Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier: hqI+9oaaR74ql3pbEL0J7kOYy+5CEfjfXGJjCWYgxxA=
Subject key identifier: 0B:DC:86:4D:E6:3E:67:C4:FE:0F:ED:CE:58:C6:00:71:5D:86:D6:D3
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial: 01A17C5FAD074B8CCBD32EFBDDD69B6F129C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number: 0EC4
Signing time: Tue 27 Oct 2026 08:00:07 +0000
Manifest this update: Tue 27 Oct 2026 08:00:07 +0000
Manifest next update: Wed 28 Oct 2026 08:00:07 +0000
Files and hashes: 1: 8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa (hash: lpIuAWveKCKeQMUzXLJXzixQ82Be/vxjOdAft2Y84BY=)
2: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: lYzuO/K2H0ZbP0qXXMCl6TQHjOLa642zTYZlDKUbWbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:ad:07:4b:8c:cb:d3:2e:fb:dd:d6:9b:6f:12:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Validity
Not Before: Oct 27 08:00:07 2026 GMT
Not After : Oct 28 08:00:07 2026 GMT
Subject: CN=0bdc864de63e67c4fe0fedce58c600715d86d6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:f8:dd:df:7c:f7:7e:79:ef:a4:eb:1f:4f:
b0:20:08:ca:27:ae:f1:fb:e4:c2:76:0b:8c:26:fe:
b6:8b:76:c5:66:cc:81:e5:b5:0e:34:40:0b:9e:71:
9b:eb:92:2a:b1:5b:4a:f3:bf:47:4d:1a:c7:f0:55:
9c:dc:5f:22:fe:ae:bf:e1:29:76:32:0f:b8:34:e4:
bd:5f:8e:78:33:63:ff:45:ca:5b:10:ce:8a:0e:bd:
f2:99:3e:87:b1:86:8a:4c:ed:d0:a0:df:48:94:35:
08:9f:4e:a9:7b:5d:f2:a7:a9:d2:da:29:ac:11:e6:
9e:ed:eb:db:65:f5:5c:b3:d1:17:39:ea:34:de:f4:
44:4d:12:a1:7d:cd:97:92:78:73:77:62:ea:7b:92:
2b:1b:dd:8b:df:c6:32:a9:93:bf:e3:d3:89:6a:20:
28:89:fe:61:70:d4:e6:74:7b:5b:e9:48:f7:cc:85:
3f:90:1d:7e:86:5b:74:06:50:f8:94:f6:71:0d:c2:
2d:58:32:88:ef:77:a1:5c:9a:5a:10:b6:ac:f7:a0:
b6:92:4a:4f:2e:ae:a6:d9:ab:cd:e7:1d:a3:0e:17:
76:d6:20:82:6f:5b:ec:f5:fc:d7:a5:8c:e7:66:10:
c4:0d:c2:35:3a:5b:18:bd:00:e0:33:5d:43:bf:39:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DC:86:4D:E6:3E:67:C4:FE:0F:ED:CE:58:C6:00:71:5D:86:D6:D3
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:dc:cf:61:b3:1f:36:a0:1c:1f:6d:f4:61:7f:74:21:e4:47:
12:09:47:12:aa:03:9e:f4:83:c7:03:f8:49:de:e0:4b:e2:08:
a4:90:ab:81:44:51:d2:a0:2f:53:c0:33:32:db:43:f0:ac:1b:
59:8a:03:d0:55:f5:76:8b:fb:40:ce:f6:27:a3:76:ec:c3:3c:
82:ed:07:ad:04:d8:9b:0b:d9:4a:cb:1b:a1:d4:cf:22:25:fe:
2e:38:c4:c9:93:22:f8:fc:2b:b9:a1:81:bc:7b:61:7b:d4:77:
99:f2:73:fa:6b:d3:6a:fd:f0:f3:50:c7:73:a4:5e:eb:b6:96:
5c:9a:98:15:e8:3b:72:6d:9d:31:c5:6d:36:4c:45:27:39:a7:
c8:c4:1c:8e:8f:f2:7f:fa:e5:61:c7:e6:eb:1a:c4:d7:de:85:
57:62:57:69:db:3c:00:61:eb:d2:7f:f9:8f:ce:be:c5:ab:f4:
35:b5:52:1c:3a:58:f1:53:0a:da:b8:71:9b:0e:16:15:90:ca:
d3:a3:d4:31:ac:27:a2:bb:5b:9d:37:c6:e8:ae:1a:22:70:57:
e7:4a:d1:a0:ac:f7:e9:c6:6b:6d:1b:69:1d:b6:9a:00:ac:7f:
63:f3:0a:38:7c:15:b0:86:86:97:f3:74:8f:79:8f:ae:22:9b:
cf:22:a1:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8X60HS4zL0y773dabbxKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmZiNjA1ZGNlMzA2MGRmYjY2ZGNjY2E4OGViN2RhMGFj
NzRhZjEwHhcNMjYxMDI3MDgwMDA3WhcNMjYxMDI4MDgwMDA3WjAzMTEwLwYDVQQD
EygwYmRjODY0ZGU2M2U2N2M0ZmUwZmVkY2U1OGM2MDA3MTVkODZkNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zb43d98935576TrH0+wIAjKJ67x
++TCdguMJv62i3bFZsyB5bUONEALnnGb65IqsVtK879HTRrH8FWc3F8i/q6/4Sl2
Mg+4NOS9X454M2P/RcpbEM6KDr3ymT6HsYaKTO3QoN9IlDUIn06pe13yp6nS2ims
Eeae7evbZfVcs9EXOeo03vRETRKhfc2Xknhzd2Lqe5IrG92L38YyqZO/49OJaiAo
if5hcNTmdHtb6Uj3zIU/kB1+hlt0BlD4lPZxDcItWDKI73ehXJpaELas96C2kkpP
Lq6m2avN5x2jDhd21iCCb1vs9fzXpYznZhDEDcI1OlsYvQDgM11DvznaoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvchk3mPmfE/g/tzljGAHFdhtbTMB8GA1UdIwQY
MBaAFDv/tgXc4wYN+2bczKiOt9oKx0rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2Ut
NmIxZDA3MTQ1NTRhLzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2UtNmIxZDA3MTQ1NTRh
LzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActzPYbMf
NqAcH230YX90IeRHEglHEqoDnvSDxwP4Sd7gS+IIpJCrgURR0qAvU8AzMttD8Kwb
WYoD0FX1dov7QM72J6N27MM8gu0HrQTYmwvZSssbodTPIiX+LjjEyZMi+PwruaGB
vHthe9R3mfJz+mvTav3w81DHc6Re67aWXJqYFeg7cm2dMcVtNkxFJzmnyMQcjo/y
f/rlYcfm6xrE196FV2JXads8AGHr0n/5j86+xav0NbVSHDpY8VMK2rhxmw4WFZDK
06PUMawnortbnTfG6K4aInBX50rRoKz36cZrbRtpHbaaAKx/Y/MKOHwVsIaGl/N0
j3mPriKbzyKhIA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 11:59:04 2026 by rpki-client