Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
File: o2n7GRvuUc3HQUppYxl_hrvzE6s.mft (raw, json)
Hash identifier: lDjPUulsdzTzdHkNSffAOeTgSg+CK+ZPvgypL/kOnEU=
Subject key identifier: DF:33:41:1F:07:AC:EF:09:D2:A0:D9:06:51:31:92:DB:FA:04:80:B9
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial: 01A041CF0C3D30D451C7AFF5E14B45312949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
Manifest number: 1483
Signing time: Thu 27 Aug 2026 06:01:23 +0000
Manifest this update: Thu 27 Aug 2026 06:01:23 +0000
Manifest next update: Fri 28 Aug 2026 06:01:23 +0000
Files and hashes: 1: o2n7GRvuUc3HQUppYxl_hrvzE6s.crl (hash: FUBSaQkux2L9QdCdnLHBQbNwPm0QFw9uChbKQMwExRg=)
2: u-PjOq1WjK6PsqFBvXy59id7R_I.roa (hash: Pz8fOepb3H13pqdKO3L1FSkff2yUOqZGUk6QeB6m10U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:cf:0c:3d:30:d4:51:c7:af:f5:e1:4b:45:31:29:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Validity
Not Before: Aug 27 06:01:23 2026 GMT
Not After : Aug 28 06:01:23 2026 GMT
Subject: CN=df33411f07acef09d2a0d906513192dbfa0480b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:7d:f0:6b:0e:a3:e8:d6:d0:d8:01:78:22:
3e:49:11:c2:3b:9b:67:86:78:87:3d:e6:fa:ac:e4:
38:f6:ee:96:dd:01:e6:fa:dd:ca:65:f7:58:b8:43:
34:33:5a:48:36:09:ee:bc:c1:9e:0b:3d:67:0a:50:
04:62:61:91:ad:cf:ff:ef:ea:b1:dc:b8:4a:67:44:
93:f0:e6:7b:61:38:be:6e:76:27:fd:25:1e:b2:84:
b3:56:66:64:00:83:8e:76:5c:40:33:5e:50:ea:8c:
74:e2:e4:14:ef:e4:51:8a:a2:ef:13:22:83:ef:b7:
0d:81:05:06:96:17:29:92:20:cc:f7:64:a1:26:6d:
a7:3b:81:06:52:fe:44:e9:79:db:ca:20:1b:03:f7:
a2:d2:7d:98:55:6e:e3:29:26:00:f6:c2:1f:bf:63:
08:82:5f:dc:d9:5d:29:b9:0e:8f:16:65:6f:c5:2c:
42:d1:4b:b6:0d:3b:4b:f1:79:41:17:31:b5:61:7c:
2d:5f:8f:9f:92:ee:9c:9e:c8:60:22:2d:ae:e9:c8:
f8:65:eb:a4:ba:8c:03:71:f3:6b:6a:fc:ff:e2:66:
9b:59:c4:80:ae:81:11:65:9a:31:11:d0:fb:b0:23:
7a:26:6c:d3:63:ba:44:8b:56:72:df:06:05:19:2d:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:33:41:1F:07:AC:EF:09:D2:A0:D9:06:51:31:92:DB:FA:04:80:B9
X509v3 Authority Key Identifier:
keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:9e:5a:03:e5:18:ef:fd:13:94:48:8f:b9:8f:98:3d:18:00:
88:98:6f:17:b0:27:9c:ae:40:51:73:38:fa:1d:35:7b:18:a1:
25:82:1c:15:a9:7d:df:5c:de:27:e6:8b:a7:28:bd:64:c4:41:
