Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: 0lI+RX1P+CegPWp1XTq152b2tbJF8h37tNh8pgSkeq8=
Subject key identifier: B9:77:EB:DF:FB:B7:54:A8:B7:0E:A8:86:96:9A:E0:9F:22:EA:92:61
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 01A1A97089C1FFE89E9ACFC3C201B06F6DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1ADE
Signing time: Thu 05 Nov 2026 02:01:27 +0000
Manifest this update: Thu 05 Nov 2026 02:01:27 +0000
Manifest next update: Fri 06 Nov 2026 02:01:27 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: dYXZLA2z4TUalVJsPMKTeQCVYE04x9gl7JaBFWNxsQg=)
2: sKwkfCXbsIoN8Tz06VbLnX982Mw.asa (hash: 71Gnrq1SXo9YWAgxUMMoZvsmt9ojmvRIGQ+aSBy2/Tk=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:70:89:c1:ff:e8:9e:9a:cf:c3:c2:01:b0:6f:6d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Nov 5 02:01:27 2026 GMT
Not After : Nov 6 02:01:27 2026 GMT
Subject: CN=b977ebdffbb754a8b70ea886969ae09f22ea9261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:ff:13:fa:47:b7:07:68:02:a2:18:21:60:
45:22:3f:a2:79:5f:ef:a0:cf:4c:ed:04:66:40:11:
c8:32:98:2f:5c:a4:58:c3:2a:c9:3d:f9:c1:25:72:
9b:c2:32:3d:14:56:2e:3a:d1:65:80:69:06:de:50:
ef:b7:6c:73:5d:6c:4c:7f:c9:18:7f:e3:fb:a1:cd:
27:b3:14:44:2e:24:01:9a:e2:55:14:7b:9c:46:1b:
25:0b:ce:59:f4:c6:7d:30:9a:a8:a6:db:ad:e9:db:
fa:60:a5:98:4b:cf:8e:76:16:11:12:0e:6b:51:5f:
2b:b2:b2:34:7d:44:47:14:1e:f4:4b:a4:7a:7f:a9:
6d:c3:e5:6d:ce:84:11:84:f1:be:d0:6c:d0:d2:e6:
43:2e:15:3c:98:81:38:5a:38:c4:77:91:bd:30:1f:
52:f9:39:b2:11:1e:3c:5c:be:a0:43:df:ef:39:2c:
c4:5e:8a:ca:78:f8:32:56:50:cf:7c:5b:bb:a1:fb:
8d:ae:df:8d:8d:36:76:81:c0:f2:fa:a6:1c:3f:f8:
23:85:ff:a6:55:6d:e8:41:57:3c:27:62:d3:9a:d5:
f0:9c:54:39:90:18:1b:50:fd:29:8f:92:8a:f0:7e:
4d:5d:b2:57:e1:84:d4:51:85:05:7f:7b:65:46:f2:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:77:EB:DF:FB:B7:54:A8:B7:0E:A8:86:96:9A:E0:9F:22:EA:92:61
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:55:61:7c:97:2f:e2:36:bd:2d:e9:01:c3:1c:53:94:9b:95:
53:21:75:fc:f6:3a:41:2b:42:1a:6f:cb:ba:00:81:94:46:9e:
1b:c3:3a:cb:bd:09:af:6b:04:37:87:88:ef:ca:e9:e4:2c:1d:
09:10:34:49:c1:96:60:f2:02:f0:54:66:d1:bb:6f:12:46:ed:
d9:3f:ab:a4:bd:26:a4:81:3a:ed:55:74:cd:9f:71:93:7b:e3:
1e:8c:a3:50:ca:48:a6:af:fa:0e:3e:a8:4f:dc:05:d1:fa:0b:
0d:97:75:1c:32:1c:c3:16:cb:e5:3f:b2:9b:41:ae:65:2b:93:
a7:49:9d:8d:98:72:75:2f:f8:99:6d:38:9d:35:45:fd:85:8c:
1f:1b:69:5d:9e:cf:79:b9:6f:26:f1:d2:d6:c5:02:fc:92:91:
86:6d:f5:95:59:53:42:54:ae:7e:f0:b6:1e:26:3e:0a:b5:4d:
2e:39:72:8f:63:1a:0e:a4:27:9e:04:e0:f1:14:3b:30:29:26:
b7:df:84:6d:72:b8:c8:6b:cc:9a:1f:d3:d7:fb:5f:a4:90:17:
36:f0:af:c5:ff:ca:a9:17:6b:fd:d2:61:6d:f0:a9:1c:16:1f:
0b:f2:18:6e:70:c5:2f:8d:64:db:8f:09:1d:26:09:96:a3:2d:
80:21:69:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGpcInB/+iems/DwgGwb23OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNGRmOWE1NDYwY2JkNDUwYjRlNzUzODAzOTNhODIxZTg1
Yzc0ZDgwHhcNMjYxMTA1MDIwMTI3WhcNMjYxMTA2MDIwMTI3WjAzMTEwLwYDVQQD
EyhiOTc3ZWJkZmZiYjc1NGE4YjcwZWE4ODY5NjlhZTA5ZjIyZWE5MjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53P/E/pHtwdoAqIYIWBFIj+ieV/v
oM9M7QRmQBHIMpgvXKRYwyrJPfnBJXKbwjI9FFYuOtFlgGkG3lDvt2xzXWxMf8kY
f+P7oc0nsxRELiQBmuJVFHucRhslC85Z9MZ9MJqoptut6dv6YKWYS8+OdhYREg5r
UV8rsrI0fURHFB70S6R6f6ltw+VtzoQRhPG+0GzQ0uZDLhU8mIE4WjjEd5G9MB9S
+TmyER48XL6gQ9/vOSzEXorKePgyVlDPfFu7ofuNrt+NjTZ2gcDy+qYcP/gjhf+m
VW3oQVc8J2LTmtXwnFQ5kBgbUP0pj5KK8H5NXbJX4YTUUYUFf3tlRvJ21wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLl369/7t1Sotw6ohpaa4J8i6pJhMB8GA1UdIwQY
MBaAFDtN+aVGDL1FC051OAOTqCHoXHTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2Zjkt
OTgxMmQ3Y2ZkNjk0LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2ZjktOTgxMmQ3Y2ZkNjk0
LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVVhfJcv
4ja9LekBwxxTlJuVUyF1/PY6QStCGm/LugCBlEaeG8M6y70Jr2sEN4eI78rp5Cwd
CRA0ScGWYPIC8FRm0btvEkbt2T+rpL0mpIE67VV0zZ9xk3vjHoyjUMpIpq/6Dj6o
T9wF0foLDZd1HDIcwxbL5T+ym0GuZSuTp0mdjZhydS/4mW04nTVF/YWMHxtpXZ7P
eblvJvHS1sUC/JKRhm31lVlTQlSufvC2HiY+CrVNLjlyj2MaDqQnngTg8RQ7MCkm
t9+EbXK4yGvMmh/T1/tfpJAXNvCvxf/KqRdr/dJhbfCpHBYfC/IYbnDFL41k248J
HSYJlqMtgCFpug==
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:20:03 2026 by rpki-client