Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json)
Hash identifier: TIXWrs2mS8n2knjYGMaVr/+K3TqhP/PPa8MnGF/isSY=
Subject key identifier: 1B:62:5A:C4:C4:35:2A:25:7F:19:86:BD:53:C8:31:A1:A9:C4:8F:79
Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Certificate serial: 019FAD1B060113C8C4A023BD2BD8D8FD12FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
Manifest number: 0305
Signing time: Wed 29 Jul 2026 09:00:57 +0000
Manifest this update: Wed 29 Jul 2026 09:00:57 +0000
Manifest next update: Thu 30 Jul 2026 09:00:57 +0000
Files and hashes: 1: hRuDhXhX54qw1wEPjhcbUnyv6xs.roa (hash: TAW6RX8CSvyYletMRNoT2k5BjZvitleWVxLZc1Ntn/4=)
2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: 8IiVR/0BRy+to6+4dHHWMR/FX4uKEjA+m5N2cpESRjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:06:01:13:c8:c4:a0:23:bd:2b:d8:d8:fd:12:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Validity
Not Before: Jul 29 09:00:57 2026 GMT
Not After : Jul 30 09:00:57 2026 GMT
Subject: CN=1b625ac4c4352a257f1986bd53c831a1a9c48f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:3b:41:61:b9:df:e4:d9:47:08:b6:44:fd:
b6:5d:70:99:10:d7:a1:6c:3b:8e:59:eb:e4:8b:20:
76:66:12:db:97:54:46:de:b9:29:73:58:d5:44:57:
84:8b:c2:31:c4:36:76:12:46:69:6e:30:8e:f4:dd:
3e:f5:d0:96:63:a2:84:a1:f1:31:a1:96:5b:13:8d:
01:d6:fc:a6:5c:b1:c1:80:25:f4:5c:00:54:fb:37:
b0:21:ec:30:89:65:f1:96:a4:e9:32:e2:c3:b6:7d:
38:8c:78:d6:07:cf:85:4c:47:44:f2:ce:44:8c:e8:
94:f2:68:f7:f5:1b:f3:61:1e:71:8f:13:0a:39:76:
af:f5:71:a2:e1:3b:1e:4b:9f:13:b3:6e:f5:b7:e0:
28:52:40:44:b0:d7:2b:78:d1:9a:53:d6:b1:f1:73:
c5:63:fd:2f:dc:75:3a:00:89:03:5e:a6:1a:ab:3b:
6c:27:0a:73:d0:ca:f3:43:ef:bf:0d:96:89:ba:84:
57:d2:16:27:d9:5c:be:e9:52:a3:e8:d4:58:70:89:
0a:ff:8d:db:8b:c4:36:d9:14:ea:7c:a0:92:d3:27:
96:3d:c2:1d:f5:c3:95:2b:a0:48:7a:ae:92:4d:e3:
f7:3a:18:9c:1d:2c:a2:95:f2:7f:f2:2a:25:ae:eb:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:62:5A:C4:C4:35:2A:25:7F:19:86:BD:53:C8:31:A1:A9:C4:8F:79
X509v3 Authority Key Identifier:
keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1a:53:d9:fa:bf:51:d5:3a:44:24:45:d1:c6:7f:49:09:91:
f1:aa:2f:fe:43:4d:80:00:ef:f5:51:26:05:f4:c5:3b:14:17:
c6:1a:88:a5:b4:9b:f1:65:73:24:0b:6f:66:d3:60:ab:65:23:
63:10:a5:0c:44:72:e8:8b:2f:12:0c:93:f4:61:91:27:06:aa:
f5:e0:53:f4:3a:85:00:47:12:b4:b5:53:fa:52:7a:88:e0:66:
c9:d8:9c:a1:a1:c7:b0:f7:dd:28:fb:8f:01:a4:bc:38:d6:cd:
3d:84:41:fe:74:68:92:c1:5f:77:14:78:db:87:3d:5c:b0:ae:
b9:7e:68:ee:f9:9e:35:53:46:ce:45:32:39:b7:01:55:29:36:
79:a3:c9:92:e4:77:bd:ef:54:59:c7:bb:4d:e1:fb:20:39:87:
f4:83:e0:91:ed:ca:db:c6:73:90:d0:3c:9e:00:26:51:73:7c:
b8:56:c7:00:bd:f5:71:a8:9c:0c:13:b0:76:07:91:e1:7a:95:
bc:bf:3a:e5:d3:74:f1:97:f8:29:92:60:31:6b:09:e4:d2:97:
23:54:61:e1:eb:e4:a3:d8:67:88:7d:c6:8b:5f:72:e1:91:3c:
14:f5:cf:3b:46:a9:51:c0:13:f3:81:01:b3:75:a6:f2:a7:d0:
4f:5d:73:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGwYBE8jEoCO9K9jY/RL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjlmNGI3OGNjNGQ5MzVmYjFmMzliYmRlY2M4YTQxM2Iw
ZmFmOWQwHhcNMjYwNzI5MDkwMDU3WhcNMjYwNzMwMDkwMDU3WjAzMTEwLwYDVQQD
EygxYjYyNWFjNGM0MzUyYTI1N2YxOTg2YmQ1M2M4MzFhMWE5YzQ4Zjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5U7QWG53+TZRwi2RP22XXCZENeh
bDuOWevkiyB2ZhLbl1RG3rkpc1jVRFeEi8IxxDZ2EkZpbjCO9N0+9dCWY6KEofEx
oZZbE40B1vymXLHBgCX0XABU+zewIewwiWXxlqTpMuLDtn04jHjWB8+FTEdE8s5E
jOiU8mj39RvzYR5xjxMKOXav9XGi4TseS58Ts271t+AoUkBEsNcreNGaU9ax8XPF
Y/0v3HU6AIkDXqYaqztsJwpz0MrzQ++/DZaJuoRX0hYn2Vy+6VKj6NRYcIkK/43b
i8Q22RTqfKCS0yeWPcId9cOVK6BIeq6STeP3OhicHSyilfJ/8iolrusbxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtiWsTENSolfxmGvVPIMaGpxI95MB8GA1UdIwQY
MBaAFKNp9LeMxNk1+x85u97MikE7D6+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUt
YjBhZGVjOTM0NjcxLzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUtYjBhZGVjOTM0Njcx
LzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERpT2fq/
UdU6RCRF0cZ/SQmR8aov/kNNgADv9VEmBfTFOxQXxhqIpbSb8WVzJAtvZtNgq2Uj
YxClDERy6IsvEgyT9GGRJwaq9eBT9DqFAEcStLVT+lJ6iOBmydicoaHHsPfdKPuP
AaS8ONbNPYRB/nRoksFfdxR424c9XLCuuX5o7vmeNVNGzkUyObcBVSk2eaPJkuR3
ve9UWce7TeH7IDmH9IPgke3K28ZzkNA8ngAmUXN8uFbHAL31caicDBOwdgeR4XqV
vL865dN08Zf4KZJgMWsJ5NKXI1Rh4evko9hniH3Gi19y4ZE8FPXPO0apUcAT84EB
s3Wm8qfQT11zgw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:22:22 2026 by rpki-client