Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
File: O47zaZ48ewDP9VFOVME2EqO8CBA.mft (raw, json)
Hash identifier: VdzsAhJLt17bz8FUhuESa70hj1HbHhT1uMbwfBqsOfI=
Subject key identifier: 2A:9F:D9:C7:6E:23:80:DB:00:D2:C2:ED:6C:EA:28:29:A8:13:10:04
Authority key identifier: 3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
Certificate issuer: /CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Certificate serial: 01A0DD9821308D4C99F15EB797CC3368ADD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
Manifest number: 023A
Signing time: Sat 26 Sep 2026 12:02:09 +0000
Manifest this update: Sat 26 Sep 2026 12:02:09 +0000
Manifest next update: Sun 27 Sep 2026 12:02:09 +0000
Files and hashes: 1: O47zaZ48ewDP9VFOVME2EqO8CBA.crl (hash: TnzEZPy07LLQiOUasym9CxjUiETQmXU3uBjQ8MqeZgk=)
2: sLLadZHcLuLxJyRCEcg6ugP5rdc.roa (hash: z14c08hX3kPcGJfG3drJX75MFVvqokGJtQr08nJp+rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:21:30:8d:4c:99:f1:5e:b7:97:cc:33:68:ad:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Validity
Not Before: Sep 26 12:02:09 2026 GMT
Not After : Sep 27 12:02:09 2026 GMT
Subject: CN=2a9fd9c76e2380db00d2c2ed6cea2829a8131004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:9c:96:da:71:e6:84:06:3d:01:a9:e3:68:
a5:5b:26:31:84:cd:74:c1:1a:8f:b2:80:72:ef:10:
f2:11:b5:43:f5:76:f4:03:ef:71:ef:64:0d:1a:48:
3a:e8:ce:3c:0f:fe:a2:b7:a2:66:81:2e:c1:d9:5c:
aa:4b:eb:72:62:5f:3e:00:b4:aa:d1:0f:e3:73:6d:
6f:d9:82:d4:e7:8c:7a:41:2b:a5:b3:98:19:44:60:
97:64:51:56:37:73:d7:25:84:a2:30:48:13:f8:97:
85:a3:84:c8:6c:30:02:db:e2:8c:37:d9:98:cf:8c:
e8:a9:50:13:ec:55:a1:fc:f3:a3:26:ed:4c:61:1e:
92:d0:e3:a7:ea:03:d6:a1:e0:03:91:0b:d2:e4:ff:
ea:5b:20:20:a4:8e:0e:6c:38:8b:0a:a8:32:49:49:
df:e9:e3:83:0a:9b:d4:4b:b1:94:a6:87:e6:36:36:
93:8a:ff:24:02:fc:38:71:03:a8:c3:ed:c2:75:f2:
c0:1b:ba:27:dd:7a:67:16:dd:05:36:54:73:67:e9:
27:51:22:5d:8d:b7:4c:01:b3:3e:f3:9f:1e:2f:87:
20:e0:a3:f3:90:f0:cd:9b:c4:81:bc:44:aa:1a:c9:
55:08:13:b1:01:40:d1:d8:89:f4:2b:33:da:6d:31:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9F:D9:C7:6E:23:80:DB:00:D2:C2:ED:6C:EA:28:29:A8:13:10:04
X509v3 Authority Key Identifier:
keyid:3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a9:d4:2b:52:6a:0b:ea:97:22:43:c8:a4:11:30:36:22:46:
42:cf:11:4d:e1:aa:cd:76:8c:03:93:a6:3a:38:f5:22:87:40:
