
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
File: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft (raw, json)
Hash identifier: z+Bh4ORSFiW6fb+OZAzxkgVCpAwjYh9do/RRM8zcUUI=
Subject key identifier: 8D:08:E1:62:76:FA:E7:9A:F6:AD:00:13:09:60:3B:D3:92:F5:8B:E6
Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
Certificate issuer: /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Certificate serial: 01A03971018025D60C442C25FE6F36A4DF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
Manifest number: 0245
Signing time: Tue 25 Aug 2026 15:01:42 +0000
Manifest this update: Tue 25 Aug 2026 15:01:42 +0000
Manifest next update: Wed 26 Aug 2026 15:01:42 +0000
Files and hashes: 1: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (hash: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g=)
2: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl (hash: VBAfKYzniD7DoBJ+xepwuYb/+AYM+bMLG3rBi30OpCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:71:01:80:25:d6:0c:44:2c:25:fe:6f:36:a4:df:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Validity
Not Before: Aug 25 15:01:42 2026 GMT
Not After : Aug 26 15:01:42 2026 GMT
Subject: CN=8d08e16276fae79af6ad001309603bd392f58be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:c7:90:6a:66:ad:70:3a:0d:93:15:a9:c8:
33:69:3e:a4:5b:bc:e7:99:fe:d3:af:2c:88:b9:1c:
2c:b3:65:d1:97:ba:55:3c:6f:17:45:bb:98:13:ab:
fe:aa:b3:41:e2:e0:21:23:a2:3b:0a:12:f9:c0:1a:
85:b8:e3:4a:b5:cb:e3:82:ca:aa:a8:c4:c0:9b:65:
06:5b:93:d2:ba:01:7c:b5:05:e2:a5:20:54:89:93:
1c:5f:ac:0c:05:28:bc:35:1c:04:e2:ac:c3:4e:79:
ee:14:0e:d0:57:de:d3:2d:c5:78:99:c1:37:ea:b0:
75:42:90:15:c2:df:cb:bd:28:1a:a2:c7:07:39:76:
71:5d:c5:d9:70:b5:6a:37:0a:93:19:c6:e0:81:21:
c6:3c:db:b7:ad:7b:a8:d8:a0:ab:dd:58:ab:14:12:
4b:31:2d:f6:31:4e:9c:cc:6f:94:27:42:b3:4e:e0:
b3:77:9d:67:c6:7a:7f:2a:70:a1:e6:96:77:3e:3b:
15:50:68:5c:fc:fd:a0:94:18:c6:e9:20:82:cc:63:
e4:e6:21:95:02:f0:0e:53:10:a6:90:e5:b2:55:bd:
61:b5:c4:2d:74:0c:4e:64:00:8d:b9:68:d1:7a:9c:
e8:72:28:54:4e:99:69:cf:1e:5d:53:56:7a:1f:67:
a9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:08:E1:62:76:FA:E7:9A:F6:AD:00:13:09:60:3B:D3:92:F5:8B:E6
X509v3 Authority Key Identifier:
keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4e:9f:71:08:4f:a6:fa:a8:78:6d:17:3a:3d:43:66:a1:f1:
ba:7f:50:a6:8d:43:67:50:53:f3:e7:45:04:cd:f6:68:59:99:
ad:ce:03:b2:fc:53:62:60:e1:a7:09:2f:cd:de:33:e3:4f:6f:
7a:16:c2:ce:e8:92:d5:ff:2a:b7:35:8d:39:46:af:67:e8:4f:
1b:ea:f5:1f:e2:7f:48:7f:95:01:f7:02:44:d5:9d:9c:e6:d6:
c6:88:53:bb:07:bb:dd:1a:bc:5b:81:27:71:06:be:56:08:88:
f0:fd:58:f8:b2:0a:d1:fb:18:10:42:6c:7a:16:0d:b9:89:8d:
ab:43:ae:a3:cd:20:00:ac:9e:03:e6:fc:71:2a:14:28:62:7c:
f5:d6:f9:0c:b8:d7:8b:45:53:26:68:da:ba:91:b7:37:b0:01:
b7:3c:27:fe:b9:da:07:9e:08:25:0d:47:cb:38:bb:80:37:b5:
67:0f:64:ec:23:63:2c:15:9e:ac:7d:40:04:ad:91:6a:1a:54:
27:f4:9f:80:2d:bc:dc:20:39:0e:d5:6e:c9:67:74:e8:ee:38:
6f:47:9e:6d:87:44:5b:7e:c3:73:61:51:04:58:fc:65:ec:b1:
cf:39:f5:90:7a:c0:e0:be:39:fc:a7:6c:40:47:62:54:d5:20:
1a:8b:9a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA5cQGAJdYMRCwl/m82pN8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZWY2MGQ5ZmE2YWEwYWMwM2JhMTY3ZGIwMWZjMTgyYjU4
NTYzZGEwHhcNMjYwODI1MTUwMTQyWhcNMjYwODI2MTUwMTQyWjAzMTEwLwYDVQQD
Eyg4ZDA4ZTE2Mjc2ZmFlNzlhZjZhZDAwMTMwOTYwM2JkMzkyZjU4YmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3nHkGpmrXA6DZMVqcgzaT6kW7zn
mf7TryyIuRwss2XRl7pVPG8XRbuYE6v+qrNB4uAhI6I7ChL5wBqFuONKtcvjgsqq
qMTAm2UGW5PSugF8tQXipSBUiZMcX6wMBSi8NRwE4qzDTnnuFA7QV97TLcV4mcE3
6rB1QpAVwt/LvSgaoscHOXZxXcXZcLVqNwqTGcbggSHGPNu3rXuo2KCr3VirFBJL
MS32MU6czG+UJ0KzTuCzd51nxnp/KnCh5pZ3PjsVUGhc/P2glBjG6SCCzGPk5iGV
AvAOUxCmkOWyVb1htcQtdAxOZACNuWjRepzocihUTplpzx5dU1Z6H2epRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0I4WJ2+uea9q0AEwlgO9OS9YvmMB8GA1UdIwQY
MBaAFPzvYNn6aqCsA7oWfbAfwYK1hWPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kOGY5YTEtMGE4OS00ZGRlLWEzMWEt
MGY0NzViZjE0NjAzLzEvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kOGY5YTEtMGE4OS00ZGRlLWEzMWEtMGY0NzViZjE0NjAz
LzEvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ06fcQhP
pvqoeG0XOj1DZqHxun9Qpo1DZ1BT8+dFBM32aFmZrc4DsvxTYmDhpwkvzd4z409v
ehbCzuiS1f8qtzWNOUavZ+hPG+r1H+J/SH+VAfcCRNWdnObWxohTuwe73Rq8W4En
cQa+VgiI8P1Y+LIK0fsYEEJsehYNuYmNq0Ouo80gAKyeA+b8cSoUKGJ89db5DLjX
i0VTJmjaupG3N7ABtzwn/rnaB54IJQ1Hyzi7gDe1Zw9k7CNjLBWerH1ABK2RahpU
J/SfgC283CA5DtVuyWd06O44b0eebYdEW37Dc2FRBFj8Zeyxzzn1kHrA4L45/Kds
QEdiVNUgGouaqw==
-----END CERTIFICATE-----
Generated at Wed Aug 26 00:39:35 2026 by rpki-client