Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: dPaPoXfAfTCNK5s99FpearKDVqZ4rhBLuxSPuzTb6dQ=
Subject key identifier: 2B:B6:0B:A9:24:7D:AF:F3:77:AB:9D:C4:90:91:01:7C:2A:F9:B6:BD
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 01A0C39FC18BB8658AC34C61077E85F97D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 0670
Signing time: Mon 21 Sep 2026 11:00:21 +0000
Manifest this update: Mon 21 Sep 2026 11:00:21 +0000
Manifest next update: Tue 22 Sep 2026 11:00:21 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: 95AC1VXtNcARJJPzCi/qEynTmPMnm9dLgj9ZWAHyV5g=)
2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:c1:8b:b8:65:8a:c3:4c:61:07:7e:85:f9:7d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Sep 21 11:00:21 2026 GMT
Not After : Sep 22 11:00:21 2026 GMT
Subject: CN=2bb60ba9247daff377ab9dc49091017c2af9b6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:79:8c:4d:c1:4f:63:3f:9f:1a:3b:cc:9f:
fe:a9:11:37:5f:73:06:d4:81:1f:f6:6e:94:32:2d:
6f:f5:29:c2:c8:7b:e1:af:a4:81:f0:71:97:f4:b2:
f3:4d:93:ab:9f:78:08:2e:46:6d:b1:d6:69:56:80:
b8:d4:ca:6b:39:0f:24:94:1d:c8:f7:7d:ee:e1:0b:
8e:2c:90:db:be:2f:78:3b:9d:0f:d2:1e:7f:09:3d:
8f:c3:0e:53:e3:e1:a6:af:21:0a:ff:fe:0c:5f:17:
02:42:97:22:06:f0:bf:75:0e:81:80:69:b3:07:93:
3d:98:74:17:19:5e:0a:6f:86:d6:77:52:39:ee:c5:
42:47:29:50:8d:0c:c4:ee:f5:aa:1c:e4:54:07:c0:
f2:45:9b:14:eb:ce:db:b1:2a:b1:51:be:0b:99:9d:
e8:09:bd:b1:f7:76:f7:19:a9:13:d4:95:26:55:96:
d9:e2:10:d0:a7:33:43:03:a6:ac:01:d5:fd:e3:70:
ed:28:ac:8b:73:17:db:ff:2d:77:e2:e4:7a:94:c9:
57:b0:41:a7:b4:65:2e:b8:bf:92:e2:8e:ac:3b:5f:
69:8a:a6:fc:1d:4d:45:e6:a5:78:17:24:67:4e:1f:
a0:59:c6:e6:e6:9a:91:e6:2a:5e:08:74:86:9f:d2:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B6:0B:A9:24:7D:AF:F3:77:AB:9D:C4:90:91:01:7C:2A:F9:B6:BD
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c6:01:1b:19:ca:38:8c:e5:da:44:38:28:5a:36:e6:c3:b4:
fe:7b:2d:60:26:cc:96:f8:56:a2:b2:2d:3e:9b:6b:c3:f9:ea:
bb:a1:a6:cc:18:5f:08:5e:04:d5:f8:a2:9f:a1:20:ed:59:c3:
66:5a:aa:1d:71:58:97:74:d6:3c:27:9e:e8:40:54:ed:02:ef:
99:88:3b:07:8a:9e:c6:bf:e7:65:ab:ef:40:bc:bb:ab:d9:d9:
0d:54:0d:56:f8:b8:b4:7a:64:b8:e5:14:8a:f4:ee:d7:70:dc:
24:a9:5c:51:49:a7:72:f5:18:bb:a9:04:f5:ba:0f:c8:36:00:
8f:4f:ad:a1:40:e9:d3:1d:98:08:a7:04:63:9c:96:1a:5d:a2:
65:c9:53:c6:8d:99:2e:c9:fd:2e:a4:30:30:4e:ff:43:3b:0d:
39:47:5f:65:9d:d5:c6:b6:59:02:33:cd:c0:3e:0b:75:47:b6:
eb:17:de:db:8b:f3:3f:01:39:9e:e5:44:f1:4e:95:31:01:bf:
59:89:bf:ba:77:87:3e:df:a7:74:92:50:b6:55:7e:96:db:d9:
b3:35:22:d7:8c:4c:86:2d:11:2c:d1:7a:65:2c:a9:f7:86:ca:
c4:7a:3a:ad:84:81:b4:ae:ea:3f:b1:41:cb:c9:de:a6:a2:95:
c9:f9:a9:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn8GLuGWKw0xhB36F+X0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNThlYjU4YjVjNjFhMjNkMGYyNDY2YzVjZDczY2U5ZWM5
NjViOTYwHhcNMjYwOTIxMTEwMDIxWhcNMjYwOTIyMTEwMDIxWjAzMTEwLwYDVQQD
EygyYmI2MGJhOTI0N2RhZmYzNzdhYjlkYzQ5MDkxMDE3YzJhZjliNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoV5jE3BT2M/nxo7zJ/+qRE3X3MG
1IEf9m6UMi1v9SnCyHvhr6SB8HGX9LLzTZOrn3gILkZtsdZpVoC41MprOQ8klB3I
933u4QuOLJDbvi94O50P0h5/CT2Pww5T4+GmryEK//4MXxcCQpciBvC/dQ6BgGmz
B5M9mHQXGV4Kb4bWd1I57sVCRylQjQzE7vWqHORUB8DyRZsU687bsSqxUb4LmZ3o
Cb2x93b3GakT1JUmVZbZ4hDQpzNDA6asAdX943DtKKyLcxfb/y134uR6lMlXsEGn
tGUuuL+S4o6sO19piqb8HU1F5qV4FyRnTh+gWcbm5pqR5ipeCHSGn9IcJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu2C6kkfa/zd6udxJCRAXwq+ba9MB8GA1UdIwQY
MBaAFDtY61i1xhoj0PJGbFzXPOnslluWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2Qt
NzJhYzc5ZDdiYjA5LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2QtNzJhYzc5ZDdiYjA5
LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsYBGxnK
OIzl2kQ4KFo25sO0/nstYCbMlvhWorItPptrw/nqu6GmzBhfCF4E1fiin6Eg7VnD
ZlqqHXFYl3TWPCee6EBU7QLvmYg7B4qexr/nZavvQLy7q9nZDVQNVvi4tHpkuOUU
ivTu13DcJKlcUUmncvUYu6kE9boPyDYAj0+toUDp0x2YCKcEY5yWGl2iZclTxo2Z
Lsn9LqQwME7/QzsNOUdfZZ3VxrZZAjPNwD4LdUe26xfe24vzPwE5nuVE8U6VMQG/
WYm/uneHPt+ndJJQtlV+ltvZszUi14xMhi0RLNF6ZSyp94bKxHo6rYSBtK7qP7FB
y8nepqKVyfmpMg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:28:04 2026 by rpki-client