Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
File: O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json)
Hash identifier: 0O4qp7xw6qtrm1T2LnLcExB6ApUuORqAnxdwpg7Dk2s=
Subject key identifier: FC:4D:63:4A:FF:E1:70:A4:3B:23:F7:28:5F:B4:2F:CC:84:57:84:C5
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 01A0BF1E5F3739F9BB6207C2E7ADC74B1D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
Manifest number: 14CA
Signing time: Sun 20 Sep 2026 14:00:33 +0000
Manifest this update: Sun 20 Sep 2026 14:00:33 +0000
Manifest next update: Mon 21 Sep 2026 14:00:33 +0000
Files and hashes: 1: 6J5zq7acHeCorGt2Kz1SRI8TBxw.roa (hash: QUb/O/uGMs7lP+6gaahFi67OYlrRZUT6YWqd/feI1TU=)
2: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: ytMQHjN5CzlDMBvyBfeR+jdYWVt6QpWcWxS68FuAGLE=)
3: SAEHlpuu2VHfT1gYOBIDmp8YrI0.roa (hash: f+Ly+ugjS2e2LTdlARUIcZJrF9Q/kNyEBJzeeNxkntA=)
4: l8nJcuD4rGZxCdIYInml3vohntk.roa (hash: eU3RnT3IPn87hTAFydZwwQYkYydG1vHyM8wmqGF1vjs=)
5: n7VSYaUgna6BrvfvQJiTcoRPzQk.roa (hash: M0u1q9q0trXFDUH6vNkVVYgYyDRJLjrO4qxwE6RvEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:5f:37:39:f9:bb:62:07:c2:e7:ad:c7:4b:1d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: Sep 20 14:00:33 2026 GMT
Not After : Sep 21 14:00:33 2026 GMT
Subject: CN=fc4d634affe170a43b23f7285fb42fcc845784c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:a6:21:24:2b:78:98:a0:03:be:cb:5e:dc:
ce:8b:93:65:c7:b6:7d:a2:7b:c8:49:60:a4:7d:6f:
27:09:57:f7:aa:af:38:35:5f:cd:9c:a9:bc:c8:60:
01:28:83:13:2c:13:76:93:9e:db:2f:1a:39:7e:ce:
db:49:9b:64:0d:69:07:44:bd:be:af:97:6b:98:4b:
83:eb:77:fe:19:c7:33:82:5e:41:db:7c:e8:41:37:
91:f4:d2:6d:88:43:d6:50:c6:1f:99:86:eb:3e:79:
e4:0b:fa:bd:c5:7c:f0:52:13:00:e3:e1:7c:65:0d:
bd:53:8f:34:5e:93:65:b2:97:ec:7f:73:d3:6e:bb:
f2:9c:ef:34:42:92:74:e6:53:6c:c0:26:fb:1e:fb:
85:1d:50:bb:88:3a:cb:d7:17:3b:45:33:16:c2:5b:
bb:ac:3c:60:34:e9:ba:61:0b:6d:cb:c5:87:c5:c6:
68:11:48:94:e1:07:f6:b2:b1:58:bd:90:ad:d5:87:
18:70:e7:63:b1:21:96:9d:75:25:9e:0d:11:56:28:
42:82:8d:30:1e:16:b8:d2:fc:5f:fc:36:bb:a9:4b:
c0:0e:3b:b4:91:82:a0:6b:fe:79:e9:45:0a:aa:b9:
8f:5e:34:ea:8f:b3:d4:61:4b:07:e8:aa:6d:62:70:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4D:63:4A:FF:E1:70:A4:3B:23:F7:28:5F:B4:2F:CC:84:57:84:C5
