Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
File: OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft (raw, json)
Hash identifier: MdbAFhyOpzHQtEGD+a9TWwOr646IR+hJi/YAtKwYIek=
Subject key identifier: 8B:A5:78:22:79:14:0B:01:7A:93:42:46:B8:0E:1C:24:66:71:32:31
Authority key identifier: 39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
Certificate issuer: /CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Certificate serial: 01A0CA47850F7C1CF515AA6125DB78E05E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
Manifest number: 11EB
Signing time: Tue 22 Sep 2026 18:01:19 +0000
Manifest this update: Tue 22 Sep 2026 18:01:19 +0000
Manifest next update: Wed 23 Sep 2026 18:01:19 +0000
Files and hashes: 1: OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl (hash: 2N8PSwEcKQ44PEPgZS8zAVofS9IXkn4PzK9gODi6ecU=)
2: qvZ-nKf7EFh0r3KXcsWmv_aLkqs.roa (hash: XaQIlBTlE+Jhvgae5CyaS1DgkFx27OpIcetptyKOkgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:85:0f:7c:1c:f5:15:aa:61:25:db:78:e0:5e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Validity
Not Before: Sep 22 18:01:19 2026 GMT
Not After : Sep 23 18:01:19 2026 GMT
Subject: CN=8ba5782279140b017a934246b80e1c2466713231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:2d:71:e8:b0:84:40:f3:4e:a5:7d:c3:f7:
65:20:17:b2:38:f6:48:2e:37:3b:a1:96:24:cd:a6:
7d:d1:93:37:fa:46:fe:f6:d1:99:71:bd:4f:3e:b3:
c5:c6:a6:67:5a:4b:28:e2:57:bd:2b:79:cd:22:97:
18:2a:56:85:33:26:d6:ee:bf:53:36:47:1d:8a:b3:
87:e0:88:b8:92:40:04:af:d1:13:a3:f2:f7:3b:38:
c8:59:ce:a9:3a:4a:3b:70:9d:c5:0c:ba:90:c6:b9:
b6:23:c8:dc:76:1f:b6:2c:02:8d:4d:d2:72:16:a4:
11:ae:34:fb:e8:8f:61:78:10:80:f8:ee:f7:5a:7d:
f9:da:11:54:3a:fd:dc:f1:77:6a:c9:1f:68:f0:2e:
c4:88:4c:ca:e1:37:9b:30:63:6a:c2:b9:8e:a8:6a:
c2:90:55:68:17:dd:82:a9:9a:de:3c:16:77:96:0f:
af:ff:68:2f:eb:72:ec:45:5c:d9:a5:92:e5:3b:3c:
da:98:48:9b:43:b6:3d:be:87:c1:90:0a:71:a0:6e:
64:19:fe:d3:67:a4:ae:88:08:53:4c:1e:fb:d1:ba:
31:a2:9f:b2:31:6d:30:2a:75:89:c6:46:89:35:ad:
8a:a5:3a:af:e9:a5:b1:30:3a:bf:5d:f1:09:05:cb:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A5:78:22:79:14:0B:01:7A:93:42:46:B8:0E:1C:24:66:71:32:31
X509v3 Authority Key Identifier:
keyid:39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d4:28:75:79:0b:ba:0b:ab:ab:ab:e4:39:62:4b:15:0e:b9:
bd:02:cd:49:14:30:a5:fb:59:7f:41:98:05:57:08:a3:43:d4:
