Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: 9SZEDx9UmB5dvzWPvVQfO3xKtnsaNlagHENzCFyhfgk=
Subject key identifier: BA:36:D4:67:4D:04:41:29:1A:2E:F6:9A:39:6B:87:D4:1A:66:86:F8
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019CAF115727E6E877FB933B76C2CF0EC224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 17C7
Signing time: Mon 02 Mar 2026 15:01:15 +0000
Manifest this update: Mon 02 Mar 2026 15:01:15 +0000
Manifest next update: Tue 03 Mar 2026 15:01:15 +0000
Files and hashes: 1: 2MsPFamPffku1ttx9gaJe1ffa6Y.roa (hash: DHSbfM3R76vdNxci0L/Qjop0BLeabp3SpJ5q1Jd300M=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: sYptvha0GZ4QVlECwX/rCSOy5yqs2Lb5TmKu9UGPQBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:57:27:e6:e8:77:fb:93:3b:76:c2:cf:0e:c2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Mar 2 15:01:15 2026 GMT
Not After : Mar 3 15:01:15 2026 GMT
Subject: CN=ba36d4674d0441291a2ef69a396b87d41a6686f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:df:f5:a2:2d:20:e1:df:f1:7f:66:1e:6d:
3f:fc:99:b0:a2:66:5e:ef:51:69:c1:31:d0:8d:8a:
29:c8:45:93:8c:8d:9d:33:8c:97:03:81:99:c7:d7:
03:06:db:8b:4c:71:3a:bb:17:82:a5:f3:03:be:bd:
ce:8d:f1:0b:68:77:b6:46:23:a1:76:04:51:83:12:
3a:08:22:dd:5d:6b:d5:5b:db:8b:92:e8:94:1d:51:
01:f6:76:8c:c2:b3:dc:4a:f8:25:84:6b:91:33:d8:
14:66:8b:e4:cb:24:e8:7c:04:1e:b5:4d:24:9a:a3:
a9:20:7c:79:8d:ce:86:6d:ec:48:b0:24:9b:f8:1e:
e8:cb:4b:e4:d3:5d:55:42:3d:28:df:13:4d:ac:d2:
6d:c4:49:ca:ed:7f:e7:62:05:1a:97:2d:72:87:5f:
8e:1e:e3:9b:5d:ea:e3:08:4d:8e:6e:31:6c:88:c6:
d9:81:1d:bc:22:53:f3:c5:69:19:1c:67:cf:82:cc:
98:75:1f:23:c5:71:6c:61:f9:1f:88:73:90:87:11:
8d:d8:c1:b9:74:3a:67:ab:99:55:7c:b6:8c:8e:c6:
b1:c2:75:2f:94:95:a6:d3:30:1d:52:9c:f6:01:7d:
94:4e:c3:88:21:44:86:53:a6:cc:b8:07:29:ce:8b:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:36:D4:67:4D:04:41:29:1A:2E:F6:9A:39:6B:87:D4:1A:66:86:F8
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c6:36:51:e5:19:0c:b5:a9:06:52:0f:cf:9a:9f:ee:f8:59:
c0:c1:87:a6:c3:54:71:fb:66:07:82:12:8f:69:e8:44:05:26:
64:de:63:81:ad:9c:11:e0:c2:0f:50:83:ac:55:31:ea:76:57:
fd:0f:6b:fb:8f:af:99:49:eb:63:b7:29:11:f2:17:51:05:ee:
62:ba:c3:28:d2:53:de:14:f1:e3:c4:5c:eb:3f:db:3c:a8:12:
39:dc:5c:52:7d:7f:03:0c:1a:d1:6d:a3:97:5d:f2:38:26:2f:
02:9a:a1:b1:16:17:7a:f3:ce:1e:35:22:ee:2d:ee:c5:98:73:
23:a1:60:20:b1:93:32:7a:4b:93:9b:7e:de:a1:8c:ef:7a:11:
82:05:1c:13:7d:fa:30:4f:26:cc:b2:46:f0:e7:87:89:5a:08:
01:53:0e:61:b8:e8:37:c3:f1:51:d8:16:c7:4f:42:60:cc:d1:
79:3b:1d:31:c0:e6:9b:49:b7:0f:bd:38:6a:19:05:37:16:12:
41:0f:df:e5:4f:70:5e:55:11:8e:82:8a:68:93:f0:82:a1:7a:
12:5d:92:21:45:de:7e:28:f7:11:89:f3:71:c3:48:70:1e:78:
ef:c5:7e:bd:d4:d3:e6:e3:c4:0c:c8:70:26:49:f5:e5:0d:0a:
f5:44:81:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEVcn5uh3+5M7dsLPDsIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZWNlYWM4MTI1NTM0YTU3OTQ3OTYyZGIyODkwM2ZhZDdh
YzNhZjkwHhcNMjYwMzAyMTUwMTE1WhcNMjYwMzAzMTUwMTE1WjAzMTEwLwYDVQQD
EyhiYTM2ZDQ2NzRkMDQ0MTI5MWEyZWY2OWEzOTZiODdkNDFhNjY4NmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIff9aItIOHf8X9mHm0//JmwomZe
71FpwTHQjYopyEWTjI2dM4yXA4GZx9cDBtuLTHE6uxeCpfMDvr3OjfELaHe2RiOh
dgRRgxI6CCLdXWvVW9uLkuiUHVEB9naMwrPcSvglhGuRM9gUZovkyyTofAQetU0k
mqOpIHx5jc6GbexIsCSb+B7oy0vk011VQj0o3xNNrNJtxEnK7X/nYgUaly1yh1+O
HuObXerjCE2ObjFsiMbZgR28IlPzxWkZHGfPgsyYdR8jxXFsYfkfiHOQhxGN2MG5
dDpnq5lVfLaMjsaxwnUvlJWm0zAdUpz2AX2UTsOIIUSGU6bMuAcpzotNfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLo21GdNBEEpGi72mjlrh9QaZob4MB8GA1UdIwQY
MBaAFKPs6sgSVTSleUeWLbKJA/rXrDr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQt
YTliZDVlNDEwYWVkLzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQtYTliZDVlNDEwYWVk
LzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsY2UeUZ
DLWpBlIPz5qf7vhZwMGHpsNUcftmB4ISj2noRAUmZN5jga2cEeDCD1CDrFUx6nZX
/Q9r+4+vmUnrY7cpEfIXUQXuYrrDKNJT3hTx48Rc6z/bPKgSOdxcUn1/Awwa0W2j
l13yOCYvApqhsRYXevPOHjUi7i3uxZhzI6FgILGTMnpLk5t+3qGM73oRggUcE336
ME8mzLJG8OeHiVoIAVMOYbjoN8PxUdgWx09CYMzReTsdMcDmm0m3D704ahkFNxYS
QQ/f5U9wXlURjoKKaJPwgqF6El2SIUXefij3EYnzccNIcB5478V+vdTT5uPEDMhw
Jkn15Q0K9USBqw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:52 2026 by rpki-client