70:55:30:08:70:70:71:e9:e3:af:6a:88:72:ec:2a:f8:dc:16:
eb:3e:50:86:bf:68:d1:b3:f6:2c:cd:15:d2:4d:2f:6f:a5:92:
43:12:79:80:0d:41:4b:5a:42:7e:3d:9b:97:0f:38:69:75:a6:
b0:c2:ef:c1:cd:62:e1:38:26:65:b1:eb:27:cd:1b:e9:76:43:
c6:42:f8:4f:67:39:ea:f7:a6:27:09:79:d7:c2:8c:dc:8d:1f:
55:12:42:4b:08:68:7f:29:42:a4:b0:aa:9f:fe:35:b8:4f:02:
19:84:5d:e6:6f:97:2d:a3:9c:5f:a4:88:ce:43:fb:bf:c2:89:
b5:84:2b:19:27:37:b7:d7:3b:6a:39:84:ad:ce:a4:65:52:bb:
8b:6e:ac:3a:6f:d3:3b:ae:d2:50:bf:2b:26:ca:da:e2:b7:95:
ef:c1:e6:ff:09:b0:9f:dd:77:15:f4:83:93:00:b9:b2:1f:c9:
61:1b:04:73:5d:95:a5:69:70:8c:d7:87:95:40:2d:33:b2:55:
56:87:64:6c:b6:11:8e:f2:48:4f:1d:2b:4c:0c:ba:8c:11:cf:
e7:6c:b1:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdmCEwjUyZ8V63l8wzaK3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOGVmMzY5OWUzYzdiMDBjZmY1NTE0ZTU0YzEzNjEyYTNi
YzA4MTAwHhcNMjYwOTI2MTIwMjA5WhcNMjYwOTI3MTIwMjA5WjAzMTEwLwYDVQQD
EygyYTlmZDljNzZlMjM4MGRiMDBkMmMyZWQ2Y2VhMjgyOWE4MTMxMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviecltpx5oQGPQGp42ilWyYxhM10
wRqPsoBy7xDyEbVD9Xb0A+9x72QNGkg66M48D/6it6JmgS7B2VyqS+tyYl8+ALSq
0Q/jc21v2YLU54x6QSuls5gZRGCXZFFWN3PXJYSiMEgT+JeFo4TIbDAC2+KMN9mY
z4zoqVAT7FWh/POjJu1MYR6S0OOn6gPWoeADkQvS5P/qWyAgpI4ObDiLCqgySUnf
6eODCpvUS7GUpofmNjaTiv8kAvw4cQOow+3CdfLAG7on3XpnFt0FNlRzZ+knUSJd
jbdMAbM+858eL4cg4KPzkPDNm8SBvESqGslVCBOxAUDR2In0KzPabTEmRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqf2cduI4DbANLC7WzqKCmoExAEMB8GA1UdIwQY
MBaAFDuO82mePHsAz/VRTlTBNhKjvAgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzQ3emFaNDhld0RQOVZGT1ZNRTJFcU84Q0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83MTAyMzktMzE3Ny00NjNhLTg5ODUt
YjIxZGE2ZDAxMjhlLzEvTzQ3emFaNDhld0RQOVZGT1ZNRTJFcU84Q0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83MTAyMzktMzE3Ny00NjNhLTg5ODUtYjIxZGE2ZDAxMjhl
LzEvTzQ3emFaNDhld0RQOVZGT1ZNRTJFcU84Q0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwanUK1Jq
C+qXIkPIpBEwNiJGQs8RTeGqzXaMA5OmOjj1IodAcFUwCHBwcenjr2qIcuwq+NwW
6z5Qhr9o0bP2LM0V0k0vb6WSQxJ5gA1BS1pCfj2blw84aXWmsMLvwc1i4TgmZbHr
J80b6XZDxkL4T2c56vemJwl518KM3I0fVRJCSwhofylCpLCqn/41uE8CGYRd5m+X
LaOcX6SIzkP7v8KJtYQrGSc3t9c7ajmErc6kZVK7i26sOm/TO67SUL8rJsra4reV
78Hm/wmwn913FfSDkwC5sh/JYRsEc12VpWlwjNeHlUAtM7JVVodkbLYRjvJITx0r
TAy6jBHP52yxTg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 21:34:39 2026 by rpki-client