36:22:9e:6b:1d:0f:0a:89:f0:c0:a0:5f:24:27:5f:f0:71:43:
47:3d:1f:e8:c2:bd:5c:f1:77:8f:3e:cc:02:11:78:bd:07:5c:
29:ca:ba:af:ac:18:8f:d2:0a:73:8a:a5:92:70:67:ef:ba:1b:
0a:69:57:0a:00:8c:b2:9f:70:96:bb:65:f6:ed:05:64:74:b4:
99:04:12:f4:18:d4:1b:fd:85:00:ac:8d:3c:b2:0b:4d:2a:f1:
43:e6:24:98:5b:60:3d:2b:b8:d9:04:7a:da:00:94:61:dc:f1:
39:1c:5a:70:a2:9f:96:81:65:b1:d0:00:28:5a:32:5d:19:7b:
ae:fa:7a:3e:3d:57:40:8f:4d:02:5d:e4:f7:fb:dc:35:81:eb:
97:10:18:d5:e3:21:a8:85:51:66:bf:c9:ca:db:28:7d:16:a5:
0b:41:09:78:67:7f:29:dc:c6:e3:19:02:6b:23:96:6c:dc:cb:
09:c2:61:71:e1:03:46:99:b4:aa:b1:72:a5:52:68:c0:28:5d:
cb:83:55:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBzww9MNRRx6/14UtFMSlJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjlmYjE5MWJlZTUxY2RjNzQxNGE2OTYzMTk3Zjg2YmJm
MzEzYWIwHhcNMjYwODI3MDYwMTIzWhcNMjYwODI4MDYwMTIzWjAzMTEwLwYDVQQD
EyhkZjMzNDExZjA3YWNlZjA5ZDJhMGQ5MDY1MTMxOTJkYmZhMDQ4MGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C598GsOo+jW0NgBeCI+SRHCO5tn
hniHPeb6rOQ49u6W3QHm+t3KZfdYuEM0M1pINgnuvMGeCz1nClAEYmGRrc//7+qx
3LhKZ0ST8OZ7YTi+bnYn/SUesoSzVmZkAIOOdlxAM15Q6ox04uQU7+RRiqLvEyKD
77cNgQUGlhcpkiDM92ShJm2nO4EGUv5E6XnbyiAbA/ei0n2YVW7jKSYA9sIfv2MI
gl/c2V0puQ6PFmVvxSxC0Uu2DTtL8XlBFzG1YXwtX4+fku6cnshgIi2u6cj4Zeuk
uowDcfNravz/4mabWcSAroERZZoxEdD7sCN6JmzTY7pEi1Zy3wYFGS3I/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8zQR8HrO8J0qDZBlExktv6BIC5MB8GA1UdIwQY
MBaAFKNp+xkb7lHNx0FKaWMZf4a78xOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJuN0dSdnVVYzNIUVVwcFl4bF9ocnZ6RTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yMGRhNjAtYzcxOS00YmUxLThlNGYt
ZTE4MDUyZjM4MWJiLzEvbzJuN0dSdnVVYzNIUVVwcFl4bF9ocnZ6RTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yMGRhNjAtYzcxOS00YmUxLThlNGYtZTE4MDUyZjM4MWJi
LzEvbzJuN0dSdnVVYzNIUVVwcFl4bF9ocnZ6RTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx55aA+UY
7/0TlEiPuY+YPRgAiJhvF7AnnK5AUXM4+h01exihJYIcFal931zeJ+aLpyi9ZMRB
NiKeax0PConwwKBfJCdf8HFDRz0f6MK9XPF3jz7MAhF4vQdcKcq6r6wYj9IKc4ql
knBn77obCmlXCgCMsp9wlrtl9u0FZHS0mQQS9BjUG/2FAKyNPLILTSrxQ+YkmFtg
PSu42QR62gCUYdzxORxacKKfloFlsdAAKFoyXRl7rvp6Pj1XQI9NAl3k9/vcNYHr
lxAY1eMhqIVRZr/JytsofRalC0EJeGd/KdzG4xkCayOWbNzLCcJhceEDRpm0qrFy
pVJowChdy4NVoA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 11:28:38 2026 by rpki-client