Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: tVWgGrKi3JqRlHkDdWxA0N+HzuIn9aISCMt0i3l1qZI=
Subject key identifier: A7:66:85:38:A0:77:31:F2:BE:B9:26:97:5A:85:1A:44:3C:C0:1F:96
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 01A11898D22598AC917326FA7F43431C30F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: 02B6
Signing time: Wed 07 Oct 2026 23:00:30 +0000
Manifest this update: Wed 07 Oct 2026 23:00:30 +0000
Manifest next update: Thu 08 Oct 2026 23:00:30 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: KBjFEH+vE81QpUuEapvHFiHzyCkkh4o2v5NEIn/uSaQ=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:98:d2:25:98:ac:91:73:26:fa:7f:43:43:1c:30:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: Oct 7 23:00:30 2026 GMT
Not After : Oct 8 23:00:30 2026 GMT
Subject: CN=a7668538a07731f2beb926975a851a443cc01f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c5:a4:05:92:14:e7:90:57:87:1b:2a:04:b0:
9b:f2:ac:5f:a3:06:f2:dd:6f:37:e8:b7:4f:3d:7c:
e3:d5:d9:a4:ba:40:27:17:72:02:7b:7a:cc:73:40:
54:5a:ac:7e:62:e8:27:01:2b:ea:a2:3b:a9:37:4e:
98:c8:38:1d:cc:db:25:39:47:e1:d2:37:5b:87:40:
0f:d2:31:ba:01:97:2f:24:78:5c:72:60:83:86:4d:
ca:28:71:08:46:a3:2f:a0:3e:33:45:49:24:c6:77:
8c:64:a8:01:8f:01:d6:d4:23:83:af:4d:61:36:2a:
e4:20:78:9e:d6:50:e9:ed:8b:90:05:35:9a:2d:82:
3d:d6:59:d5:24:5b:22:3a:5f:01:5b:4c:bd:f5:5b:
1b:07:6c:0b:a5:8e:1a:42:1e:cf:fe:b9:0c:ea:16:
91:d5:ca:06:c8:71:5e:e4:0c:8f:5b:f5:3e:7c:a2:
06:3b:92:e3:1d:b8:3a:0e:f3:34:dc:cc:45:63:23:
98:ec:01:1c:e8:58:f2:0f:55:19:3f:9f:15:0c:fd:
af:a4:de:52:af:53:af:24:da:30:a7:22:02:89:e3:
08:b2:4c:b9:5c:3e:62:b0:b5:d9:cc:70:b4:8c:66:
9e:4a:bf:95:24:52:36:45:43:32:a6:c3:69:2d:d0:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:66:85:38:A0:77:31:F2:BE:B9:26:97:5A:85:1A:44:3C:C0:1F:96
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:37:95:6c:e9:5f:58:1d:fb:2d:9a:80:f3:d1:dd:cb:01:8c:
39:c3:f7:27:9b:9c:2d:2c:49:f7:4a:58:85:f0:4b:e7:bc:50:
f9:46:30:64:ba:2e:19:bb:71:b5:2c:ff:43:fa:d0:90:96:19:
63:18:12:2c:be:4b:f1:42:f1:c2:6d:57:9b:5d:95:ba:59:ad:
a8:6c:b6:76:cd:36:b9:84:93:4b:7e:e3:aa:d8:0a:ff:df:5e:
16:2d:f0:cb:c9:71:7a:1a:3d:8a:92:03:a1:89:3a:e3:df:49:
54:1b:f4:c9:13:2c:56:bb:80:c6:67:a2:08:73:09:b8:8d:dd:
46:f6:65:67:2b:67:0a:d1:22:01:4f:5e:4a:8b:c0:f5:b5:34:
0b:aa:78:1f:dd:c5:30:43:2b:c1:8f:b8:ee:f8:3c:bb:f8:f8:
55:5c:59:fc:da:ba:1d:e8:b7:67:ea:5a:fb:b5:e9:28:8c:30:
51:77:ad:b4:00:d1:c1:1d:cb:01:22:39:de:08:a1:e4:0c:f8:
19:8a:da:df:82:f3:c6:1e:e0:56:54:c0:43:7a:23:08:0f:5d:
ae:7f:91:8a:70:9f:26:c7:d2:91:13:a3:29:15:af:e9:1d:d3:
72:47:07:bd:07:b5:70:8f:bf:f1:93:7a:15:d2:01:ee:ba:f1:
05:48:c2:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEYmNIlmKyRcyb6f0NDHDD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOGUwNzk0MGRjZDYzNDRlMWE4MTYyMGJkNzhhMjY4YmU5
YzM3OTgwHhcNMjYxMDA3MjMwMDMwWhcNMjYxMDA4MjMwMDMwWjAzMTEwLwYDVQQD
EyhhNzY2ODUzOGEwNzczMWYyYmViOTI2OTc1YTg1MWE0NDNjYzAxZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsWkBZIU55BXhxsqBLCb8qxfowby
3W836LdPPXzj1dmkukAnF3ICe3rMc0BUWqx+YugnASvqojupN06YyDgdzNslOUfh
0jdbh0AP0jG6AZcvJHhccmCDhk3KKHEIRqMvoD4zRUkkxneMZKgBjwHW1CODr01h
NirkIHie1lDp7YuQBTWaLYI91lnVJFsiOl8BW0y99VsbB2wLpY4aQh7P/rkM6haR
1coGyHFe5AyPW/U+fKIGO5LjHbg6DvM03MxFYyOY7AEc6FjyD1UZP58VDP2vpN5S
r1OvJNowpyICieMIsky5XD5isLXZzHC0jGaeSr+VJFI2RUMypsNpLdB8PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdmhTigdzHyvrkml1qFGkQ8wB+WMB8GA1UdIwQY
MBaAFDqOB5QNzWNE4agWIL14omi+nDeYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jOGUyMGEtNTg5Zi00NGZjLTk2NGEt
NWE2OTQ2MDc0MzVlLzEvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jOGUyMGEtNTg5Zi00NGZjLTk2NGEtNWE2OTQ2MDc0MzVl
LzEvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzeVbOlf
WB37LZqA89HdywGMOcP3J5ucLSxJ90pYhfBL57xQ+UYwZLouGbtxtSz/Q/rQkJYZ
YxgSLL5L8ULxwm1Xm12VulmtqGy2ds02uYSTS37jqtgK/99eFi3wy8lxeho9ipID
oYk6499JVBv0yRMsVruAxmeiCHMJuI3dRvZlZytnCtEiAU9eSovA9bU0C6p4H93F
MEMrwY+47vg8u/j4VVxZ/Nq6Hei3Z+pa+7XpKIwwUXettADRwR3LASI53gih5Az4
GYra34Lzxh7gVlTAQ3ojCA9drn+RinCfJsfSkROjKRWv6R3TckcHvQe1cI+/8ZN6
FdIB7rrxBUjCAA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:56:25 2026 by rpki-client