cf:40:7b:b1:1b:cd:86:15:44:f0:c0:66:a2:46:b9:64:51:74:
3a:04:4b:b1:03:fd:6d:fa:2e:4d:f3:c3:78:f1:7e:2f:bb:93:
00:be:fc:f1:eb:51:f1:75:3a:a5:29:34:d6:45:5d:d6:7c:bf:
c9:69:4f:5c:96:cc:fc:c8:7d:04:1a:e4:a9:84:91:d2:6c:53:
2b:0a:a8:21:38:bd:0a:2a:1a:1c:12:12:85:2e:66:79:37:3c:
12:cc:10:de:1f:d2:20:ea:c9:6a:fd:f2:ac:d0:34:bc:d8:a2:
12:12:7d:42:0a:94:78:65:ce:b4:a3:94:14:d9:2e:70:c5:b8:
75:06:63:82:16:e0:c1:61:ad:81:ce:4a:0c:d0:a9:c0:21:21:
5d:d6:5a:f8:aa:a9:6b:6c:b9:2a:48:c8:7d:7a:36:a5:18:fe:
b6:8f:f4:36:b0:5a:96:7a:fd:87:49:cb:90:46:d7:ca:b5:91:
48:fe:f9:b6:3e:b9:31:24:e5:21:ac:a2:ad:c5:f2:0b:0b:1f:
b3:eb:c0:b1:03:41:3f:76:3d:e6:1f:07:76:99:83:1d:13:81:
40:39:7a:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR4UPfBz1FaphJdt44F47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OWRjMTM2MTlhYWJhN2YyMjJjZWFjYjA1ZjFiYmFjNTli
ZDNhOWEwHhcNMjYwOTIyMTgwMTE5WhcNMjYwOTIzMTgwMTE5WjAzMTEwLwYDVQQD
Eyg4YmE1NzgyMjc5MTQwYjAxN2E5MzQyNDZiODBlMWMyNDY2NzEzMjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUUtceiwhEDzTqV9w/dlIBeyOPZI
Ljc7oZYkzaZ90ZM3+kb+9tGZcb1PPrPFxqZnWkso4le9K3nNIpcYKlaFMybW7r9T
NkcdirOH4Ii4kkAEr9ETo/L3OzjIWc6pOko7cJ3FDLqQxrm2I8jcdh+2LAKNTdJy
FqQRrjT76I9heBCA+O73Wn352hFUOv3c8XdqyR9o8C7EiEzK4TebMGNqwrmOqGrC
kFVoF92CqZrePBZ3lg+v/2gv63LsRVzZpZLlOzzamEibQ7Y9vofBkApxoG5kGf7T
Z6SuiAhTTB770boxop+yMW0wKnWJxkaJNa2KpTqv6aWxMDq/XfEJBcsIvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuleCJ5FAsBepNCRrgOHCRmcTIxMB8GA1UdIwQY
MBaAFDmdwTYZqrp/IizqywXxu6xZvTqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1ozQk5obXF1bjhpTE9yTEJmRzdyRm05T3BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lZmEyMjUtMTZkYy00ZjQzLWFhZTkt
MDAzMmZkYzU0NTBiLzEvT1ozQk5obXF1bjhpTE9yTEJmRzdyRm05T3BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lZmEyMjUtMTZkYy00ZjQzLWFhZTktMDAzMmZkYzU0NTBi
LzEvT1ozQk5obXF1bjhpTE9yTEJmRzdyRm05T3BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActQodXkL
ugurq6vkOWJLFQ65vQLNSRQwpftZf0GYBVcIo0PUz0B7sRvNhhVE8MBmoka5ZFF0
OgRLsQP9bfouTfPDePF+L7uTAL788etR8XU6pSk01kVd1ny/yWlPXJbM/Mh9BBrk
qYSR0mxTKwqoITi9CioaHBIShS5meTc8EswQ3h/SIOrJav3yrNA0vNiiEhJ9QgqU
eGXOtKOUFNkucMW4dQZjghbgwWGtgc5KDNCpwCEhXdZa+Kqpa2y5KkjIfXo2pRj+
to/0NrBalnr9h0nLkEbXyrWRSP75tj65MSTlIayircXyCwsfs+vAsQNBP3Y95h8H
dpmDHROBQDl6Ug==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:28:55 2026 by rpki-client