Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: vxz2ji4l98bP/ZRO6Ua5E+SPFSCuJbcIVZ06yqxVF8g=
Subject key identifier: 99:31:30:0B:2D:F3:C4:60:27:D6:E4:F2:CE:E6:61:C7:B5:FA:F2:CB
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 019CAA5936BA24F0B413E0F7B108EE7AAFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 17:01:38 +0000
Manifest this update: Sun 01 Mar 2026 17:01:38 +0000
Manifest next update: Mon 02 Mar 2026 17:01:38 +0000
Files and hashes: 1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: CSDT3hRUE9FUg01LZNPrzbDyUhsRoghaxOhXwKLanzY=)
3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:36:ba:24:f0:b4:13:e0:f7:b1:08:ee:7a:af:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Mar 1 17:01:38 2026 GMT
Not After : Mar 2 17:01:38 2026 GMT
Subject: CN=9931300b2df3c46027d6e4f2cee661c7b5faf2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:08:5d:ea:ce:3c:2f:0a:35:bd:76:48:08:
d5:64:cc:75:3b:d2:33:c7:87:a2:3a:a2:62:f6:e3:
a9:fa:3b:4e:d6:46:a7:0f:84:37:2a:f9:bd:a7:ba:
65:7f:0f:57:0b:92:19:7e:15:a4:c1:89:c5:57:9d:
4b:7f:a5:87:16:e4:da:fa:3a:e1:89:97:12:49:30:
ea:e6:7f:77:f8:26:3a:8b:a5:cd:84:35:2a:6d:65:
4a:cd:e5:e2:b4:bd:a9:8b:f8:08:17:35:ae:d7:64:
b3:bb:33:fd:4a:fb:3b:76:49:30:fc:1f:46:10:80:
63:c6:4d:b2:90:63:5f:17:13:4a:55:87:b8:37:ad:
42:b5:b3:87:46:fb:24:bf:33:42:35:dc:7e:c5:64:
0d:e2:e9:b9:93:21:8c:ce:fb:47:1c:ab:3a:bc:48:
f3:0b:bc:8b:a8:9a:46:7a:e6:9d:13:f6:27:ab:bc:
66:ef:4d:2a:b8:0d:fa:c9:4d:00:09:8d:9c:90:3e:
01:32:6e:ba:dd:02:b8:34:bd:66:60:66:cc:95:e3:
c7:5b:c5:93:ae:8b:4e:65:f8:47:97:59:30:f5:b6:
f1:6a:3c:30:89:2c:89:8b:f3:c6:c9:3b:6f:00:c2:
d9:e1:2e:e9:12:e2:22:a0:b6:f2:d7:8d:97:f2:5c:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:31:30:0B:2D:F3:C4:60:27:D6:E4:F2:CE:E6:61:C7:B5:FA:F2:CB
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:86:74:5d:b6:ae:77:cf:99:72:a5:c5:33:1f:f0:56:be:e2:
be:cc:1a:b3:b2:e5:22:11:f8:77:0f:af:67:38:45:50:73:53:
76:85:45:d2:5d:6f:0a:73:d6:72:20:63:0f:56:d1:a1:ea:34:
b3:3e:8b:57:88:74:5e:38:32:cb:26:6e:11:1e:c7:15:c8:d6:
1a:ec:9c:86:8c:f7:1a:ba:03:d3:bb:06:39:a6:e4:cc:40:f2:
9e:3f:bb:7a:d4:6c:26:88:62:98:f4:67:75:42:4b:5c:dd:1c:
73:45:92:75:7d:b6:75:c0:52:d7:dd:54:84:a6:d3:a8:fc:0b:
49:35:33:94:a9:39:69:cd:62:b0:b9:0a:2a:b6:20:93:4f:cc:
42:e9:e0:8c:31:a6:89:52:eb:bc:71:1d:46:ae:25:d2:89:ef:
dc:ec:06:67:f4:83:ba:e6:3a:57:b6:5f:3f:1b:62:5a:08:66:
53:01:08:cf:4b:1f:bd:3a:10:c9:8e:f6:0f:03:f1:90:9f:d3:
41:59:1d:06:ea:1a:33:19:77:8c:c6:3b:ab:54:7e:85:86:46:
5a:5c:73:de:27:6a:44:8a:10:db:c4:dd:81:40:8a:e4:11:b1:
ad:e9:03:e9:1f:ef:6b:07:a9:7c:f1:fc:39:31:90:42:35:93:
1d:2a:0b:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWTa6JPC0E+D3sQjueq+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTE3ODJiNmFmYmE3YzZiY2YwNzBiOTNmZWQ0Y2M4NGFm
NDEzNTIwHhcNMjYwMzAxMTcwMTM4WhcNMjYwMzAyMTcwMTM4WjAzMTEwLwYDVQQD
Eyg5OTMxMzAwYjJkZjNjNDYwMjdkNmU0ZjJjZWU2NjFjN2I1ZmFmMmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4AIXerOPC8KNb12SAjVZMx1O9Iz
x4eiOqJi9uOp+jtO1kanD4Q3Kvm9p7plfw9XC5IZfhWkwYnFV51Lf6WHFuTa+jrh
iZcSSTDq5n93+CY6i6XNhDUqbWVKzeXitL2pi/gIFzWu12SzuzP9Svs7dkkw/B9G
EIBjxk2ykGNfFxNKVYe4N61CtbOHRvskvzNCNdx+xWQN4um5kyGMzvtHHKs6vEjz
C7yLqJpGeuadE/Ynq7xm700quA36yU0ACY2ckD4BMm663QK4NL1mYGbMlePHW8WT
rotOZfhHl1kw9bbxajwwiSyJi/PGyTtvAMLZ4S7pEuIioLby142X8lzmeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkxMAst88RgJ9bk8s7mYce1+vLLMB8GA1UdIwQY
MBaAFDuheCtq+6fGvPBwuT/tTMhK9BNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEt
YWU5NjdkNzM5ZGQzLzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEtYWU5NjdkNzM5ZGQz
LzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIZ0Xbau
d8+ZcqXFMx/wVr7ivswas7LlIhH4dw+vZzhFUHNTdoVF0l1vCnPWciBjD1bRoeo0
sz6LV4h0XjgyyyZuER7HFcjWGuychoz3GroD07sGOabkzEDynj+7etRsJohimPRn
dUJLXN0cc0WSdX22dcBS191UhKbTqPwLSTUzlKk5ac1isLkKKrYgk0/MQungjDGm
iVLrvHEdRq4l0onv3OwGZ/SDuuY6V7ZfPxtiWghmUwEIz0sfvToQyY72DwPxkJ/T
QVkdBuoaMxl3jMY7q1R+hYZGWlxz3idqRIoQ28TdgUCK5BGxrekD6R/vawepfPH8
OTGQQjWTHSoLrA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:28 2026 by rpki-client