Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: 6vGa52HyRutAZPYcVgCbQPEsR2UOQvldn6BOL058KRQ=
Subject key identifier: 30:12:AF:71:A4:D7:F3:AB:03:58:F3:D0:BF:0E:14:19:39:38:80:63
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 019D9A06E2B7079CF744E0455BFB404710A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0F4E
Signing time: Fri 17 Apr 2026 06:00:35 +0000
Manifest this update: Fri 17 Apr 2026 06:00:35 +0000
Manifest next update: Sat 18 Apr 2026 06:00:35 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: KVJ/B35WzOOR0ZggiZ5j4iX5FQHUFGiqlgbpQW9X9/s=)
2: ofgcBJL5IkucI_t2Tbw87DuVUlg.roa (hash: 0n3F9loIDoRxXepxc9dufIeLMM9JHYgsIDsHjtK3JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:e2:b7:07:9c:f7:44:e0:45:5b:fb:40:47:10:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Apr 17 06:00:35 2026 GMT
Not After : Apr 18 06:00:35 2026 GMT
Subject: CN=3012af71a4d7f3ab0358f3d0bf0e141939388063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:2b:c5:f5:24:21:ad:14:24:0b:f3:3d:c8:
e0:b3:a2:b1:77:67:01:ab:04:c4:10:ec:68:39:7f:
bb:27:56:ca:8d:74:eb:65:bf:99:50:0c:6c:ea:20:
97:45:cc:f9:70:28:4e:d5:85:a2:37:be:31:7f:06:
18:1e:8a:57:46:ea:62:54:03:c7:1e:a3:d6:b8:fc:
39:42:62:4f:82:48:a1:db:16:97:03:3a:89:16:ef:
72:9e:5b:d0:97:e6:21:fa:26:5e:c3:0e:c8:01:b4:
8c:1f:8a:26:45:bb:35:11:69:bc:71:95:a3:1f:cc:
bc:85:95:79:9c:2a:35:de:c6:fa:2e:43:c1:22:b6:
93:64:08:63:c5:dc:9f:84:a6:98:f6:6e:65:17:a2:
01:5f:46:e0:57:64:55:24:fa:c5:ac:c8:ee:d9:dc:
21:56:76:b3:52:a9:5c:4b:0d:d3:cf:eb:27:e6:66:
96:df:15:c2:ae:7b:76:a1:70:2d:00:76:f2:d7:e1:
5b:22:3c:37:f4:e1:11:ca:6e:88:ef:39:05:2e:b8:
68:63:8c:50:5f:a4:e1:0d:ba:0a:30:95:89:42:b4:
b9:67:31:1e:b8:2c:f1:a2:58:32:ff:ba:1e:8c:6d:
83:90:fd:73:41:ab:b7:b7:e1:02:32:f4:ae:63:58:
6a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:AF:71:A4:D7:F3:AB:03:58:F3:D0:BF:0E:14:19:39:38:80:63
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3b:09:80:ca:29:cb:6f:a4:f7:3c:b8:68:05:f0:57:8c:bc:
e2:70:45:5f:72:8d:4f:22:0a:3c:77:27:61:75:32:ec:5b:7b:
62:ee:d1:20:af:4d:1d:e7:f7:00:89:c2:c0:1b:15:17:a9:4d:
ef:8d:4c:af:c2:12:f1:ca:74:20:50:5a:61:db:c3:c4:c3:06:
0c:d9:04:70:a4:1c:8f:b8:db:85:9b:18:4a:13:1c:10:c5:af:
c5:58:3c:9a:14:01:51:63:55:e9:f1:0c:6e:3c:fe:b8:63:5d:
d4:94:d7:32:ea:61:a1:e0:34:c4:8d:f4:ea:4c:bb:f3:4f:84:
f7:02:ff:43:a5:84:60:04:14:cc:b2:53:b2:a1:55:4c:cf:62:
22:e9:cb:aa:93:51:fa:79:fb:8a:cd:6c:74:8a:16:46:d7:23:
0c:84:cb:7d:c1:59:7a:2d:74:5d:01:bf:13:2e:af:3d:6e:c2:
70:49:f7:e5:cf:59:5b:6e:b7:40:05:e5:a5:34:1e:a6:37:93:
d5:5c:f3:25:6b:8c:2e:d4:1d:9d:f0:90:b8:85:33:19:a5:9e:
31:78:1c:da:c9:fa:c0:e9:be:e1:66:6c:a6:cf:ab:34:cf:f4:
33:92:05:57:d1:77:f5:7f:af:2c:30:4a:98:7f:f2:8d:47:c5:
de:fb:e9:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBuK3B5z3ROBFW/tARxCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZWYxMjkwY2YzOGI0ZjZlMDE4M2U3ZTRiZjg3YWM2N2Ex
MmQ3YWIwHhcNMjYwNDE3MDYwMDM1WhcNMjYwNDE4MDYwMDM1WjAzMTEwLwYDVQQD
EygzMDEyYWY3MWE0ZDdmM2FiMDM1OGYzZDBiZjBlMTQxOTM5Mzg4MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4MrxfUkIa0UJAvzPcjgs6Kxd2cB
qwTEEOxoOX+7J1bKjXTrZb+ZUAxs6iCXRcz5cChO1YWiN74xfwYYHopXRupiVAPH
HqPWuPw5QmJPgkih2xaXAzqJFu9ynlvQl+Yh+iZeww7IAbSMH4omRbs1EWm8cZWj
H8y8hZV5nCo13sb6LkPBIraTZAhjxdyfhKaY9m5lF6IBX0bgV2RVJPrFrMju2dwh
VnazUqlcSw3Tz+sn5maW3xXCrnt2oXAtAHby1+FbIjw39OERym6I7zkFLrhoY4xQ
X6ThDboKMJWJQrS5ZzEeuCzxolgy/7oejG2DkP1zQau3t+ECMvSuY1hqbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDASr3Gk1/OrA1jz0L8OFBk5OIBjMB8GA1UdIwQY
MBaAFNjvEpDPOLT24Bg+fkv4esZ6EterMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmIt
NDhlNmYyNjBmYmE1LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmItNDhlNmYyNjBmYmE1
LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTsJgMop
y2+k9zy4aAXwV4y84nBFX3KNTyIKPHcnYXUy7Ft7Yu7RIK9NHef3AInCwBsVF6lN
741Mr8IS8cp0IFBaYdvDxMMGDNkEcKQcj7jbhZsYShMcEMWvxVg8mhQBUWNV6fEM
bjz+uGNd1JTXMuphoeA0xI306ky780+E9wL/Q6WEYAQUzLJTsqFVTM9iIunLqpNR
+nn7is1sdIoWRtcjDITLfcFZei10XQG/Ey6vPW7CcEn35c9ZW263QAXlpTQepjeT
1VzzJWuMLtQdnfCQuIUzGaWeMXgc2sn6wOm+4WZsps+rNM/0M5IFV9F39X+vLDBK
mH/yjUfF3vvp2A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:09 2026 by rpki-client