
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json)
Hash identifier: Sy4K64+gdBB1nWXVjTltFg/O/PKmOXBixijJtltYAmM=
Subject key identifier: 27:6F:08:C8:21:A4:5A:30:E5:9B:5D:0C:AF:2B:67:9D:02:79:7D:B4
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 01A002B9068B490C90BD8A32F322C8D2BA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
Manifest number: 1933
Signing time: Sat 15 Aug 2026 00:01:15 +0000
Manifest this update: Sat 15 Aug 2026 00:01:15 +0000
Manifest next update: Sun 16 Aug 2026 00:01:15 +0000
Files and hashes: 1: 2zvlLx0eZAbOYhxgIyqrlDoVC1g.roa (hash: KQYOWqTXbXwvtekOLsVc2rxud/hR8A87QDGRubzzTXw=)
2: 4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa (hash: Cbb+P8Z0r4y6AjDJgLqHTENuD/Go8wmcnnMVwTktU/4=)
3: D757pdeWdoida8GHOUdKTXVzQLA.roa (hash: 9oAemx2TPMquAep4lORrFPAoBV6BakfDEYxe+lt7IJE=)
4: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: 7zhRe/LuLUWYQCr3gW6BFwOuiDnzHfj4mOAkkBYdi8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b9:06:8b:49:0c:90:bd:8a:32:f3:22:c8:d2:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Aug 15 00:01:15 2026 GMT
Not After : Aug 16 00:01:15 2026 GMT
Subject: CN=276f08c821a45a30e59b5d0caf2b679d02797db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:e9:df:6b:37:b3:2a:64:d6:11:b0:be:c0:
a6:a8:d1:4a:7e:5a:43:83:04:c6:a2:97:47:cd:ea:
8b:5a:65:fb:bc:9e:42:2c:d2:31:1f:8b:17:11:01:
72:46:3c:59:72:8f:43:d0:1d:2f:b4:3e:f3:3e:6c:
e9:e6:de:d7:fd:cf:89:89:6b:df:5e:e2:c2:66:a4:
83:50:6f:07:3d:c2:c4:3d:3e:17:17:81:f6:d4:a4:
95:cf:8e:2b:9c:58:dd:a5:b4:5c:50:35:f9:5f:02:
55:31:34:12:75:90:35:9e:83:d8:02:17:13:d6:8d:
ee:24:8c:ab:0b:02:7c:f7:68:61:f6:d7:dc:e0:08:
13:41:94:5e:0e:0b:00:56:03:76:8f:e6:18:23:62:
a4:b3:c1:58:e9:9c:9c:34:8c:6e:29:c0:00:b9:20:
80:3f:0d:3b:bd:87:04:7a:46:42:c6:82:19:97:be:
71:b6:6d:3c:44:2f:1b:03:eb:aa:62:04:bf:aa:8c:
54:06:f0:cb:cc:c3:fd:35:6d:7e:5a:f6:e6:0a:cc:
8b:0b:17:13:49:bb:24:cb:a1:3f:89:ed:08:cc:47:
06:8c:35:4c:c8:84:4f:11:1d:58:b3:8b:66:08:69:
78:50:f6:5a:b0:4b:17:17:b9:c2:c9:c7:f9:4d:45:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6F:08:C8:21:A4:5A:30:E5:9B:5D:0C:AF:2B:67:9D:02:79:7D:B4
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:35:ab:1f:58:e6:3a:1e:6b:94:3a:e8:30:b5:07:7c:ab:71:
42:08:c1:80:d0:cf:17:a9:ba:c4:4d:c3:fa:7c:5a:d8:51:48:
0d:e1:5a:e2:72:9c:ac:6e:03:8f:f5:f4:99:36:93:40:f3:16:
c2:ab:26:4a:60:db:2b:7e:83:e4:44:4b:9c:73:a9:49:44:21:
f8:6d:4d:14:49:e7:02:77:d9:a7:16:e1:d9:41:2d:23:88:51:
01:57:dc:36:de:46:9d:ae:83:57:55:22:ca:63:12:24:cc:6d:
fd:08:22:98:f0:80:c3:24:20:ea:54:6b:41:c5:75:da:49:fb:
48:70:38:5e:b8:70:07:75:e8:e2:d4:88:95:d1:7c:73:3d:2c:
d2:e2:2f:ae:44:fd:91:41:f6:d5:24:17:fb:c9:b3:a7:c6:5b:
b3:7e:d5:c8:a2:18:65:e8:6e:59:0f:b6:3e:fe:ef:a7:31:1f:
7d:de:f1:e8:83:55:a7:df:be:50:00:de:62:ba:2d:c2:0e:e4:
6b:7c:45:d9:91:1a:9e:bc:4e:01:fc:06:82:d8:67:5d:5e:45:
5c:a4:2a:8e:dc:84:86:1d:16:15:59:e1:82:a9:03:93:2a:71:
68:51:9a:22:f1:88:b3:8b:4f:f7:05:ea:ba:50:f5:25:9a:0c:
65:14:ac:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuQaLSQyQvYoy8yLI0rp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx
Y2FmYTQwHhcNMjYwODE1MDAwMTE1WhcNMjYwODE2MDAwMTE1WjAzMTEwLwYDVQQD
EygyNzZmMDhjODIxYTQ1YTMwZTU5YjVkMGNhZjJiNjc5ZDAyNzk3ZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Hp32s3sypk1hGwvsCmqNFKflpD
gwTGopdHzeqLWmX7vJ5CLNIxH4sXEQFyRjxZco9D0B0vtD7zPmzp5t7X/c+JiWvf
XuLCZqSDUG8HPcLEPT4XF4H21KSVz44rnFjdpbRcUDX5XwJVMTQSdZA1noPYAhcT
1o3uJIyrCwJ892hh9tfc4AgTQZReDgsAVgN2j+YYI2Kks8FY6ZycNIxuKcAAuSCA
Pw07vYcEekZCxoIZl75xtm08RC8bA+uqYgS/qoxUBvDLzMP9NW1+WvbmCsyLCxcT
Sbsky6E/ie0IzEcGjDVMyIRPER1Ys4tmCGl4UPZasEsXF7nCycf5TUVJ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdvCMghpFow5ZtdDK8rZ50CeX20MB8GA1UdIwQY
MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt
MGU3MjQxNmI0ZGM3LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3
LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTWrH1jm
Oh5rlDroMLUHfKtxQgjBgNDPF6m6xE3D+nxa2FFIDeFa4nKcrG4Dj/X0mTaTQPMW
wqsmSmDbK36D5ERLnHOpSUQh+G1NFEnnAnfZpxbh2UEtI4hRAVfcNt5Gna6DV1Ui
ymMSJMxt/QgimPCAwyQg6lRrQcV12kn7SHA4XrhwB3Xo4tSIldF8cz0s0uIvrkT9
kUH21SQX+8mzp8Zbs37VyKIYZehuWQ+2Pv7vpzEffd7x6INVp9++UADeYrotwg7k
a3xF2ZEanrxOAfwGgthnXV5FXKQqjtyEhh0WFVnhgqkDkypxaFGaIvGIs4tP9wXq
ulD1JZoMZRSsEQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:42:14 2026 by rpki-client