Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
File: o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft (raw, json)
Hash identifier: dDH96GZr4kMvuQqdRsAipWLJQylj3+FYPlOjPl49JJk=
Subject key identifier: AD:F5:7A:8A:41:9C:F6:1F:57:7D:A5:AC:09:16:0D:C2:49:06:21:18
Authority key identifier: A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
Certificate issuer: /CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Certificate serial: 01A0BEB1625551111F8F5A06994DF8EB3244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:01:31 +0000
Manifest this update: Sun 20 Sep 2026 12:01:31 +0000
Manifest next update: Mon 21 Sep 2026 12:01:31 +0000
Files and hashes: 1: V7RlhBqRdFHnFoFKubNeYK3a_5M.roa (hash: YvfqxwL6yWgifq6rmEH5uPSg0BfD7f+oaBIAHta6WNA=)
2: o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl (hash: cRpIbP1YEXDaNtNaE0NO4xbuGsTZe7ZumPILYVm+yQM=)
3: ylN60AZhnKa9fysVT9Ct3y5pIEg.asa (hash: vR5tYjzsZcCd1G4IMkymwkD1U1eYDXZY3+cXITuftZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b1:62:55:51:11:1f:8f:5a:06:99:4d:f8:eb:32:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Validity
Not Before: Sep 20 12:01:31 2026 GMT
Not After : Sep 21 12:01:31 2026 GMT
Subject: CN=adf57a8a419cf61f577da5ac09160dc249062118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:b6:ed:2d:27:37:e1:d2:99:7d:30:a9:61:
f8:c1:80:d8:e9:bc:a6:ea:25:a0:b0:22:4b:05:98:
8c:07:83:cd:7c:a9:c0:1d:d9:f5:e1:94:7d:3a:ed:
ca:e5:1b:96:0b:90:42:c4:ed:49:e6:53:a1:37:19:
2b:30:9f:1e:81:dc:97:a8:bf:3b:19:3f:18:b6:28:
33:58:da:53:c8:a7:0d:a7:df:f3:35:70:65:43:19:
35:79:eb:39:07:fa:1d:22:88:4e:57:db:98:41:ad:
70:88:34:11:e0:ff:34:4b:0d:13:5f:cd:d3:24:9f:
7b:33:36:f5:6e:1a:2d:c4:ec:29:80:2d:46:98:eb:
46:87:34:e7:64:c7:48:27:4f:45:f2:23:81:18:bc:
2f:24:6f:1c:5d:60:ef:44:7f:a7:30:4f:70:25:55:
f8:1f:b5:1d:87:32:b6:bf:2a:b1:c6:2c:34:36:bf:
b6:d3:73:99:c9:d9:6d:2c:d9:32:6e:e9:54:f3:db:
f3:b2:73:04:41:6b:d9:22:b9:79:0c:0c:b5:e3:7a:
6e:66:45:1f:2d:fa:a9:40:15:d5:a9:24:61:15:b6:
88:a5:41:40:f8:d3:ec:d0:3b:81:4e:14:c4:9d:64:
cf:ac:45:5b:a2:7f:8d:8b:8a:a2:bf:07:20:c8:fe:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F5:7A:8A:41:9C:F6:1F:57:7D:A5:AC:09:16:0D:C2:49:06:21:18
X509v3 Authority Key Identifier:
keyid:A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9b:41:68:7e:70:38:2e:a6:b7:da:27:9e:58:f9:97:3e:9c:
