Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier: 4DSfW8b5UZTBicsiByt36kklv3jmnH81ynGZKJk7LIc=
Subject key identifier: 4C:22:DD:D3:98:8D:6F:39:C3:9F:F8:73:32:C3:85:A3:64:69:2C:32
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 01A127D56BE21C25CFC4F81B4E043BB4E124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number: 1A9D
Signing time: Sat 10 Oct 2026 22:01:00 +0000
Manifest this update: Sat 10 Oct 2026 22:01:00 +0000
Manifest next update: Sun 11 Oct 2026 22:01:00 +0000
Files and hashes: 1: cqrDqsllU4angXR7ZhiixighcHI.roa (hash: fhOWug7UyzusWzCmpcbK8cX3/PPspaEdcPiG9KdZ6F4=)
2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: 5YAkk58KqA54sJEctWIc+U2uMup1DttYqQAL/wh3PmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:6b:e2:1c:25:cf:c4:f8:1b:4e:04:3b:b4:e1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Oct 10 22:01:00 2026 GMT
Not After : Oct 11 22:01:00 2026 GMT
Subject: CN=4c22ddd3988d6f39c39ff87332c385a364692c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:29:5a:99:f4:5c:ea:7f:6a:33:71:5a:e7:
ad:ab:0f:b4:6b:ff:92:c2:99:f0:f4:c2:44:7c:76:
45:1a:b5:35:64:b9:d4:9b:0f:e6:22:e2:68:15:43:
75:a4:92:60:73:90:0f:bb:cb:48:37:59:79:e4:bf:
3f:96:89:48:53:e9:8c:78:b9:64:10:85:19:80:72:
6f:4a:d1:04:28:37:4f:fc:dd:a2:4a:2f:b6:5d:84:
7d:2c:c7:27:3d:a8:cd:64:d7:61:99:32:7f:9b:c6:
c6:43:8e:e9:b7:e9:b9:3e:72:c0:e0:48:65:74:8f:
05:56:33:84:c9:3a:64:2c:da:5c:0a:dd:e8:7c:da:
f1:7b:0a:02:a9:dd:23:59:b8:ad:6e:70:c1:df:58:
34:9a:c0:ab:3b:d5:3d:12:69:cd:bb:8a:2f:78:1b:
fb:01:46:33:57:cc:0b:c0:f3:46:3b:ed:a1:52:15:
e8:f8:32:9d:4f:1b:1d:2c:78:81:74:e6:5f:6e:05:
3e:bd:f2:53:6d:a3:e1:db:e7:eb:8f:03:68:7e:fd:
0f:ba:95:2e:37:7f:f1:fe:bc:2e:cf:5e:49:8e:a0:
2c:05:24:aa:2d:dc:82:a4:ae:0a:96:c9:5b:38:d3:
8b:ec:e8:83:13:de:e0:97:09:49:f0:ee:4d:a4:fe:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:DD:D3:98:8D:6F:39:C3:9F:F8:73:32:C3:85:A3:64:69:2C:32
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b2:7e:50:a3:bc:75:60:09:06:4a:71:54:6e:c0:a8:a9:8e:
a5:a2:75:02:3f:68:e5:5b:d1:83:79:a9:14:d5:7f:16:f7:3a:
ee:04:13:60:44:e6:54:69:9c:81:de:6c:b5:42:32:0a:12:4c:
28:c2:9a:8b:64:1b:26:be:e9:31:13:23:64:ff:2d:70:f5:0a:
30:2e:8a:75:40:c3:24:fb:c9:df:79:47:8f:01:f4:e8:c5:ed:
4b:81:e1:ff:ed:d0:9d:34:38:b4:17:09:37:cf:cf:80:48:5e:
4e:ae:7a:8b:f9:4a:ec:2f:cd:a3:7c:e3:79:6b:85:ea:1e:24:
89:43:a7:ed:be:e1:af:77:41:f4:be:2f:22:82:35:2d:85:7f:
1b:12:a8:34:1f:7c:f9:bb:2c:12:9d:5b:aa:90:fc:29:53:4f:
d7:19:b8:c8:db:6f:48:56:64:63:c8:27:d1:5f:15:7b:2e:88:
e1:58:74:d7:cf:2c:71:81:0b:09:7a:23:eb:60:6c:97:ed:8d:
d0:2d:e6:bb:e7:9e:20:3d:df:a4:12:30:66:e2:d8:06:82:d5:
3b:6f:24:f4:d5:2a:ae:25:d5:8b:87:bd:10:92:8e:4a:ce:2b:
29:59:8d:0f:df:ad:1e:8a:32:54:2c:74:38:03:bd:d8:90:95:
68:57:f9:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEn1WviHCXPxPgbTgQ7tOEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzUzNjliMmQ0YmIyZTJkZWRlNjY4NjQ1MzEzZTM0NGU2
ZjFjYzAwHhcNMjYxMDEwMjIwMTAwWhcNMjYxMDExMjIwMTAwWjAzMTEwLwYDVQQD
Eyg0YzIyZGRkMzk4OGQ2ZjM5YzM5ZmY4NzMzMmMzODVhMzY0NjkyYzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+opWpn0XOp/ajNxWuetqw+0a/+S
wpnw9MJEfHZFGrU1ZLnUmw/mIuJoFUN1pJJgc5APu8tIN1l55L8/lolIU+mMeLlk
EIUZgHJvStEEKDdP/N2iSi+2XYR9LMcnPajNZNdhmTJ/m8bGQ47pt+m5PnLA4Ehl
dI8FVjOEyTpkLNpcCt3ofNrxewoCqd0jWbitbnDB31g0msCrO9U9EmnNu4oveBv7
AUYzV8wLwPNGO+2hUhXo+DKdTxsdLHiBdOZfbgU+vfJTbaPh2+frjwNofv0PupUu
N3/x/rwuz15JjqAsBSSqLdyCpK4KlslbONOL7OiDE97glwlJ8O5NpP5meQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwi3dOYjW85w5/4czLDhaNkaSwyMB8GA1UdIwQY
MBaAFKN1NpstS7Li3t5mhkUxPjRObxzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQt
MjhiZWM3Yjk5OTI5LzEvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQtMjhiZWM3Yjk5OTI5
LzEvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLJ+UKO8
dWAJBkpxVG7AqKmOpaJ1Aj9o5VvRg3mpFNV/Fvc67gQTYETmVGmcgd5stUIyChJM
KMKai2QbJr7pMRMjZP8tcPUKMC6KdUDDJPvJ33lHjwH06MXtS4Hh/+3QnTQ4tBcJ
N8/PgEheTq56i/lK7C/No3zjeWuF6h4kiUOn7b7hr3dB9L4vIoI1LYV/GxKoNB98
+bssEp1bqpD8KVNP1xm4yNtvSFZkY8gn0V8Vey6I4Vh0188scYELCXoj62Bsl+2N
0C3mu+eeID3fpBIwZuLYBoLVO28k9NUqriXVi4e9EJKOSs4rKVmND9+tHooyVCx0
OAO92JCVaFf5/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 11 00:55:12 2026 by rpki-client