Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
File: OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft (raw, json)
Hash identifier: 6La2hDHZ/OQpzx9lN+wQjgdtLOI/UA5VcARWEs7+uVQ=
Subject key identifier: 44:AB:B0:53:9E:AB:DF:58:1E:2E:01:7E:38:89:BA:E1:72:CB:A5:94
Authority key identifier: 3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Certificate issuer: /CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Certificate serial: 019D394086AB11BBD315059FFBEF337B51E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
Manifest number: 12AA
Signing time: Sun 29 Mar 2026 11:00:23 +0000
Manifest this update: Sun 29 Mar 2026 11:00:23 +0000
Manifest next update: Mon 30 Mar 2026 11:00:23 +0000
Files and hashes: 1: OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl (hash: p3opQ4S8uFhNvMJXK9S0f2x1bacSZAYkMKWFd8Jetsk=)
2: YMwIWblxxdgG2PErs0i8hdeLN_I.roa (hash: MLrLMjAo1D27u4EH1t9gBEoOSZR3KZexjLZQqipMzrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:86:ab:11:bb:d3:15:05:9f:fb:ef:33:7b:51:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Validity
Not Before: Mar 29 11:00:23 2026 GMT
Not After : Mar 30 11:00:23 2026 GMT
Subject: CN=44abb0539eabdf581e2e017e3889bae172cba594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:27:68:3d:e4:39:85:e6:97:4c:53:42:08:
94:ff:00:2d:4f:46:aa:5b:e5:4d:4f:2c:32:3c:40:
25:d4:06:f6:78:17:c2:1e:6f:42:6b:7c:2a:ab:5e:
69:7a:4e:3f:4a:da:3e:95:43:b1:9c:36:3d:11:6a:
1c:b7:e9:47:94:17:20:da:ce:31:c6:31:61:5c:cd:
2a:28:a3:38:df:c2:e6:27:54:57:65:33:d3:0e:a0:
19:25:1b:dd:a2:b5:af:23:e8:14:e3:a7:b2:d2:e3:
f8:50:04:6c:6c:4c:d6:f3:63:66:4c:71:b0:8e:f1:
e0:92:1d:02:d5:fc:1d:d2:a3:ef:5f:80:13:5d:26:
59:96:ca:70:04:6e:e6:9e:58:07:3a:35:17:95:29:
63:f2:31:7a:7e:c4:a2:56:f5:93:be:0c:8f:ee:58:
9d:b1:e9:c0:8b:c1:4c:58:4d:ce:9d:cd:42:f4:1a:
03:ff:fd:96:bc:c9:a4:5f:79:f1:90:1d:17:90:c9:
fc:b0:97:98:6b:c8:53:e5:1b:b6:5d:a5:c2:be:ec:
7c:58:dd:73:1e:c8:50:ec:5b:4a:e4:9a:b5:f6:5b:
95:8e:08:b2:a2:5f:f5:37:1e:62:5f:8a:2a:82:63:
ea:98:f8:03:2d:43:99:c7:ac:50:3f:6a:27:9d:99:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AB:B0:53:9E:AB:DF:58:1E:2E:01:7E:38:89:BA:E1:72:CB:A5:94
X509v3 Authority Key Identifier:
keyid:3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:53:94:c6:61:01:8d:f9:98:8d:7b:77:74:59:36:aa:e8:57:
e9:06:f2:c7:ff:c5:9d:7e:cf:17:ae:57:c1:a1:3c:b5:99:88:
29:d9:43:0f:00:f2:65:c5:a6:cd:1a:d6:4c:d4:6f:e2:c2:e2:
a6:11:8a:80:97:af:65:fa:01:5f:e2:2a:8c:6a:13:dc:f7:00:
4e:35:6e:93:0b:32:46:37:b3:ec:d2:d3:a8:db:60:a8:3b:51:
c2:2b:1f:71:85:24:0e:92:5a:ff:40:58:4c:e7:c1:24:78:c5:
57:98:f1:d8:05:c7:e5:f6:47:30:fb:7a:f1:a3:31:d5:a8:96:
22:6c:63:c2:88:2a:af:7a:3d:49:e2:f4:32:e6:2d:cc:10:5b:
b2:62:f7:81:0a:ab:95:51:a1:b6:22:30:84:48:af:52:22:ce:
cf:13:95:c4:28:ab:35:b9:1a:0c:aa:7c:0b:ae:f5:97:d4:24:
43:e8:e9:77:1f:06:58:55:f0:0c:18:69:90:9c:03:6e:ed:e2:
0b:a4:c0:66:9e:a8:9b:d4:ce:47:a0:ed:dd:33:33:42:73:9d:
3b:8a:84:de:6c:f5:8a:70:d6:27:dd:5b:1c:ae:24:30:d0:5a:
55:92:a7:e2:c0:26:cb:43:83:93:67:b4:8d:0f:49:09:8e:33:
ba:4d:80:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QIarEbvTFQWf++8ze1HnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhODRkZmVmM2Q1MTA3Yjg0ZmM3N2M1NmRjZjc5ZTA1ZmU5
YzczNTEwHhcNMjYwMzI5MTEwMDIzWhcNMjYwMzMwMTEwMDIzWjAzMTEwLwYDVQQD
Eyg0NGFiYjA1MzllYWJkZjU4MWUyZTAxN2UzODg5YmFlMTcyY2JhNTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdsnaD3kOYXml0xTQgiU/wAtT0aq
W+VNTywyPEAl1Ab2eBfCHm9Ca3wqq15pek4/Sto+lUOxnDY9EWoct+lHlBcg2s4x
xjFhXM0qKKM438LmJ1RXZTPTDqAZJRvdorWvI+gU46ey0uP4UARsbEzW82NmTHGw
jvHgkh0C1fwd0qPvX4ATXSZZlspwBG7mnlgHOjUXlSlj8jF6fsSiVvWTvgyP7lid
senAi8FMWE3Onc1C9BoD//2WvMmkX3nxkB0XkMn8sJeYa8hT5Ru2XaXCvux8WN1z
HshQ7FtK5Jq19luVjgiyol/1Nx5iX4oqgmPqmPgDLUOZx6xQP2onnZmjUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESrsFOeq99YHi4BfjiJuuFyy6WUMB8GA1UdIwQY
MBaAFDqE3+89UQe4T8d8Vtz3ngX+nHNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT29UZjd6MVJCN2hQeDN4VzNQZWVCZjZjYzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNGI3ZjMtNDBjZS00MmVkLWE5M2It
NWU4ZGVkYWM5Y2I3LzEvT29UZjd6MVJCN2hQeDN4VzNQZWVCZjZjYzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNGI3ZjMtNDBjZS00MmVkLWE5M2ItNWU4ZGVkYWM5Y2I3
LzEvT29UZjd6MVJCN2hQeDN4VzNQZWVCZjZjYzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz1OUxmEB
jfmYjXt3dFk2quhX6Qbyx//FnX7PF65XwaE8tZmIKdlDDwDyZcWmzRrWTNRv4sLi
phGKgJevZfoBX+IqjGoT3PcATjVukwsyRjez7NLTqNtgqDtRwisfcYUkDpJa/0BY
TOfBJHjFV5jx2AXH5fZHMPt68aMx1aiWImxjwogqr3o9SeL0MuYtzBBbsmL3gQqr
lVGhtiIwhEivUiLOzxOVxCirNbkaDKp8C671l9QkQ+jpdx8GWFXwDBhpkJwDbu3i
C6TAZp6om9TOR6Dt3TMzQnOdO4qE3mz1inDWJ91bHK4kMNBaVZKn4sAmy0ODk2e0
jQ9JCY4zuk2ASQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:48 2026 by rpki-client