Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
File: O47zaZ48ewDP9VFOVME2EqO8CBA.mft (raw, json)
Hash identifier: 6qDQR/whKDSmsfVfKy8k/wodFNv8rSp81g+/7BBgRpc=
Subject key identifier: B9:9E:2E:87:A3:08:1D:96:1A:38:5D:5F:52:D3:E6:FE:C8:15:E6:05
Authority key identifier: 3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
Certificate issuer: /CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Certificate serial: 019D9D3FB6AE76A203B14D41FA9CD321E471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
Manifest number: 8B
Signing time: Fri 17 Apr 2026 21:01:31 +0000
Manifest this update: Fri 17 Apr 2026 21:01:31 +0000
Manifest next update: Sat 18 Apr 2026 21:01:31 +0000
Files and hashes: 1: O47zaZ48ewDP9VFOVME2EqO8CBA.crl (hash: YTxUwtE+zUuL47K8auM+i+8zcbHq5/066mXDrTDuMpg=)
2: sLLadZHcLuLxJyRCEcg6ugP5rdc.roa (hash: z14c08hX3kPcGJfG3drJX75MFVvqokGJtQr08nJp+rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:b6:ae:76:a2:03:b1:4d:41:fa:9c:d3:21:e4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Validity
Not Before: Apr 17 21:01:31 2026 GMT
Not After : Apr 18 21:01:31 2026 GMT
Subject: CN=b99e2e87a3081d961a385d5f52d3e6fec815e605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:e7:9e:b5:01:21:c3:56:8f:2b:ca:98:8a:
b7:fb:55:1d:c4:1e:ac:18:c8:c7:fd:8e:75:c2:c1:
0e:24:dd:dd:6d:d6:23:02:24:e3:a0:af:88:d5:49:
fc:f8:37:e2:38:e7:53:1d:b3:a2:17:95:c4:9d:02:
8b:d9:c8:5f:be:7f:f9:7c:84:4e:31:76:e3:bb:05:
9a:93:90:18:79:f7:11:91:f7:3a:23:ff:cd:18:b4:
1c:f8:22:73:38:a9:f9:88:33:8a:48:fa:8f:d8:e0:
a0:b1:7f:f6:f9:ae:06:39:c5:f4:0a:cf:b3:74:b8:
5f:be:7a:f4:8a:ad:b7:24:47:a3:18:34:31:3e:4b:
ce:85:21:69:5e:19:76:1a:dc:a5:e9:25:9f:50:5b:
3e:cf:0a:63:dc:16:89:0f:24:ed:b6:c6:48:aa:b2:
e6:5e:a6:ee:51:75:b1:82:ed:b1:8a:a4:2d:d6:2c:
a4:a1:df:a6:7e:21:f3:5e:73:92:68:7b:6a:e3:7f:
b9:57:9f:1a:bc:d1:49:82:8b:b1:f3:40:e3:f6:d5:
de:2e:3c:0a:ce:c4:4f:ec:1b:42:24:c7:1a:22:f0:
9b:9e:36:c7:ac:bb:c9:cd:35:63:03:90:07:8a:68:
ee:bb:ff:45:4d:76:c8:74:cd:c9:fc:93:5c:ad:2d:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9E:2E:87:A3:08:1D:96:1A:38:5D:5F:52:D3:E6:FE:C8:15:E6:05
X509v3 Authority Key Identifier:
keyid:3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:24:5e:99:c3:88:b5:5d:85:dd:e9:65:9b:45:ca:ac:ae:9c:
61:5b:c0:b7:54:ec:02:09:35:af:dd:14:95:6f:5e:ed:4e:42:
