Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: yQQsOv7qIjN4lrlBCl0R0bnjtwroyC04xtJZtue1zso=
Subject key identifier: 62:D9:55:2D:2B:64:3E:FA:B4:7B:F5:9C:5B:4D:26:F2:49:FA:D8:D3
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 019DD0BE9D2DBFFE62910316B5D2B0E49225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 02CC
Signing time: Mon 27 Apr 2026 21:00:46 +0000
Manifest this update: Mon 27 Apr 2026 21:00:46 +0000
Manifest next update: Tue 28 Apr 2026 21:00:46 +0000
Files and hashes: 1: IZRU9aitBtasi5s8LfvUyXF6gJI.roa (hash: A+EvTFUEfhqDufK4w5HaH/h/6GcXexGhKX2pAinc5hA=)
2: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: D6sOqF5wzvs48W0TA7xy9+xg9Ud8lv9GqdfFdzkjJc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:9d:2d:bf:fe:62:91:03:16:b5:d2:b0:e4:92:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Apr 27 21:00:46 2026 GMT
Not After : Apr 28 21:00:46 2026 GMT
Subject: CN=62d9552d2b643efab47bf59c5b4d26f249fad8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:6f:02:c6:45:78:77:76:5a:c0:fc:b2:db:
3a:7e:d9:ba:bf:1d:dc:c8:46:d5:fb:0d:97:0f:31:
58:77:79:3b:72:3c:69:b4:ec:8c:6e:c4:62:98:5f:
29:65:10:a2:22:38:aa:94:aa:1e:eb:5b:a6:f4:db:
fc:33:47:a9:0d:ec:aa:d5:ff:44:b7:b8:b6:dd:7d:
c6:78:84:f7:93:f8:66:ea:d3:44:05:5d:6d:6b:59:
39:ba:a7:a8:c4:7c:1a:4d:c2:81:4f:cb:91:de:e1:
bd:28:e1:f2:04:04:14:83:e2:50:52:0d:d7:ea:9d:
ad:b5:6c:61:52:5c:e7:f6:00:56:a2:f1:24:39:cb:
2b:de:8e:2e:b9:67:04:ab:1f:50:91:1e:47:be:fb:
a7:81:48:e7:69:3c:64:d6:95:33:6c:b7:2e:bd:33:
31:d5:7f:06:31:bf:4c:28:cf:44:6b:61:09:6e:f8:
c4:da:77:5c:d1:ea:84:58:09:ab:a9:d3:f6:54:18:
3f:ee:73:88:d9:82:8e:a5:5f:92:f3:c4:92:c1:03:
be:af:b7:1f:23:1a:33:7f:20:41:3e:b2:d0:6e:da:
89:d7:47:0e:45:08:0a:15:e0:5d:71:28:6e:65:83:
3f:aa:97:f3:cb:e0:7d:e0:e0:0d:b9:72:19:fb:33:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:55:2D:2B:64:3E:FA:B4:7B:F5:9C:5B:4D:26:F2:49:FA:D8:D3
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2f:c6:ec:0c:96:d0:db:37:b7:f2:a6:41:4a:7b:ef:15:74:
ef:f8:82:5b:af:80:b8:1f:fa:75:24:b6:c8:c9:63:e2:47:74:
9b:8c:9a:ea:22:8b:94:ac:1b:30:21:8b:55:a3:a4:1a:ba:36:
c0:18:65:d5:0b:94:06:d2:a6:1a:bc:2e:08:94:66:81:5f:2b:
f0:89:9e:54:41:de:49:dd:aa:69:98:14:f6:df:4f:20:41:ea:
04:03:ad:45:27:24:9d:13:3e:6a:ca:58:db:cb:e0:6e:0b:45:
be:67:a2:8a:24:77:fd:e9:ca:40:36:8b:2f:f8:27:9b:3d:82:
96:3a:7f:ba:64:a5:54:9b:92:ba:36:a2:81:29:1f:88:55:6f:
a5:2a:1e:ca:ea:1d:6f:46:ad:60:5a:76:4e:79:06:a4:2b:dd:
cf:20:c9:c1:c8:2c:b1:f8:65:80:ab:f7:74:4a:f3:02:7b:0f:
f9:44:f0:87:c2:6d:65:ab:e4:25:6f:dd:3d:6b:a7:df:7a:af:
d3:9d:c1:e0:9c:01:37:fb:b2:e2:6b:8d:a7:cc:9e:74:9a:a7:
1b:1b:66:b0:11:c2:75:c4:1b:a9:45:41:0c:02:39:6f:a5:fc:
a1:0d:a5:ea:9b:de:08:ff:9d:9f:3d:0f:9b:6e:24:d6:b3:f2:
f8:58:7c:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Qvp0tv/5ikQMWtdKw5JIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWI2NzBlODE0NmVmNTI3NGFlNDVlYjMwZDI5ZTk3MDA2
NWJhMmMwHhcNMjYwNDI3MjEwMDQ2WhcNMjYwNDI4MjEwMDQ2WjAzMTEwLwYDVQQD
Eyg2MmQ5NTUyZDJiNjQzZWZhYjQ3YmY1OWM1YjRkMjZmMjQ5ZmFkOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4RvAsZFeHd2WsD8sts6ftm6vx3c
yEbV+w2XDzFYd3k7cjxptOyMbsRimF8pZRCiIjiqlKoe61um9Nv8M0epDeyq1f9E
t7i23X3GeIT3k/hm6tNEBV1ta1k5uqeoxHwaTcKBT8uR3uG9KOHyBAQUg+JQUg3X
6p2ttWxhUlzn9gBWovEkOcsr3o4uuWcEqx9QkR5HvvungUjnaTxk1pUzbLcuvTMx
1X8GMb9MKM9Ea2EJbvjE2ndc0eqEWAmrqdP2VBg/7nOI2YKOpV+S88SSwQO+r7cf
IxozfyBBPrLQbtqJ10cORQgKFeBdcShuZYM/qpfzy+B94OANuXIZ+zPP9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLZVS0rZD76tHv1nFtNJvJJ+tjTMB8GA1UdIwQY
MBaAFKOrZw6BRu9SdK5F6zDSnpcAZbosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMDE1NzYtYTQxMy00NzEyLTlmMzIt
NjBkNWJlMWI3ZGE5LzEvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jMDE1NzYtYTQxMy00NzEyLTlmMzItNjBkNWJlMWI3ZGE5
LzEvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANi/G7AyW
0Ns3t/KmQUp77xV07/iCW6+AuB/6dSS2yMlj4kd0m4ya6iKLlKwbMCGLVaOkGro2
wBhl1QuUBtKmGrwuCJRmgV8r8ImeVEHeSd2qaZgU9t9PIEHqBAOtRScknRM+aspY
28vgbgtFvmeiiiR3/enKQDaLL/gnmz2Cljp/umSlVJuSujaigSkfiFVvpSoeyuod
b0atYFp2TnkGpCvdzyDJwcgssfhlgKv3dErzAnsP+UTwh8JtZavkJW/dPWun33qv
053B4JwBN/uy4muNp8yedJqnGxtmsBHCdcQbqUVBDAI5b6X8oQ2l6pveCP+dnz0P
m24k1rPy+Fh8FA==
-----END CERTIFICATE-----
Generated at Tue Apr 28 04:50:05 2026 by rpki-client