Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft
File: o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft (raw, json)
Hash identifier: Dmemq966ToAcWeyK9Z+BB9GTBEAORueLCJVXeGBFfss=
Subject key identifier: 84:A1:ED:7E:85:6F:C2:FE:A4:9C:7A:45:13:11:02:E1:E4:C5:AA:51
Authority key identifier: A3:A2:6F:DD:E1:2C:38:9F:64:F8:CF:5D:9A:66:92:E1:27:84:10:05
Certificate issuer: /CN=a3a26fdde12c389f64f8cf5d9a6692e127841005
Certificate serial: 01A0C821D1587286A33EDBB100224B80486F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft
Manifest number: 4A
Signing time: Tue 22 Sep 2026 08:00:54 +0000
Manifest this update: Tue 22 Sep 2026 08:00:54 +0000
Manifest next update: Wed 23 Sep 2026 08:00:54 +0000
Files and hashes: 1: PCeTg-z2IkY5v03LlV2q4LDGBsw.asa (hash: Xos5iSf0n6j9TVZXRw51i0DoEWOWAs+fRxhRWuUB430=)
2: o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.crl (hash: QFBoy2Ov1izPkWwoYlvq9+OiCAcwxbHIGn4aogzW0Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:d1:58:72:86:a3:3e:db:b1:00:22:4b:80:48:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a26fdde12c389f64f8cf5d9a6692e127841005
Validity
Not Before: Sep 22 08:00:54 2026 GMT
Not After : Sep 23 08:00:54 2026 GMT
Subject: CN=84a1ed7e856fc2fea49c7a45131102e1e4c5aa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:74:13:b3:cb:f1:09:c6:bf:ff:2f:d0:ca:
43:b3:a0:bb:aa:90:29:38:e2:ed:f2:11:29:95:a0:
57:2c:9b:f1:02:30:7d:a5:e4:d9:07:3d:31:14:8c:
a4:c9:0f:08:c7:2b:c1:2c:9a:bf:59:4b:d6:55:24:
29:31:e5:17:20:d5:63:ba:78:ca:82:c9:6c:4e:88:
e9:35:5b:e9:67:6f:3f:34:5d:07:74:21:ac:05:c9:
1c:b0:4e:27:d7:18:9c:cd:6d:5e:04:e3:cc:6a:fb:
95:da:0f:cb:84:23:94:e5:e8:65:b8:b2:48:0c:9e:
2e:d7:6f:98:17:3e:4e:d6:62:62:dc:76:80:b1:fa:
60:5a:99:37:b5:7a:c5:f1:46:8d:a4:95:24:07:9a:
8e:e0:d9:98:fe:0f:df:fa:06:25:cc:f8:8d:cd:c8:
3d:db:ad:bf:03:3e:45:d7:bb:6f:11:78:aa:91:a9:
33:f5:24:39:30:a5:5a:57:b2:46:57:e7:84:34:9d:
35:c1:5d:29:43:30:02:8a:60:5b:5c:48:aa:ce:dc:
2c:26:f6:ab:1b:8a:0d:af:db:2a:b6:d4:12:0a:2a:
b7:6f:40:48:d9:5d:e6:50:80:99:a8:06:c3:99:f7:
ec:f6:31:8b:86:c5:95:89:a1:a9:2b:7c:b6:2a:e1:
5b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A1:ED:7E:85:6F:C2:FE:A4:9C:7A:45:13:11:02:E1:E4:C5:AA:51
X509v3 Authority Key Identifier:
keyid:A3:A2:6F:DD:E1:2C:38:9F:64:F8:CF:5D:9A:66:92:E1:27:84:10:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:64:2d:dd:63:7c:e9:b3:7f:d5:e0:5f:df:f5:d6:ec:3c:5c:
