Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: D6PxVQnDxW34aDNxqjzxvGi+6vDgZnLBTgPD9ASSa6c=
Subject key identifier: B8:83:B9:56:84:2F:E7:E5:A3:E8:F0:3D:F9:22:8A:57:BD:C3:9D:14
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 01A0B87788C62BC4B2409E19488377E6FD0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 1A5E
Signing time: Sat 19 Sep 2026 07:00:36 +0000
Manifest this update: Sat 19 Sep 2026 07:00:36 +0000
Manifest next update: Sun 20 Sep 2026 07:00:36 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: kk2e7Eezc4z6GQL3LE79gRKA0n5yOeiVjiqdpPTG91w=)
2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:77:88:c6:2b:c4:b2:40:9e:19:48:83:77:e6:fd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Sep 19 07:00:36 2026 GMT
Not After : Sep 20 07:00:36 2026 GMT
Subject: CN=b883b956842fe7e5a3e8f03df9228a57bdc39d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6f:27:76:93:12:8e:94:5f:08:b8:1e:f8:cc:
42:e8:4c:3e:ab:bd:32:8c:b4:ea:3b:4f:b8:1c:98:
cf:47:02:2c:55:02:c4:70:77:9b:eb:11:2b:f3:2d:
df:0e:22:ec:c9:64:a8:0b:78:45:97:fb:9c:4e:e9:
e6:8c:50:53:07:4f:3d:81:a7:f0:1c:e6:6c:32:93:
b2:d4:a8:6e:13:54:c0:3a:4a:24:2f:91:e6:23:f8:
39:0a:7e:b3:79:d5:69:84:00:ca:97:ba:49:c6:45:
84:e7:64:7d:c6:09:61:f3:a4:f8:08:f4:d8:d1:7e:
10:bb:56:a0:23:79:8b:e4:44:7d:67:2d:17:03:35:
98:f3:dc:66:21:49:4d:48:40:88:34:b4:ba:96:7b:
63:ca:cc:71:3b:d3:e4:80:a5:df:14:88:9f:10:0d:
6c:66:3e:da:c7:a2:11:41:74:47:dd:66:10:25:b9:
41:2f:8d:3b:ab:d0:4e:3f:5f:78:d2:99:ad:ec:ee:
84:4f:c7:3b:6e:d8:b3:f3:94:80:41:09:26:f7:99:
e8:98:82:52:48:00:cf:82:5d:a8:33:92:9d:f1:42:
18:bd:17:d2:00:f5:41:a0:b4:32:9e:ac:b8:42:bf:
86:53:58:66:71:8f:93:12:ed:83:85:54:48:90:f7:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:83:B9:56:84:2F:E7:E5:A3:E8:F0:3D:F9:22:8A:57:BD:C3:9D:14
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0b:a2:dc:10:3d:40:92:54:4f:ed:00:d4:c3:ed:d9:ad:65:
dd:bc:a9:f2:40:3e:a6:69:c0:1b:d3:4e:44:ce:f2:43:ce:a0:
b9:20:e0:eb:dc:46:d9:d8:8a:ac:0f:01:04:d5:02:d4:7e:55:
59:1d:2b:8a:21:5e:58:f3:2b:c7:2e:ea:fe:fe:cb:84:9a:12:
9b:ef:08:3e:c9:ae:8b:27:1f:a4:7c:27:a5:e5:fd:dc:e6:6f:
7e:e9:17:4d:c3:17:c8:db:de:1f:92:35:f8:e3:80:3a:f7:7e:
fc:4d:49:1f:00:78:4c:16:36:14:5d:f7:ef:a1:21:18:19:22:
40:1a:55:84:45:8d:cc:82:81:9c:46:17:73:ed:5d:1c:fa:45:
b0:10:a3:fa:5c:98:ad:56:ce:02:59:10:54:8a:08:fe:30:dc:
34:3e:5b:e6:eb:0f:cf:63:70:ab:69:56:72:26:9b:84:1d:86:
90:36:83:99:ca:87:79:40:55:0e:dd:9f:34:c5:e6:3d:63:06:
13:49:cc:30:8f:bf:d0:15:c9:05:83:d6:8e:54:11:df:cb:39:
90:cc:3b:5d:55:e3:68:67:5b:c9:ed:38:dc:53:18:50:92:63:
c2:2f:4e:22:56:12:97:d8:9d:2c:a9:79:cc:bd:91:06:3a:2e:
ef:09:37:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC4d4jGK8SyQJ4ZSIN35v0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNjhlNTQ2MGRiYTU4NzFkYmU1MjMyMTQ4NDM5ZTIxNWIy
OWJkNDQwHhcNMjYwOTE5MDcwMDM2WhcNMjYwOTIwMDcwMDM2WjAzMTEwLwYDVQQD
EyhiODgzYjk1Njg0MmZlN2U1YTNlOGYwM2RmOTIyOGE1N2JkYzM5ZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG8ndpMSjpRfCLge+MxC6Ew+q70y
jLTqO0+4HJjPRwIsVQLEcHeb6xEr8y3fDiLsyWSoC3hFl/ucTunmjFBTB089gafw
HOZsMpOy1KhuE1TAOkokL5HmI/g5Cn6zedVphADKl7pJxkWE52R9xglh86T4CPTY
0X4Qu1agI3mL5ER9Zy0XAzWY89xmIUlNSECINLS6lntjysxxO9PkgKXfFIifEA1s
Zj7ax6IRQXRH3WYQJblBL407q9BOP1940pmt7O6ET8c7btiz85SAQQkm95nomIJS
SADPgl2oM5Kd8UIYvRfSAPVBoLQynqy4Qr+GU1hmcY+TEu2DhVRIkPfR2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiDuVaEL+flo+jwPfkiile9w50UMB8GA1UdIwQY
MBaAFDto5UYNulhx2+UjIUhDniFbKb1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWIt
MDU1MTEyNTYwZmM5LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWItMDU1MTEyNTYwZmM5
LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAui3BA9
QJJUT+0A1MPt2a1l3byp8kA+pmnAG9NORM7yQ86guSDg69xG2diKrA8BBNUC1H5V
WR0riiFeWPMrxy7q/v7LhJoSm+8IPsmuiycfpHwnpeX93OZvfukXTcMXyNveH5I1
+OOAOvd+/E1JHwB4TBY2FF3376EhGBkiQBpVhEWNzIKBnEYXc+1dHPpFsBCj+lyY
rVbOAlkQVIoI/jDcND5b5usPz2Nwq2lWciabhB2GkDaDmcqHeUBVDt2fNMXmPWMG
E0nMMI+/0BXJBYPWjlQR38s5kMw7XVXjaGdbye043FMYUJJjwi9OIlYSl9idLKl5
zL2RBjou7wk3OQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 12:39:54 2026 by rpki-client