Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier: pscalusRLrqTxxHHEr/jOmAficZ75Qfq7TRPQSQugzY=
Subject key identifier: 73:39:B2:0F:25:F1:D8:9E:2E:DB:BA:8B:5E:65:D5:EE:7A:87:34:31
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 019D371BFA6E7FEF6EF0A3C4C3B72CAE1D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number: 1054
Signing time: Sun 29 Mar 2026 01:01:13 +0000
Manifest this update: Sun 29 Mar 2026 01:01:13 +0000
Manifest next update: Mon 30 Mar 2026 01:01:13 +0000
Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: g1SeWwo0mIQ+hCvqRFvFIlb4ipq88TOF5gi9jaZ99uI=)
2: fwsKv3gFuqhW1sf3BEMUe7UIGos.roa (hash: 1WCeYdLMrYmy3YdzxETcmdYKttU2fzCPworPqJW1olQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:fa:6e:7f:ef:6e:f0:a3:c4:c3:b7:2c:ae:1d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Mar 29 01:01:13 2026 GMT
Not After : Mar 30 01:01:13 2026 GMT
Subject: CN=7339b20f25f1d89e2edbba8b5e65d5ee7a873431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:a6:67:ca:76:64:af:be:9e:c9:99:3b:f3:
e4:a1:f5:12:a8:c9:cd:c9:0e:11:e2:6d:cc:5d:03:
fc:d0:3c:b0:92:8e:b6:4d:fe:fc:4a:a4:1e:45:ad:
c4:7d:21:db:c8:af:18:7e:47:d8:23:21:5b:6a:de:
47:f4:2b:07:8b:ad:0e:7d:03:80:42:75:10:8b:c6:
2c:24:dc:0b:69:dc:2e:59:a9:cf:f2:10:1f:07:94:
ad:60:7f:15:ba:f6:48:41:b7:68:6c:0a:48:d6:92:
17:fe:b1:28:9e:ff:25:df:64:d9:03:cd:64:40:a3:
3b:78:25:fd:b4:95:39:5f:a4:c2:c2:1b:49:39:d7:
27:06:68:40:50:4b:e2:b6:cd:dc:3e:36:50:0a:ab:
56:4b:d5:89:56:82:48:ec:80:83:e8:0d:7c:3d:ef:
8d:90:c6:55:9e:7e:75:2d:b6:9e:8f:d6:87:4a:14:
64:3b:01:0a:99:05:7c:96:be:39:7a:99:5e:cb:c6:
79:10:1d:ce:7e:df:b8:0b:80:2a:53:b3:73:6d:b6:
fe:cb:32:4f:42:63:a5:9f:fe:24:b1:eb:e2:a7:f1:
b8:a6:65:f0:ea:de:3c:9b:05:01:09:e8:f2:5b:ae:
39:2c:55:ac:29:03:26:45:06:42:74:ce:d8:70:99:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:39:B2:0F:25:F1:D8:9E:2E:DB:BA:8B:5E:65:D5:EE:7A:87:34:31
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b0:c3:b2:ff:79:13:65:d1:fb:8e:12:61:64:0e:b7:03:41:
cd:b7:da:a8:f4:85:98:81:a9:46:f8:f7:0d:e7:01:8f:49:f9:
26:4a:da:af:3c:1e:8d:f1:ca:08:e5:fe:9c:b9:8e:09:c5:24:
b7:5b:c0:0d:be:e8:bc:ce:bc:37:4e:f6:6e:c5:29:3f:6a:40:
b0:6b:dc:fa:90:d4:3d:b6:e8:a0:ce:cf:e7:9f:39:37:a7:ac:
e9:04:92:6c:fc:87:cc:89:19:df:df:12:76:cc:fe:3c:93:e9:
3e:2e:52:7d:79:2f:5e:a7:ae:58:24:9b:8d:2e:8b:d4:e8:fe:
9f:a5:bc:f1:73:f5:0d:4e:94:af:80:84:b1:2b:8e:40:dd:ce:
7c:11:04:23:1d:21:a6:bc:9c:cb:51:9b:b8:84:09:8c:20:5b:
3d:77:ee:c1:53:d1:cc:32:29:cb:20:a4:7c:be:88:55:51:51:
d7:62:18:32:82:15:ca:d2:a2:0c:40:81:f5:a8:9e:d2:ac:aa:
8b:0d:22:af:38:ee:79:0c:ef:3a:ab:4d:32:8a:78:52:5d:39:
ab:69:79:f7:18:7a:28:9b:f8:37:95:d2:a8:f4:f6:31:a8:76:
2b:02:3d:96:90:18:f8:c7:93:04:2f:7c:b2:7b:81:f1:96:c6:
fc:6b:1d:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G/puf+9u8KPEw7csrh0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNTRmYTYwYjMyN2EwODAzZGM4NWU5NzBhOWI3NmE0NTE0
Y2ViNWUwHhcNMjYwMzI5MDEwMTEzWhcNMjYwMzMwMDEwMTEzWjAzMTEwLwYDVQQD
Eyg3MzM5YjIwZjI1ZjFkODllMmVkYmJhOGI1ZTY1ZDVlZTdhODczNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruqmZ8p2ZK++nsmZO/PkofUSqMnN
yQ4R4m3MXQP80Dywko62Tf78SqQeRa3EfSHbyK8YfkfYIyFbat5H9CsHi60OfQOA
QnUQi8YsJNwLadwuWanP8hAfB5StYH8VuvZIQbdobApI1pIX/rEonv8l32TZA81k
QKM7eCX9tJU5X6TCwhtJOdcnBmhAUEvits3cPjZQCqtWS9WJVoJI7ICD6A18Pe+N
kMZVnn51Lbaej9aHShRkOwEKmQV8lr45epley8Z5EB3Oft+4C4AqU7Nzbbb+yzJP
QmOln/4ksevip/G4pmXw6t48mwUBCejyW645LFWsKQMmRQZCdM7YcJk/7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHM5sg8l8dieLtu6i15l1e56hzQxMB8GA1UdIwQY
MBaAFDtU+mCzJ6CAPchelwqbdqRRTOteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTct
NDQyNzZmNjA0MjMzLzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTctNDQyNzZmNjA0MjMz
LzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULDDsv95
E2XR+44SYWQOtwNBzbfaqPSFmIGpRvj3DecBj0n5JkrarzwejfHKCOX+nLmOCcUk
t1vADb7ovM68N072bsUpP2pAsGvc+pDUPbbooM7P5585N6es6QSSbPyHzIkZ398S
dsz+PJPpPi5SfXkvXqeuWCSbjS6L1Oj+n6W88XP1DU6Ur4CEsSuOQN3OfBEEIx0h
prycy1GbuIQJjCBbPXfuwVPRzDIpyyCkfL6IVVFR12IYMoIVytKiDECB9aie0qyq
iw0irzjueQzvOqtNMop4Ul05q2l59xh6KJv4N5XSqPT2Mah2KwI9lpAY+MeTBC98
snuB8ZbG/Gsdfg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:24 2026 by rpki-client