Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: Gi23wkntldkma/YeufCIxkLWOqv0x6CiOCCIOVpMshE=
Subject key identifier: 1B:67:39:EC:E2:91:BB:EC:BF:A1:2D:8E:B4:48:0D:0F:BC:48:7B:87
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 01A0D83BDB50684C138F098DC75A9B859D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 11:03:16 +0000
Manifest this update: Fri 25 Sep 2026 11:03:16 +0000
Manifest next update: Sat 26 Sep 2026 11:03:16 +0000
Files and hashes: 1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: sEW2ZUXvnNMWxsbShihx8h0w25sWItxidRYJv79kn6Q=)
3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:db:50:68:4c:13:8f:09:8d:c7:5a:9b:85:9d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Sep 25 11:03:16 2026 GMT
Not After : Sep 26 11:03:16 2026 GMT
Subject: CN=1b6739ece291bbecbfa12d8eb4480d0fbc487b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:b5:d1:52:8c:28:39:cb:29:1c:2a:31:f2:
52:86:c4:ed:a4:98:1e:9f:85:ec:6e:b5:1e:51:f2:
41:3f:d7:9d:7e:60:c6:03:77:af:cf:cc:fa:65:71:
13:f1:87:ca:74:38:0b:01:90:16:ac:3e:42:72:e0:
d5:ba:e8:0c:85:bb:28:49:6e:b4:3f:50:c5:b7:5f:
21:1c:d7:bc:30:3c:8b:01:8e:90:2c:f4:10:8f:6e:
dd:b0:61:f5:66:02:75:1f:02:f6:15:1f:4f:81:74:
61:49:be:d4:7d:98:f0:35:e3:6e:08:84:03:91:49:
1f:a8:b9:18:36:c9:7f:d8:5a:b5:b6:19:c5:0e:69:
a4:f5:d2:58:7a:3e:bd:84:1f:7a:35:24:80:71:95:
5d:4c:e3:7c:ed:6d:bf:23:6b:41:3b:12:ff:77:d5:
12:4f:be:9a:ea:75:74:98:45:c7:42:2d:b3:72:f9:
92:75:94:0a:02:be:59:be:1e:21:1f:e0:ac:92:b5:
19:c4:6d:5a:a3:1e:2b:7e:92:4a:82:54:c2:64:54:
a3:88:55:dc:21:fb:04:ba:23:af:60:11:54:4a:24:
0e:d0:5f:dd:1f:6b:ab:c3:92:59:b7:cb:7f:ff:e5:
1a:a4:08:71:1e:6c:53:df:d3:5f:2c:eb:a0:5b:13:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:67:39:EC:E2:91:BB:EC:BF:A1:2D:8E:B4:48:0D:0F:BC:48:7B:87
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8e:ea:5e:a7:7c:39:ab:ba:8a:7c:1d:06:7d:2a:b4:8d:bd:
8c:a0:0c:c8:ec:6d:43:e6:ff:b2:6b:a3:36:d7:2b:c4:fc:69:
bd:d7:f0:bf:fc:34:6a:a1:55:d6:b6:42:5c:88:ef:8d:e7:37:
f0:79:00:61:1d:2c:eb:c1:93:a3:f1:d5:6c:0d:71:2b:0e:a5:
d3:72:a6:ba:5c:3f:6d:03:57:eb:9e:95:48:77:54:3f:09:66:
2e:81:79:13:cd:92:33:7d:cd:59:3b:10:c4:85:e0:7b:b4:41:
ab:f9:0b:7f:ad:15:87:33:06:7f:0c:7d:fb:c3:94:5b:47:35:
20:c2:e5:2c:2a:9a:f7:77:a1:ec:c3:21:7b:0b:f8:0c:78:a4:
34:bc:24:37:d8:19:f6:cf:a2:92:82:72:74:f3:03:91:66:19:
a0:af:68:60:9f:00:1e:1f:d0:ec:30:20:1c:fe:3c:88:dc:db:
77:8a:ba:6e:aa:85:57:a1:8d:16:ed:c7:93:06:d9:43:5d:ed:
d9:e6:eb:1b:5b:9e:a0:34:28:2c:e9:c7:e4:5e:5b:2d:05:38:
84:fd:a7:cb:a5:e2:15:d3:33:9e:99:6a:12:73:3f:47:53:d2:
b8:15:67:1b:d7:9c:7c:24:88:3b:d4:b8:1e:e7:66:5d:12:41:
60:29:ae:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYO9tQaEwTjwmNx1qbhZ1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTE3ODJiNmFmYmE3YzZiY2YwNzBiOTNmZWQ0Y2M4NGFm
NDEzNTIwHhcNMjYwOTI1MTEwMzE2WhcNMjYwOTI2MTEwMzE2WjAzMTEwLwYDVQQD
EygxYjY3MzllY2UyOTFiYmVjYmZhMTJkOGViNDQ4MGQwZmJjNDg3Yjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsO10VKMKDnLKRwqMfJShsTtpJge
n4XsbrUeUfJBP9edfmDGA3evz8z6ZXET8YfKdDgLAZAWrD5CcuDVuugMhbsoSW60
P1DFt18hHNe8MDyLAY6QLPQQj27dsGH1ZgJ1HwL2FR9PgXRhSb7UfZjwNeNuCIQD
kUkfqLkYNsl/2Fq1thnFDmmk9dJYej69hB96NSSAcZVdTON87W2/I2tBOxL/d9US
T76a6nV0mEXHQi2zcvmSdZQKAr5Zvh4hH+CskrUZxG1aox4rfpJKglTCZFSjiFXc
IfsEuiOvYBFUSiQO0F/dH2urw5JZt8t//+UapAhxHmxT39NfLOugWxNqyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtnOezikbvsv6EtjrRIDQ+8SHuHMB8GA1UdIwQY
MBaAFDuheCtq+6fGvPBwuT/tTMhK9BNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEt
YWU5NjdkNzM5ZGQzLzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEtYWU5NjdkNzM5ZGQz
LzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQI7qXqd8
Oau6inwdBn0qtI29jKAMyOxtQ+b/smujNtcrxPxpvdfwv/w0aqFV1rZCXIjvjec3
8HkAYR0s68GTo/HVbA1xKw6l03Kmulw/bQNX656VSHdUPwlmLoF5E82SM33NWTsQ
xIXge7RBq/kLf60VhzMGfwx9+8OUW0c1IMLlLCqa93eh7MMhewv4DHikNLwkN9gZ
9s+ikoJydPMDkWYZoK9oYJ8AHh/Q7DAgHP48iNzbd4q6bqqFV6GNFu3HkwbZQ13t
2ebrG1ueoDQoLOnH5F5bLQU4hP2ny6XiFdMznplqEnM/R1PSuBVnG9ecfCSIO9S4
HudmXRJBYCmunw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:17:44 2026 by rpki-client