Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: WuWhkDoNp80UkUD/yybqKHb5cryrxBoPPMGxr+39VtY=
Subject key identifier: B3:6A:B5:08:25:75:84:2A:C3:5C:56:8A:FB:72:BC:42:4A:5D:14:0F
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 01A186AD43925815645D4FBC48455FEDE033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 15CA
Signing time: Thu 29 Oct 2026 08:01:04 +0000
Manifest this update: Thu 29 Oct 2026 08:01:04 +0000
Manifest next update: Fri 30 Oct 2026 08:01:04 +0000
Files and hashes: 1: TzZ8DBm3Hp04BY0B397tAwAsJ1A.roa (hash: 8hOHuxX3j27ZIrYwIouhG6F7KAUYojmRWpf6OzaimAU=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: KHqB2AR0CMa40/LL2z9KLA2U5wBneEPcG6QkWv+lRd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:43:92:58:15:64:5d:4f:bc:48:45:5f:ed:e0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Oct 29 08:01:04 2026 GMT
Not After : Oct 30 08:01:04 2026 GMT
Subject: CN=b36ab5082575842ac35c568afb72bc424a5d140f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:3f:98:eb:a9:e8:1a:3e:06:5a:e4:b1:26:
39:e1:b5:5d:0c:31:f5:00:90:e7:ed:d4:40:47:bd:
ed:5c:3c:3b:f8:80:18:19:b4:c3:61:de:17:e9:9c:
a4:a7:48:22:1f:66:09:81:87:09:2b:68:64:1e:f1:
74:49:cb:b8:39:0e:7f:cf:12:12:2b:c0:6b:b1:d5:
82:be:4d:42:9b:15:26:72:ea:45:70:b7:08:27:ea:
46:88:8c:f8:0c:97:53:6f:94:da:09:70:58:ff:f1:
bd:53:c9:8d:c8:f6:f9:1a:23:58:10:18:0f:d6:83:
9f:d9:28:d7:57:a1:72:9a:5b:7f:3f:aa:99:1e:8f:
c0:f6:5c:17:68:99:91:bb:c1:9f:6d:27:12:b4:83:
43:d6:2c:c0:ac:a6:51:cb:53:11:99:73:61:94:af:
71:c8:a9:e3:e6:07:20:59:a6:4c:37:d0:36:c4:f6:
09:45:8b:d3:13:07:46:f2:3c:ae:d8:d2:75:b6:21:
ed:19:1d:ef:00:c3:f0:35:a7:36:59:16:01:fd:d4:
5c:ef:ad:d0:d6:ae:c9:8d:1a:a0:26:95:41:c8:35:
4b:81:01:a9:99:d1:6e:f0:7d:13:1b:99:d1:d8:be:
00:c7:de:7c:3b:5a:0e:13:c4:b5:fc:78:2b:49:77:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6A:B5:08:25:75:84:2A:C3:5C:56:8A:FB:72:BC:42:4A:5D:14:0F
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d5:be:8e:cd:4c:3e:75:92:d3:6e:d6:df:dc:fd:16:fa:32:
fa:a8:35:83:61:a1:69:82:ae:c1:0e:41:04:6b:8e:b8:05:9d:
0a:01:be:71:20:24:20:41:bd:9e:f5:7b:df:88:aa:cf:4d:ed:
3b:1a:04:fa:b6:ba:a5:a8:c9:98:c4:34:91:3e:e9:63:75:c1:
9e:48:45:c0:7a:e6:1d:25:67:0f:38:38:1d:42:1b:d6:b9:da:
8c:e1:4f:3a:c1:4a:96:7f:49:ed:ee:2c:83:03:a5:be:bc:07:
31:44:f2:90:aa:b2:02:3c:ba:9e:b6:b6:d4:a1:10:b8:d3:16:
53:af:1f:40:67:c9:12:94:a9:d7:f8:ca:66:90:40:cc:db:48:
72:4d:f1:ad:93:03:b8:08:97:c1:ba:5c:6d:f7:e8:d4:61:16:
75:0c:34:59:1d:a5:59:f7:39:95:5e:eb:81:32:9a:38:14:56:
72:4b:f0:ff:fe:a6:54:11:cd:29:5d:12:c5:b9:80:69:d2:d6:
35:7b:86:ab:a4:46:91:2b:8f:24:61:65:8a:6d:f0:29:19:43:
f8:f5:d4:5c:ee:31:4a:80:64:c8:11:41:98:3a:c5:15:26:85:
bf:b4:2c:7b:31:f4:2e:b8:55:77:cf:bb:f0:5c:9b:45:62:92:
5d:b4:26:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGrUOSWBVkXU+8SEVf7eAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjg4MzA1ZmVkNWM5OTc2MGFlYzdjODk0YzZiYTIxZTRl
YWQ2NzUwHhcNMjYxMDI5MDgwMTA0WhcNMjYxMDMwMDgwMTA0WjAzMTEwLwYDVQQD
EyhiMzZhYjUwODI1NzU4NDJhYzM1YzU2OGFmYjcyYmM0MjRhNWQxNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvo/mOup6Bo+BlrksSY54bVdDDH1
AJDn7dRAR73tXDw7+IAYGbTDYd4X6Zykp0giH2YJgYcJK2hkHvF0Scu4OQ5/zxIS
K8BrsdWCvk1CmxUmcupFcLcIJ+pGiIz4DJdTb5TaCXBY//G9U8mNyPb5GiNYEBgP
1oOf2SjXV6Fymlt/P6qZHo/A9lwXaJmRu8GfbScStIND1izArKZRy1MRmXNhlK9x
yKnj5gcgWaZMN9A2xPYJRYvTEwdG8jyu2NJ1tiHtGR3vAMPwNac2WRYB/dRc763Q
1q7JjRqgJpVByDVLgQGpmdFu8H0TG5nR2L4Ax958O1oOE8S1/HgrSXexiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNqtQgldYQqw1xWivtyvEJKXRQPMB8GA1UdIwQY
MBaAFKNogwX+1cmXYK7HyJTGuiHk6tZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJpREJmN1Z5WmRncnNmSWxNYTZJZVRxMW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mOWUyNTctMDE2Mi00ZGVmLTk2YWQt
ZGVjOTc5NmY2MjIzLzEvbzJpREJmN1Z5WmRncnNmSWxNYTZJZVRxMW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mOWUyNTctMDE2Mi00ZGVmLTk2YWQtZGVjOTc5NmY2MjIz
LzEvbzJpREJmN1Z5WmRncnNmSWxNYTZJZVRxMW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENW+js1M
PnWS027W39z9Fvoy+qg1g2GhaYKuwQ5BBGuOuAWdCgG+cSAkIEG9nvV734iqz03t
OxoE+ra6pajJmMQ0kT7pY3XBnkhFwHrmHSVnDzg4HUIb1rnajOFPOsFKln9J7e4s
gwOlvrwHMUTykKqyAjy6nra21KEQuNMWU68fQGfJEpSp1/jKZpBAzNtIck3xrZMD
uAiXwbpcbffo1GEWdQw0WR2lWfc5lV7rgTKaOBRWckvw//6mVBHNKV0SxbmAadLW
NXuGq6RGkSuPJGFlim3wKRlD+PXUXO4xSoBkyBFBmDrFFSaFv7QsezH0LrhVd8+7
8FybRWKSXbQmpQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:52:31 2026 by rpki-client