19:e2:d0:14:4a:2a:b1:89:7d:4a:a9:e1:4c:d8:84:d6:ea:df:
1c:05:92:85:1c:1a:67:a1:f3:1d:70:28:48:15:78:5e:4f:e3:
61:98:fc:5d:87:92:dc:83:b6:fc:7e:cb:af:d1:55:4d:bd:1b:
db:c7:b1:7a:4c:c4:4c:3e:5e:dc:bd:c8:6c:a9:1c:ea:c9:a3:
52:f8:07:57:6e:5f:67:93:f8:f0:28:83:21:d3:ed:24:a3:93:
58:20:89:e9:10:e1:83:67:6c:a1:3f:8e:b2:05:df:b7:d1:25:
cb:66:89:92:6a:e8:07:5f:63:7e:26:ad:41:ef:6e:26:3a:eb:
f6:ea:25:ae:44:c4:0e:e3:83:18:38:fe:b5:e1:c5:32:e9:17:
b6:d2:fe:15:f8:54:05:82:32:0b:b4:a2:6a:f6:34:9e:f8:18:
05:0f:dd:83:cd:24:54:3e:85:e3:3d:89:31:8f:54:e4:cc:9d:
a5:e7:00:e2:67:c1:a6:1e:ce:d8:6f:e1:e2:d0:d3:39:72:ac:
19:af:6f:07:02:a9:0a:aa:4a:2d:f4:e7:14:8f:5c:2b:32:60:
71:52:be:95:7f:51:ae:da:28:5a:6d:10:7d:16:8a:ff:a8:fe:
62:e5:fe:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+sWJVUREfj1oGmU346zJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTVjYmYxYzI5ZTAyMTlkMGQ5ZWJlMTE4MjYyMWNjYTg5
OTMwNjkwHhcNMjYwOTIwMTIwMTMxWhcNMjYwOTIxMTIwMTMxWjAzMTEwLwYDVQQD
EyhhZGY1N2E4YTQxOWNmNjFmNTc3ZGE1YWMwOTE2MGRjMjQ5MDYyMTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB627S0nN+HSmX0wqWH4wYDY6bym
6iWgsCJLBZiMB4PNfKnAHdn14ZR9Ou3K5RuWC5BCxO1J5lOhNxkrMJ8egdyXqL87
GT8YtigzWNpTyKcNp9/zNXBlQxk1ees5B/odIohOV9uYQa1wiDQR4P80Sw0TX83T
JJ97Mzb1bhotxOwpgC1GmOtGhzTnZMdIJ09F8iOBGLwvJG8cXWDvRH+nME9wJVX4
H7UdhzK2vyqxxiw0Nr+203OZydltLNkybulU89vzsnMEQWvZIrl5DAy143puZkUf
LfqpQBXVqSRhFbaIpUFA+NPs0DuBThTEnWTPrEVbon+Ni4qivwcgyP4WIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK31eopBnPYfV32lrAkWDcJJBiEYMB8GA1UdIwQY
MBaAFKOly/HCngIZ0Nnr4RgmIcyomTBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZYTDhjS2VBaG5RMmV2aEdDWWh6S2laTUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85ZjUxMDUtMTJkNy00ZjZiLTlkMGQt
ZDk3N2IzODlkNWFiLzEvbzZYTDhjS2VBaG5RMmV2aEdDWWh6S2laTUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS85ZjUxMDUtMTJkNy00ZjZiLTlkMGQtZDk3N2IzODlkNWFi
LzEvbzZYTDhjS2VBaG5RMmV2aEdDWWh6S2laTUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALptBaH5w
OC6mt9onnlj5lz6cGeLQFEoqsYl9SqnhTNiE1urfHAWShRwaZ6HzHXAoSBV4Xk/j
YZj8XYeS3IO2/H7Lr9FVTb0b28exekzETD5e3L3IbKkc6smjUvgHV25fZ5P48CiD
IdPtJKOTWCCJ6RDhg2dsoT+OsgXft9Ely2aJkmroB19jfiatQe9uJjrr9uolrkTE
DuODGDj+teHFMukXttL+FfhUBYIyC7SiavY0nvgYBQ/dg80kVD6F4z2JMY9U5Myd
pecA4mfBph7O2G/h4tDTOXKsGa9vBwKpCqpKLfTnFI9cKzJgcVK+lX9RrtooWm0Q
fRaK/6j+YuX+aw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:20:18 2026 by rpki-client