1c:05:8f:dc:0f:f8:48:7b:88:e0:36:d1:af:ac:d6:ea:f7:0d:
e9:96:ef:89:bb:c7:71:48:b1:86:32:55:63:40:26:88:bd:a8:
c8:21:a7:d3:ff:f8:ce:6b:75:57:8f:e6:59:40:67:6c:54:05:
99:74:ed:d2:b6:d2:0c:29:19:6e:f5:ac:e2:c8:68:38:d3:7b:
4c:3c:45:02:06:56:60:26:96:22:f1:01:13:c8:05:49:29:2e:
67:eb:a4:b6:92:40:0e:d9:b8:0f:67:a9:34:50:2c:a2:92:fb:
eb:a2:df:9b:e7:4a:cf:d3:9a:88:fb:6f:89:59:79:4d:1e:55:
38:52:6c:86:aa:2b:11:59:7d:a4:27:6a:c8:2c:14:07:9b:30:
d5:3e:be:4b:da:95:03:f6:a6:7f:8f:b2:9d:b9:46:a7:c9:16:
92:ba:8f:8e:f0:69:8c:2b:d4:47:2f:31:05:35:b6:83:c7:32:
3b:ef:06:77:7e:42:f6:e1:f1:50:99:da:14:8d:5f:30:02:90:
21:9f:6e:6f:cf:06:b3:a4:bd:4c:f2:bc:0e:9f:32:58:da:9a:
25:eb:1f:c9:4a:e4:7e:b8:21:e7:2a:d1:ce:7d:2e:38:0b:ce:
23:2e:3a:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIIdFYcoajPtuxACJLgEhvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTI2ZmRkZTEyYzM4OWY2NGY4Y2Y1ZDlhNjY5MmUxMjc4
NDEwMDUwHhcNMjYwOTIyMDgwMDU0WhcNMjYwOTIzMDgwMDU0WjAzMTEwLwYDVQQD
Eyg4NGExZWQ3ZTg1NmZjMmZlYTQ5YzdhNDUxMzExMDJlMWU0YzVhYTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5x0E7PL8QnGv/8v0MpDs6C7qpAp
OOLt8hEplaBXLJvxAjB9peTZBz0xFIykyQ8IxyvBLJq/WUvWVSQpMeUXINVjunjK
gslsTojpNVvpZ28/NF0HdCGsBckcsE4n1xiczW1eBOPMavuV2g/LhCOU5ehluLJI
DJ4u12+YFz5O1mJi3HaAsfpgWpk3tXrF8UaNpJUkB5qO4NmY/g/f+gYlzPiNzcg9
262/Az5F17tvEXiqkakz9SQ5MKVaV7JGV+eENJ01wV0pQzACimBbXEiqztwsJvar
G4oNr9sqttQSCiq3b0BI2V3mUICZqAbDmffs9jGLhsWViaGpK3y2KuFbcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISh7X6Fb8L+pJx6RRMRAuHkxapRMB8GA1UdIwQY
MBaAFKOib93hLDifZPjPXZpmkuEnhBAFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZKdjNlRXNPSjlrLU05ZG1tYVM0U2VFRUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xZDEyYjUtNGRlMi00Yzk4LTgxOGMt
YTlhZjc1NzYyZWNlLzEvbzZKdjNlRXNPSjlrLU05ZG1tYVM0U2VFRUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xZDEyYjUtNGRlMi00Yzk4LTgxOGMtYTlhZjc1NzYyZWNl
LzEvbzZKdjNlRXNPSjlrLU05ZG1tYVM0U2VFRUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmQt3WN8
6bN/1eBf3/XW7DxcHAWP3A/4SHuI4DbRr6zW6vcN6ZbvibvHcUixhjJVY0AmiL2o
yCGn0//4zmt1V4/mWUBnbFQFmXTt0rbSDCkZbvWs4shoONN7TDxFAgZWYCaWIvEB
E8gFSSkuZ+uktpJADtm4D2epNFAsopL766Lfm+dKz9OaiPtviVl5TR5VOFJshqor
EVl9pCdqyCwUB5sw1T6+S9qVA/amf4+ynblGp8kWkrqPjvBpjCvURy8xBTW2g8cy
O+8Gd35C9uHxUJnaFI1fMAKQIZ9ub88Gs6S9TPK8Dp8yWNqaJesfyUrkfrgh5yrR
zn0uOAvOIy46Bg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:50:07 2026 by rpki-client