27:27:d7:92:af:93:82:
ba:36:d5:8e:76:a9:01:7a:d7:d4:7e:d8:f9:ba:94:
a5:7e:4a:3e:83:ce:f7:d5:83:99:6b:e8:d0:d8:e9:
82:48:b7:31:91:63:ad:5f:ee:99:72:c9:f6:ca:49:
c3:5e:09:35:c5:62:a5:09:e9:19:21:4f:79:83:bc:
85:07:1b:76:24:9d:e2:39:1f:e3:f4:a9:83:01:5e:
54:70:cf:ee:c9:36:fc:98:92:ae:b8:03:9a:e5:93:
50:a6:aa:a8:f3:65:0b:e1:f8:34:a0:a4:df:93:08:
0e:9b:6e:78:94:64:7d:0f:2f:98:50:d0:37:1b:a1:
f1:34:fc:84:45:e8:57:8b:91:04:05:8a:1a:46:71:
53:91:68:04:38:a8:70:bd:7c:5f:64:a1:f5:33:18:
3b:3d:ef:08:84:87:8f:e8:cb:fd:29:2b:25:7a:a9:
a0:ac:4f:f4:2b:90:89:11:bd:44:05:98:73:09:cf:
3b:90:6f:b0:a0:bd:6a:fd:5f:cb:87:cd:01:dc:2b:
78:66:75:a9:dc:4e:9b:06:9c:5c:e2:f4:82:22:8f:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:D9:0E:0C:32:CC:83:D9:B3:A3:F2:C2:D2:3A:7E:E6:C1:7B:5E
X509v3 Authority Key Identifier:
keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c2:5f:58:53:d1:70:e9:e2:0b:01:49:f2:01:90:37:df:a3:
67:8c:9b:e6:ee:e4:cb:41:85:58:9b:af:f3:ce:78:6e:88:96:
82:e7:69:a6:24:40:d1:b4:92:13:0c:c2:6d:6d:a4:34:e0:d5:
da:45:e2:41:4f:8d:19:b9:50:ed:e7:91:21:e4:78:cd:88:6c:
ca:b2:fb:c2:8c:2e:74:5d:c4:9d:b8:9c:1d:7c:ad:09:1a:b6:
a7:21:22:b6:3f:6d:77:cc:e2:d5:32:f7:4f:60:d7:aa:39:1f:
93:74:51:5d:76:8c:ca:6b:79:aa:cb:11:15:b0:aa:1e:b4:d3:
28:7c:79:f5:fe:8f:03:07:93:43:3d:5a:7d:34:2c:0c:71:f2:
e6:e7:e7:0a:be:6a:1d:e4:40:a6:aa:c9:78:bc:02:fd:13:4b:
35:79:81:64:5c:f4:6d:36:dc:95:45:3d:9e:0c:3a:78:3b:a8:
60:31:8d:bb:85:68:ca:cd:5d:42:29:69:9c:14:4b:c4:57:3b:
6a:1e:1a:4e:eb:8d:df:56:13:0d:32:2f:53:35:8b:be:e5:d1:
db:ba:5d:18:f2:a6:5a:2f:6b:72:05:20:f2:16:27:41:09:68:
bc:16:74:cf:ec:a6:ae:ef:ca:7d:65:ed:f7:8c:7b:26:79:b0:
bf:03:da:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MPPl36lXni9nEyWlVfewOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjlmNGI3OGNjNGQ5MzVmYjFmMzliYmRlY2M4YTQxM2Iw
ZmFmOWQwHhcNMjYwNDI3MDAwMDQxWhcNMjYwNDI4MDAwMDQxWjAzMTEwLwYDVQQD
EyhhMDg2ZDkwZTBjMzJjYzgzZDliM2EzZjJjMmQyM2E3ZWU2YzE3YjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+FsjMWi7ai1pnQ7mY56g7Qx46ZrQ
yWBJFEx7rsGTp1OUZWwCVScn15Kvk4K6NtWOdqkBetfUftj5upSlfko+g8731YOZ
a+jQ2OmCSLcxkWOtX+6Zcsn2yknDXgk1xWKlCekZIU95g7yFBxt2JJ3iOR/j9KmD
AV5UcM/uyTb8mJKuuAOa5ZNQpqqo82UL4fg0oKTfkwgOm254lGR9Dy+YUNA3G6Hx
NPyERehXi5EEBYoaRnFTkWgEOKhwvXxfZKH1Mxg7Pe8IhIeP6Mv9KSsleqmgrE/0
K5CJEb1EBZhzCc87kG+woL1q/V/Lh80B3Ct4ZnWp3E6bBpxc4vSCIo/SUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCG2Q4MMsyD2bOj8sLSOn7mwXteMB8GA1UdIwQY
MBaAFKNp9LeMxNk1+x85u97MikE7D6+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUt
YjBhZGVjOTM0NjcxLzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUtYjBhZGVjOTM0Njcx
LzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsJfWFPR
cOniCwFJ8gGQN9+jZ4yb5u7ky0GFWJuv8854boiWgudppiRA0bSSEwzCbW2kNODV
2kXiQU+NGblQ7eeRIeR4zYhsyrL7wowudF3EnbicHXytCRq2pyEitj9td8zi1TL3
T2DXqjkfk3RRXXaMymt5qssRFbCqHrTTKHx59f6PAweTQz1afTQsDHHy5ufnCr5q
HeRApqrJeLwC/RNLNXmBZFz0bTbclUU9ngw6eDuoYDGNu4Voys1dQilpnBRLxFc7
ah4aTuuN31YTDTIvUzWLvuXR27pdGPKmWi9rcgUg8hYnQQlovBZ0z+ymru/KfWXt
94x7JnmwvwPaIQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:45:43 2026 by rpki-client