Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: WY3HtfsBep4soOjxD2fMamI0FDKieJlvQvbQV3d4WNQ=
Subject key identifier: AB:82:90:A0:49:53:AE:53:06:BF:B9:89:CC:D5:3B:86:8B:8C:5E:2D
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 019D9962044558337BC8EF778FFAD1315193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 1240
Signing time: Fri 17 Apr 2026 03:00:30 +0000
Manifest this update: Fri 17 Apr 2026 03:00:30 +0000
Manifest next update: Sat 18 Apr 2026 03:00:30 +0000
Files and hashes: 1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: bC08aokdmHSnEIBjtQEG4DbngLwbwknBNW29sT5Sw0Y=)
2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:04:45:58:33:7b:c8:ef:77:8f:fa:d1:31:51:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Apr 17 03:00:30 2026 GMT
Not After : Apr 18 03:00:30 2026 GMT
Subject: CN=ab8290a04953ae5306bfb989ccd53b868b8c5e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:30:39:3b:00:58:14:71:c4:69:cd:61:51:
e8:7e:5f:18:6b:b4:a9:8b:61:55:b3:3b:ad:3a:02:
2f:af:28:45:76:a2:45:46:8b:4b:ba:c5:dd:f6:b4:
c2:ef:06:90:51:b4:f4:ff:eb:4a:e1:35:7c:c0:ec:
68:ea:91:f0:e6:90:5d:43:12:a7:e4:38:5c:b2:82:
33:49:34:79:21:90:9d:4f:81:e7:71:ec:26:1f:71:
4c:7b:d3:ec:87:e0:25:ab:e3:30:2a:43:89:ac:39:
f4:b5:a4:20:7d:b2:1e:b1:10:9d:3e:09:f3:7d:4e:
9d:29:ab:95:82:5e:ea:28:18:50:1c:72:67:b3:9c:
ca:21:65:a4:93:00:0d:a7:98:ef:94:48:c5:60:a2:
19:a8:54:3e:2f:1a:7f:dc:7f:dc:51:f6:85:1d:ae:
7c:73:7d:41:5d:fe:3c:24:42:57:cf:e8:bd:60:fd:
2a:a5:b9:5a:2a:df:b8:8b:4e:94:b9:87:21:45:f9:
06:ee:15:5d:f6:2e:18:9f:17:af:0d:3d:51:70:7e:
88:8c:dd:ae:7f:67:82:77:ee:8b:13:f6:23:10:41:
ae:e8:93:a2:a7:59:57:20:f5:a8:b8:e0:d9:2d:48:
7d:93:45:fb:97:20:15:59:84:ac:54:da:50:c3:ce:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:82:90:A0:49:53:AE:53:06:BF:B9:89:CC:D5:3B:86:8B:8C:5E:2D
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7b:c6:ee:5b:b1:2b:9a:7e:3b:92:50:29:b2:54:8b:b8:3a:
20:83:d8:96:0c:f2:bf:1a:ce:3b:24:f4:c3:7d:af:d3:69:67:
31:32:d7:5f:4e:6a:62:73:48:db:af:c0:ab:99:b3:51:c6:d9:
9e:58:61:f1:ec:f3:da:bc:60:6e:3b:e0:ea:18:0e:bd:1e:b7:
fa:b5:ea:f3:e2:e9:4e:73:83:a6:5b:d1:02:0e:06:11:ab:a5:
68:77:a5:db:da:cc:89:03:31:6d:be:9a:86:cc:f5:df:f1:45:
82:b7:0b:42:14:d8:ab:39:2c:f4:e6:95:e8:92:e0:c7:37:85:
2a:2f:a1:34:84:d8:93:21:98:8c:02:a4:92:53:ba:61:ba:38:
c4:f9:2a:96:21:41:96:dd:5b:b7:f6:67:32:ac:dd:d3:e9:e7:
f1:c2:40:eb:43:45:fc:4d:f6:af:ec:56:77:cb:83:d2:18:49:
c1:61:dc:0e:f8:5a:b2:b9:7e:d2:45:f3:09:83:11:53:84:a6:
ca:d2:9a:83:9c:f7:9f:3c:67:75:91:69:b9:3e:30:68:0f:bf:
da:05:41:40:39:62:4f:bb:e7:9b:50:53:a6:06:14:86:e9:c4:
99:8c:4c:6b:02:a6:61:ca:56:99:49:72:5b:e4:be:ae:e9:24:
71:fd:6e:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYgRFWDN7yO93j/rRMVGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTM5ZjFkYjg1OGIxNTVmMjViYzM0Mzc1OWY1YmUyYjcz
NmM4MTgwHhcNMjYwNDE3MDMwMDMwWhcNMjYwNDE4MDMwMDMwWjAzMTEwLwYDVQQD
EyhhYjgyOTBhMDQ5NTNhZTUzMDZiZmI5ODljY2Q1M2I4NjhiOGM1ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUAwOTsAWBRxxGnNYVHofl8Ya7Sp
i2FVszutOgIvryhFdqJFRotLusXd9rTC7waQUbT0/+tK4TV8wOxo6pHw5pBdQxKn
5DhcsoIzSTR5IZCdT4HncewmH3FMe9Psh+Alq+MwKkOJrDn0taQgfbIesRCdPgnz
fU6dKauVgl7qKBhQHHJns5zKIWWkkwANp5jvlEjFYKIZqFQ+Lxp/3H/cUfaFHa58
c31BXf48JEJXz+i9YP0qpblaKt+4i06UuYchRfkG7hVd9i4YnxevDT1RcH6IjN2u
f2eCd+6LE/YjEEGu6JOip1lXIPWouODZLUh9k0X7lyAVWYSsVNpQw86YKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuCkKBJU65TBr+5iczVO4aLjF4tMB8GA1UdIwQY
MBaAFKOjnx24WLFV8lvDQ3WfW+K3NsgYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgt
NDUwZDIyOTViYTQ5LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgtNDUwZDIyOTViYTQ5
LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnvG7lux
K5p+O5JQKbJUi7g6IIPYlgzyvxrOOyT0w32v02lnMTLXX05qYnNI26/Aq5mzUcbZ
nlhh8ezz2rxgbjvg6hgOvR63+rXq8+LpTnODplvRAg4GEaulaHel29rMiQMxbb6a
hsz13/FFgrcLQhTYqzks9OaV6JLgxzeFKi+hNITYkyGYjAKkklO6Ybo4xPkqliFB
lt1bt/ZnMqzd0+nn8cJA60NF/E32r+xWd8uD0hhJwWHcDvhasrl+0kXzCYMRU4Sm
ytKag5z3nzxndZFpuT4waA+/2gVBQDliT7vnm1BTpgYUhunEmYxMawKmYcpWmUly
W+S+rukkcf1uvQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:51:37 2026 by rpki-client