5a:19:14:08:0e:d0:4f:36:49:7e:7a:24:d2:99:28:4c:82:4d:
ca:7e:91:39:2d:c0:b0:0b:b5:be:cc:af:4a:26:a1:66:a5:55:
62:45:8e:54:d2:de:51:8d:4a:69:c0:2d:9b:0a:ca:72:c2:ee:
55:1e:72:35:36:9b:04:09:5e:b6:b1:eb:f9:2a:7d:58:88:34:
94:8a:71:7e:f5:c8:a6:7a:b3:27:25:53:28:36:2a:97:e3:1d:
cc:d5:6a:e1:43:df:33:c8:b0:19:63:2b:64:42:37:59:b5:1b:
4d:82:ae:59:ee:f7:e5:83:bc:21:2d:0a:02:24:6d:83:68:fe:
15:5d:d0:19:9b:8e:35:21:0f:c1:6d:fd:1f:05:c5:e2:47:57:
da:90:9c:2b:a5:2a:ca:60:66:0b:d3:b6:fd:d3:59:25:94:4d:
ba:dd:07:04:1e:89:43:15:db:46:3e:25:7c:64:39:41:cc:c3:
f9:c3:f1:81:3c:5a:17:44:dd:32:21:93:27:be:09:80:d8:16:
03:d0:0b:12:7a:40:12:4f:3a:c8:01:d2:14:e9:8f:bd:60:72:
be:56:f0:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dP7audqIDsU1B+pzTIeRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOGVmMzY5OWUzYzdiMDBjZmY1NTE0ZTU0YzEzNjEyYTNi
YzA4MTAwHhcNMjYwNDE3MjEwMTMxWhcNMjYwNDE4MjEwMTMxWjAzMTEwLwYDVQQD
EyhiOTllMmU4N2EzMDgxZDk2MWEzODVkNWY1MmQzZTZmZWM4MTVlNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0PnnrUBIcNWjyvKmIq3+1UdxB6s
GMjH/Y51wsEOJN3dbdYjAiTjoK+I1Un8+DfiOOdTHbOiF5XEnQKL2chfvn/5fIRO
MXbjuwWak5AYefcRkfc6I//NGLQc+CJzOKn5iDOKSPqP2OCgsX/2+a4GOcX0Cs+z
dLhfvnr0iq23JEejGDQxPkvOhSFpXhl2Gtyl6SWfUFs+zwpj3BaJDyTttsZIqrLm
XqbuUXWxgu2xiqQt1iykod+mfiHzXnOSaHtq43+5V58avNFJgoux80Dj9tXeLjwK
zsRP7BtCJMcaIvCbnjbHrLvJzTVjA5AHimjuu/9FTXbIdM3J/JNcrS1G6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmeLoejCB2WGjhdX1LT5v7IFeYFMB8GA1UdIwQY
MBaAFDuO82mePHsAz/VRTlTBNhKjvAgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzQ3emFaNDhld0RQOVZGT1ZNRTJFcU84Q0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83MTAyMzktMzE3Ny00NjNhLTg5ODUt
YjIxZGE2ZDAxMjhlLzEvTzQ3emFaNDhld0RQOVZGT1ZNRTJFcU84Q0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83MTAyMzktMzE3Ny00NjNhLTg5ODUtYjIxZGE2ZDAxMjhl
LzEvTzQ3emFaNDhld0RQOVZGT1ZNRTJFcU84Q0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiRemcOI
tV2F3ellm0XKrK6cYVvAt1TsAgk1r90UlW9e7U5CWhkUCA7QTzZJfnok0pkoTIJN
yn6ROS3AsAu1vsyvSiahZqVVYkWOVNLeUY1KacAtmwrKcsLuVR5yNTabBAletrHr
+Sp9WIg0lIpxfvXIpnqzJyVTKDYql+MdzNVq4UPfM8iwGWMrZEI3WbUbTYKuWe73
5YO8IS0KAiRtg2j+FV3QGZuONSEPwW39HwXF4kdX2pCcK6UqymBmC9O2/dNZJZRN
ut0HBB6JQxXbRj4lfGQ5QczD+cPxgTxaF0TdMiGTJ74JgNgWA9ALEnpAEk86yAHS
FOmPvWByvlbwQw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:12 2026 by rpki-client