Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: 6P+nsxpXleJktj9YZjAaqBcVfzTKBdJRR/BqhG+Aa8E=
Subject key identifier: E8:00:B4:2B:6B:93:D0:26:C0:F3:F6:56:04:7A:BB:9A:0D:BB:A0:43
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 019CAB6B71026316216794602FEAE023D6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:01:11 +0000
Manifest this update: Sun 01 Mar 2026 22:01:11 +0000
Manifest next update: Mon 02 Mar 2026 22:01:11 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: clIHpr5Ta45h4i6IHjItz+kKWQnjox0KEGRtdlUtD/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:71:02:63:16:21:67:94:60:2f:ea:e0:23:d6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Mar 1 22:01:11 2026 GMT
Not After : Mar 2 22:01:11 2026 GMT
Subject: CN=e800b42b6b93d026c0f3f656047abb9a0dbba043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:a4:71:dc:30:37:4c:67:c7:c2:93:9f:c7:
6e:62:61:02:86:2a:8b:34:a8:c3:72:01:b6:35:9a:
65:5e:69:d4:7e:85:32:29:04:6e:76:6b:cf:49:f0:
b4:33:af:4e:00:84:62:cb:0c:11:ef:7c:f2:b7:86:
7a:4f:59:f8:9a:f1:7b:2d:d0:da:10:46:57:6d:9b:
9f:2d:b6:bc:9d:ba:aa:6d:e4:f9:6e:41:dc:14:f2:
d2:c2:0f:b8:fc:e3:b8:9d:94:21:db:24:ef:3b:85:
6e:eb:c2:61:05:62:f0:44:1a:88:04:c9:dc:d0:45:
f5:73:f9:60:c9:7b:c4:d3:07:3c:e9:f6:61:f0:10:
88:a4:59:af:ec:9c:74:71:5b:ce:78:9a:9d:06:58:
03:9f:50:9b:7d:f5:64:33:0d:48:89:7b:d1:42:76:
a8:ad:e9:39:33:be:1c:a8:60:43:af:32:58:b1:b4:
d7:05:34:90:5e:4d:11:8b:47:6b:af:1d:68:61:0a:
ae:a9:0c:e0:3c:9c:dc:c6:7f:ac:e8:5a:7a:cf:10:
bf:6e:5f:31:4d:62:23:61:12:f3:d4:8f:74:a4:01:
1c:29:42:71:4c:eb:15:bb:1f:6b:a4:68:5c:bf:3e:
73:21:7d:a1:7b:0e:1e:9e:d9:d7:e4:64:92:f0:7c:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:00:B4:2B:6B:93:D0:26:C0:F3:F6:56:04:7A:BB:9A:0D:BB:A0:43
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:93:d6:bb:4d:b3:84:44:50:2a:5d:1f:51:f2:3c:44:13:81:
98:f8:9e:30:b7:4c:fb:58:90:8c:81:14:32:d3:0a:2f:f2:f1:
d5:c2:10:09:03:66:c1:50:f8:54:31:ff:a3:bb:20:3f:18:06:
ce:55:62:ea:9e:db:68:b3:8c:5d:2b:7a:74:53:b3:03:5a:ba:
35:ac:6c:db:7e:b9:40:05:86:db:dc:95:71:60:38:1b:68:3e:
11:a8:b7:44:3d:48:b8:e9:bd:2b:01:ed:1b:0d:cd:cb:74:d1:
42:1e:ea:6d:16:bf:b1:3c:29:aa:43:d3:a1:e4:b0:2b:a0:d8:
89:94:30:76:e3:af:39:2e:cb:51:f2:3f:6d:a8:f2:81:4d:31:
ad:f2:40:a3:a9:12:9c:11:cc:a0:70:f5:27:4b:31:14:69:66:
87:9c:60:4b:bb:07:ca:bd:1f:13:0a:c1:1e:54:40:6d:5a:08:
87:b6:69:0e:b9:57:ea:3c:36:50:65:dc:ad:9f:74:86:a7:fb:
2f:dd:f4:9b:22:de:f6:5f:57:38:bd:54:7c:91:cb:1e:e5:67:
45:ff:ba:9a:35:36:8b:1e:ac:16:37:bd:0d:82:86:ec:d3:38:
fa:4d:6c:64:87:22:3a:29:7a:1f:d6:e2:29:aa:6b:2a:a1:30:
86:a4:d3:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra3ECYxYhZ5RgL+rgI9a9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTU1NjA0NTk3YjA2YjBlYWNlODhhZmIxYTkwZmZmOTM3
ZDk3ZWEwHhcNMjYwMzAxMjIwMTExWhcNMjYwMzAyMjIwMTExWjAzMTEwLwYDVQQD
EyhlODAwYjQyYjZiOTNkMDI2YzBmM2Y2NTYwNDdhYmI5YTBkYmJhMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU2kcdwwN0xnx8KTn8duYmEChiqL
NKjDcgG2NZplXmnUfoUyKQRudmvPSfC0M69OAIRiywwR73zyt4Z6T1n4mvF7LdDa
EEZXbZufLba8nbqqbeT5bkHcFPLSwg+4/OO4nZQh2yTvO4Vu68JhBWLwRBqIBMnc
0EX1c/lgyXvE0wc86fZh8BCIpFmv7Jx0cVvOeJqdBlgDn1CbffVkMw1IiXvRQnao
rek5M74cqGBDrzJYsbTXBTSQXk0Ri0drrx1oYQquqQzgPJzcxn+s6Fp6zxC/bl8x
TWIjYRLz1I90pAEcKUJxTOsVux9rpGhcvz5zIX2hew4entnX5GSS8HyYnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgAtCtrk9AmwPP2VgR6u5oNu6BDMB8GA1UdIwQY
MBaAFKOlVgRZewaw6s6Ir7GpD/+TfZfqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEt
ZmFjNGJiODNlZDI4LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEtZmFjNGJiODNlZDI4
LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZPWu02z
hERQKl0fUfI8RBOBmPieMLdM+1iQjIEUMtMKL/Lx1cIQCQNmwVD4VDH/o7sgPxgG
zlVi6p7baLOMXSt6dFOzA1q6Naxs2365QAWG29yVcWA4G2g+Eai3RD1IuOm9KwHt
Gw3Ny3TRQh7qbRa/sTwpqkPToeSwK6DYiZQwduOvOS7LUfI/bajygU0xrfJAo6kS
nBHMoHD1J0sxFGlmh5xgS7sHyr0fEwrBHlRAbVoIh7ZpDrlX6jw2UGXcrZ90hqf7
L930myLe9l9XOL1UfJHLHuVnRf+6mjU2ix6sFje9DYKG7NM4+k1sZIciOil6H9bi
KaprKqEwhqTTZg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:37 2026 by rpki-client