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:57:a0:bd:92:91:68:8d:87:df:00:3c:9a:e5:5c:69:71:23:
c9:4f:f7:eb:b7:92:4b:7c:82:77:4d:de:db:94:f1:80:0d:4d:
bf:a9:b1:f9:d7:4a:9e:8d:03:f1:6f:a6:a3:d1:63:73:19:59:
18:9e:11:68:a5:e7:61:a2:1e:15:9c:5f:5a:c8:47:91:f8:b9:
a1:da:07:01:d7:f8:5c:46:76:e5:b8:ff:68:5b:45:4b:80:62:
b7:14:72:9e:7d:27:fa:0d:ce:2b:4c:8f:b9:43:b4:39:22:99:
d2:5d:e2:b2:18:41:3a:e4:99:36:24:8a:5a:6e:d9:7d:7b:69:
a5:2a:dc:b5:10:2e:50:7a:51:4d:fe:ae:d2:db:a8:b7:74:05:
b5:b9:51:8f:c9:37:5b:b9:fb:fb:d9:04:5f:df:f2:db:f8:0b:
34:5c:a2:2d:20:58:41:bf:7e:36:40:9a:19:bd:82:66:e2:14:
f8:88:93:a1:71:ad:c8:00:19:a8:4c:95:d9:18:23:c0:f6:a6:
ce:32:94:09:b7:45:36:8f:f9:00:e1:b2:b2:67:36:7f:9d:39:
66:30:fa:7f:97:0e:5d:e4:8b:e2:46:ef:a0:df:dd:51:47:65:
c9:d8:90:dd:85:90:c2:68:ac:b6:35:67:17:f0:39:77:59:64:
dd:74:fa:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/Hl83Ofm7YgfC563HSx2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOGZlMjQ2NTg0MzAzMWI3NzhiYjhkOGI3YmQzNWEwOTRm
Y2NmNDgwHhcNMjYwOTIwMTQwMDMzWhcNMjYwOTIxMTQwMDMzWjAzMTEwLwYDVQQD
EyhmYzRkNjM0YWZmZTE3MGE0M2IyM2Y3Mjg1ZmI0MmZjYzg0NTc4NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroOmISQreJigA77LXtzOi5Nlx7Z9
onvISWCkfW8nCVf3qq84NV/NnKm8yGABKIMTLBN2k57bLxo5fs7bSZtkDWkHRL2+
r5drmEuD63f+Gcczgl5B23zoQTeR9NJtiEPWUMYfmYbrPnnkC/q9xXzwUhMA4+F8
ZQ29U480XpNlspfsf3PTbrvynO80QpJ05lNswCb7HvuFHVC7iDrL1xc7RTMWwlu7
rDxgNOm6YQtty8WHxcZoEUiU4Qf2srFYvZCt1YcYcOdjsSGWnXUlng0RVihCgo0w
Hha40vxf/Da7qUvADju0kYKga/556UUKqrmPXjTqj7PUYUsH6KptYnDrBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxNY0r/4XCkOyP3KF+0L8yEV4TFMB8GA1UdIwQY
MBaAFDuP4kZYQwMbd4u42Le9NaCU/M9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2Mt
N2MzNTAwNmUwN2ExLzEvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2MtN2MzNTAwNmUwN2Ex
LzEvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1egvZKR
aI2H3wA8muVcaXEjyU/367eSS3yCd03e25TxgA1Nv6mx+ddKno0D8W+mo9FjcxlZ
GJ4RaKXnYaIeFZxfWshHkfi5odoHAdf4XEZ25bj/aFtFS4BitxRynn0n+g3OK0yP
uUO0OSKZ0l3ishhBOuSZNiSKWm7ZfXtppSrctRAuUHpRTf6u0tuot3QFtblRj8k3
W7n7+9kEX9/y2/gLNFyiLSBYQb9+NkCaGb2CZuIU+IiToXGtyAAZqEyV2RgjwPam
zjKUCbdFNo/5AOGysmc2f505ZjD6f5cOXeSL4kbvoN/dUUdlydiQ3YWQwmistjVn
F/A5d1lk3XT6FA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:58:26 2026 by rpki-client