Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: DVOSu/oW7JkRHBFs/69Xhi8iRFzKa+kikqYCzbTMjkg=
Subject key identifier: 00:6A:6D:54:BA:AB:58:6C:1A:F9:B6:AC:3B:BF:57:7D:2B:2E:F0:92
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 019CB0FFE25133DECB0D207FFCB50EF607DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 0237
Signing time: Tue 03 Mar 2026 00:01:25 +0000
Manifest this update: Tue 03 Mar 2026 00:01:25 +0000
Manifest next update: Wed 04 Mar 2026 00:01:25 +0000
Files and hashes: 1: IZRU9aitBtasi5s8LfvUyXF6gJI.roa (hash: A+EvTFUEfhqDufK4w5HaH/h/6GcXexGhKX2pAinc5hA=)
2: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: Qr4tykCGtKLMWMarP9bYHZz+lUPfyjf1HP/9PndUh/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ff:e2:51:33:de:cb:0d:20:7f:fc:b5:0e:f6:07:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Mar 3 00:01:25 2026 GMT
Not After : Mar 4 00:01:25 2026 GMT
Subject: CN=006a6d54baab586c1af9b6ac3bbf577d2b2ef092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:c1:6f:2e:e8:53:41:d4:0f:37:cd:52:d5:
f5:7d:ab:37:5e:02:dd:13:de:2e:e9:b1:13:35:d1:
cf:ab:f5:f6:15:f5:6a:b6:21:99:58:db:88:72:cf:
04:25:06:2a:8a:56:2f:18:50:94:ee:37:b3:ef:63:
66:93:0e:45:f1:36:57:41:4e:25:ae:bc:23:4b:c3:
b4:43:75:05:bc:ff:d9:d2:40:ab:ab:54:05:50:e4:
9b:48:af:df:a3:2c:40:f4:61:8d:b7:d0:b9:da:0a:
b5:ab:1a:05:f7:65:ee:11:eb:e4:63:b4:d7:c6:95:
ee:06:8c:75:f3:0d:e0:e8:ac:4c:fc:5a:c1:04:e0:
72:8c:37:52:95:72:fe:9a:aa:24:4d:0f:9a:f2:6f:
39:eb:8c:2c:3c:12:fa:f7:19:46:5d:c8:6d:9c:5b:
7e:1d:56:a5:21:74:77:8e:f2:11:64:16:80:56:86:
4b:2a:a9:46:f5:4e:8e:c3:80:10:da:0b:cb:86:0f:
58:48:7f:d6:e0:e8:b8:21:fc:f7:6e:a5:e4:85:f5:
be:6c:60:43:ff:49:d1:12:1d:ed:dd:2a:1f:b8:17:
24:27:11:5c:f0:00:fe:fa:fc:bc:9b:29:f1:ad:10:
79:29:79:8b:d9:46:3b:57:ec:74:86:86:eb:e3:49:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6A:6D:54:BA:AB:58:6C:1A:F9:B6:AC:3B:BF:57:7D:2B:2E:F0:92
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:55:53:53:5e:81:c9:96:73:1c:3c:a6:de:93:a9:0c:d0:bb:
8f:6c:8e:1f:4e:ac:2a:9f:db:c0:23:f8:16:bf:db:f7:94:30:
6f:c2:c5:0d:07:bc:cb:47:df:27:27:d6:2e:41:8b:b0:0a:d6:
5c:a4:28:ff:4c:d0:4f:14:fe:63:79:ae:85:70:b8:e1:59:68:
d8:e4:e3:b3:15:d1:8f:ec:1e:a7:3a:9f:d5:13:b5:6a:52:87:
d6:ee:0b:76:2c:35:33:a2:67:e9:a3:cd:9b:91:5c:9a:a4:50:
54:89:4f:d7:1a:0e:18:c2:c9:7e:dd:30:c6:6d:dd:aa:08:95:
48:ff:71:12:71:2e:17:3b:53:e7:b8:84:f2:3d:12:9e:ac:43:
8c:16:27:10:c4:58:57:68:ca:1e:43:d8:49:cd:6c:4f:c0:b8:
07:a7:5c:e0:20:fd:32:63:5d:1b:0a:83:36:30:31:c7:0b:20:
5c:95:e1:42:dd:e6:bd:bf:18:b9:7b:f8:1c:c3:ae:bb:1a:88:
d0:d8:ce:86:e1:2a:5e:7c:fb:31:dd:42:07:83:21:6b:f6:cd:
80:6d:09:7a:30:0c:d5:e8:44:f9:42:7d:73:11:49:ad:fd:8b:
e9:0d:8a:62:2b:97:39:ad:79:4f:16:02:c7:05:12:17:96:19:
40:92:27:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyw/+JRM97LDSB//LUO9gfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWI2NzBlODE0NmVmNTI3NGFlNDVlYjMwZDI5ZTk3MDA2
NWJhMmMwHhcNMjYwMzAzMDAwMTI1WhcNMjYwMzA0MDAwMTI1WjAzMTEwLwYDVQQD
EygwMDZhNmQ1NGJhYWI1ODZjMWFmOWI2YWMzYmJmNTc3ZDJiMmVmMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4LBby7oU0HUDzfNUtX1fas3XgLd
E94u6bETNdHPq/X2FfVqtiGZWNuIcs8EJQYqilYvGFCU7jez72Nmkw5F8TZXQU4l
rrwjS8O0Q3UFvP/Z0kCrq1QFUOSbSK/foyxA9GGNt9C52gq1qxoF92XuEevkY7TX
xpXuBox18w3g6KxM/FrBBOByjDdSlXL+mqokTQ+a8m8564wsPBL69xlGXchtnFt+
HValIXR3jvIRZBaAVoZLKqlG9U6Ow4AQ2gvLhg9YSH/W4Oi4Ifz3bqXkhfW+bGBD
/0nREh3t3SofuBckJxFc8AD++vy8mynxrRB5KXmL2UY7V+x0hobr40kQ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABqbVS6q1hsGvm2rDu/V30rLvCSMB8GA1UdIwQY
MBaAFKOrZw6BRu9SdK5F6zDSnpcAZbosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMDE1NzYtYTQxMy00NzEyLTlmMzIt
NjBkNWJlMWI3ZGE5LzEvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jMDE1NzYtYTQxMy00NzEyLTlmMzItNjBkNWJlMWI3ZGE5
LzEvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlVTU16B
yZZzHDym3pOpDNC7j2yOH06sKp/bwCP4Fr/b95Qwb8LFDQe8y0ffJyfWLkGLsArW
XKQo/0zQTxT+Y3muhXC44Vlo2OTjsxXRj+wepzqf1RO1alKH1u4Ldiw1M6Jn6aPN
m5FcmqRQVIlP1xoOGMLJft0wxm3dqgiVSP9xEnEuFztT57iE8j0SnqxDjBYnEMRY
V2jKHkPYSc1sT8C4B6dc4CD9MmNdGwqDNjAxxwsgXJXhQt3mvb8YuXv4HMOuuxqI
0NjOhuEqXnz7Md1CB4Mha/bNgG0JejAM1ehE+UJ9cxFJrf2L6Q2KYiuXOa15TxYC
xwUSF5YZQJInWw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 09:44:12 2026 by rpki-client