Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: A7e3NnEXu+R810mcor7y5gQF2hpzE16osp7bamCpVR8=
Subject key identifier: 9F:AA:C4:46:D1:E5:15:00:1C:93:DB:9C:9E:37:C6:3B:5A:B6:4F:A7
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 01A08CB18D701CE2433294588D692D76162B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 19:00:41 +0000
Manifest this update: Thu 10 Sep 2026 19:00:41 +0000
Manifest next update: Fri 11 Sep 2026 19:00:41 +0000
Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: J0tiSSKsi5CWNVW0pjcyBq0N+yttmyrwdG698zYQdnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:8d:70:1c:e2:43:32:94:58:8d:69:2d:76:16:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Sep 10 19:00:41 2026 GMT
Not After : Sep 11 19:00:41 2026 GMT
Subject: CN=9faac446d1e515001c93db9c9e37c63b5ab64fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:75:6f:2a:24:94:4a:5d:3e:61:f8:21:b6:
ed:82:85:85:f4:ff:44:ff:98:69:5f:9f:3b:88:e0:
08:4e:a2:ee:88:e4:15:a8:37:e4:f4:a7:cf:0d:e3:
37:3b:22:c8:c3:db:d3:d4:2a:f7:3f:3f:bb:87:a7:
3f:68:12:56:f3:fd:50:f4:df:a2:7a:ff:4d:8b:c2:
cd:fa:ce:9e:f7:ce:e2:36:cb:88:89:8a:d2:50:d5:
e9:42:af:d5:c7:64:9c:84:c0:fa:95:83:99:d5:61:
ec:2f:4d:46:75:e8:0e:e4:80:52:94:58:c9:44:4b:
2b:3a:44:34:20:6c:6d:49:2a:c5:f2:e2:e9:c2:82:
16:5b:10:c2:d7:72:93:c5:2d:25:57:2f:fe:c9:20:
61:22:3f:55:2c:1e:70:3a:db:70:1d:0b:df:57:d5:
c0:e3:62:8c:16:06:ab:03:03:b5:47:2b:e5:16:75:
b5:90:fe:9e:bf:75:71:f7:fe:f4:23:20:70:f5:9a:
21:74:92:58:7a:d1:ae:9c:90:bc:b9:da:59:b2:82:
3c:40:94:c0:84:dd:60:15:43:0e:6a:aa:20:4c:5c:
0d:99:0a:67:ce:e7:b3:32:88:d2:9c:6d:07:ec:48:
66:46:d6:d2:45:87:a7:f5:be:3c:22:a1:38:c2:37:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AA:C4:46:D1:E5:15:00:1C:93:DB:9C:9E:37:C6:3B:5A:B6:4F:A7
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8e:2c:3c:70:59:60:2b:5f:42:2d:17:ac:da:57:9a:42:a8:
c3:57:91:03:b5:d0:83:c8:ce:c7:e3:b7:7a:5b:1a:72:f6:50:
b2:1b:ef:fa:e2:1d:3b:b4:7f:e6:e2:d3:d9:96:9e:e1:df:bd:
02:6d:7b:f9:6c:b2:0a:68:de:39:f5:12:97:eb:f9:0e:ce:cb:
aa:42:e7:21:2a:b3:f1:00:f5:a5:f9:a1:ed:a2:ba:b9:24:72:
7e:1c:cc:a8:2a:cc:dd:90:19:08:67:8b:b9:1c:07:ab:0f:f9:
4d:b8:cd:e5:ad:89:9a:93:b6:92:0f:82:83:49:c4:40:fd:9a:
c3:5a:1c:94:a2:cd:7e:9a:c6:e8:6f:13:49:e4:04:38:f8:50:
76:fb:72:39:08:48:61:11:e8:a0:8f:30:6f:80:76:7f:1b:40:
2d:10:93:bc:bb:5f:eb:ec:93:05:74:f9:28:03:f0:7b:e0:4b:
40:78:53:1c:81:19:78:51:85:e2:e7:ae:69:99:30:29:f2:e4:
cb:ca:e1:f7:01:f7:62:e4:ce:3a:52:16:79:21:ab:e4:59:e6:
a5:2d:02:1f:33:86:d2:a8:05:40:ee:56:98:f1:de:ed:78:50:
9f:da:6b:09:cc:c5:a9:da:c2:5d:da:42:30:63:20:0d:e7:41:
da:ff:dd:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMsY1wHOJDMpRYjWktdhYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5
YjIzOGYwHhcNMjYwOTEwMTkwMDQxWhcNMjYwOTExMTkwMDQxWjAzMTEwLwYDVQQD
Eyg5ZmFhYzQ0NmQxZTUxNTAwMWM5M2RiOWM5ZTM3YzYzYjVhYjY0ZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P11byoklEpdPmH4IbbtgoWF9P9E
/5hpX587iOAITqLuiOQVqDfk9KfPDeM3OyLIw9vT1Cr3Pz+7h6c/aBJW8/1Q9N+i
ev9Ni8LN+s6e987iNsuIiYrSUNXpQq/Vx2SchMD6lYOZ1WHsL01GdegO5IBSlFjJ
REsrOkQ0IGxtSSrF8uLpwoIWWxDC13KTxS0lVy/+ySBhIj9VLB5wOttwHQvfV9XA
42KMFgarAwO1RyvlFnW1kP6ev3Vx9/70IyBw9ZohdJJYetGunJC8udpZsoI8QJTA
hN1gFUMOaqogTFwNmQpnzuezMojSnG0H7EhmRtbSRYen9b48IqE4wjfQLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+qxEbR5RUAHJPbnJ43xjtatk+nMB8GA1UdIwQY
MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt
MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl
LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnY4sPHBZ
YCtfQi0XrNpXmkKow1eRA7XQg8jOx+O3elsacvZQshvv+uIdO7R/5uLT2Zae4d+9
Am17+WyyCmjeOfUSl+v5Ds7LqkLnISqz8QD1pfmh7aK6uSRyfhzMqCrM3ZAZCGeL
uRwHqw/5TbjN5a2JmpO2kg+Cg0nEQP2aw1oclKLNfprG6G8TSeQEOPhQdvtyOQhI
YRHooI8wb4B2fxtALRCTvLtf6+yTBXT5KAPwe+BLQHhTHIEZeFGF4ueuaZkwKfLk
y8rh9wH3YuTOOlIWeSGr5FnmpS0CHzOG0qgFQO5WmPHe7XhQn9prCczFqdrCXdpC
MGMgDedB2v/dMQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 04:14:47 2026 by rpki-client