Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
File: o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft (raw, json)
Hash identifier: aUKKzYNDtJUvCn+VdWV8Sga25afkZ4mjpLnHOMb/6lk=
Subject key identifier: 15:DF:D6:1D:09:B1:51:87:A5:12:82:4D:66:52:35:DE:3C:F0:E7:FD
Authority key identifier: A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
Certificate issuer: /CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Certificate serial: 019CAA58A47817A8BE321E28D2DB6AE13311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
Manifest number: 09A4
Signing time: Sun 01 Mar 2026 17:01:01 +0000
Manifest this update: Sun 01 Mar 2026 17:01:01 +0000
Manifest next update: Mon 02 Mar 2026 17:01:01 +0000
Files and hashes: 1: TAHQBaXvNoEqJwVwuxNKlcHwMBY.roa (hash: 1l7RMaksGMvJALttYQHPmRPplRyW7anaFOwZ35pYzSw=)
2: o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl (hash: jm3kM2sXZMwdLPJXs31KkujBd3Vw+oFVoR81zgXouYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a4:78:17:a8:be:32:1e:28:d2:db:6a:e1:33:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Validity
Not Before: Mar 1 17:01:01 2026 GMT
Not After : Mar 2 17:01:01 2026 GMT
Subject: CN=15dfd61d09b15187a512824d665235de3cf0e7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:8c:98:7b:a5:96:33:5f:0a:ba:7c:bf:fa:
7c:ba:c9:c7:15:da:4d:55:16:f0:bb:6a:e7:a9:83:
18:e1:fa:48:00:54:e6:d9:00:69:4f:1a:7b:6c:4c:
0c:89:a3:a4:11:ac:fe:13:f2:08:77:ed:f4:94:3a:
e9:81:34:cb:cb:f1:28:43:3d:8f:69:1b:5a:7a:06:
3d:cd:35:f9:89:59:0d:62:19:05:1b:ec:a6:98:cb:
59:80:13:6a:1f:02:d7:a4:b6:8e:4d:6d:97:fb:3e:
82:a8:9c:eb:ab:8b:28:d7:75:b6:66:50:d0:ca:3b:
f3:79:14:6e:2f:ce:c3:26:7d:5d:b8:dd:83:5d:38:
38:35:c4:34:7b:e2:29:4e:07:62:bf:25:56:78:19:
e8:e7:99:78:2d:26:cf:11:22:f6:4c:cd:c1:f2:ff:
fd:b8:82:e3:22:60:c7:a1:11:a2:95:b8:ce:af:e0:
cb:3f:a0:b7:f2:c1:e3:22:76:88:67:28:76:ad:41:
87:31:10:ca:f2:64:68:fe:d5:5d:38:f0:d0:a6:fc:
f7:c0:36:c9:b2:da:17:cf:ec:6d:97:e9:7f:1b:19:
40:fd:40:11:49:53:6e:8f:71:bd:86:a9:bd:87:08:
0d:a7:76:1f:d8:92:d4:76:26:43:71:f6:0f:04:a7:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DF:D6:1D:09:B1:51:87:A5:12:82:4D:66:52:35:DE:3C:F0:E7:FD
X509v3 Authority Key Identifier:
keyid:A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:72:13:f1:a9:96:ee:a4:4b:6b:75:85:8b:a7:81:6d:e3:28:
d1:e8:a9:29:d9:6e:48:73:0b:39:cb:4d:3b:72:4f:a6:c7:73:
dc:23:72:af:de:c2:9b:84:9d:1d:5d:06:97:55:2d:c0:d5:82:
62:cc:fc:50:95:bc:fd:b5:3e:b6:25:35:81:3c:ce:2c:db:fa:
bf:27:83:69:93:e2:85:22:24:ef:ff:09:46:f4:5e:e5:a8:91:
fd:4d:5d:15:2e:00:a8:12:7f:6d:2b:af:e6:6d:8d:34:b7:a4:
9e:8c:71:d3:16:8d:84:ab:76:02:78:ce:1d:29:50:b0:11:33:
7a:70:bb:e4:ad:94:3e:b4:a7:a0:b1:ce:42:aa:cd:01:1d:f6:
41:98:3e:9a:d2:4a:2c:ca:44:21:08:ec:c5:87:d2:53:d8:2f:
b7:83:57:fe:dd:4b:95:95:dc:ca:f6:49:3d:c5:90:96:f4:5f:
c7:e6:e6:e5:9d:74:ff:80:50:30:47:63:5b:71:83:bd:a4:34:
d8:33:89:75:f0:fb:78:21:69:cc:22:56:f0:f9:1c:97:f1:72:
5a:88:fd:46:b3:d9:a5:d6:4a:dd:26:84:26:94:7b:6e:84:23:
d6:40:63:64:30:b5:e1:82:94:d9:7b:38:0a:da:9b:63:f1:a2:
76:b5:bc:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWKR4F6i+Mh4o0ttq4TMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNDY0ODIwZGNjNDY3NjlmZDE1NGM4Y2JhZTY2YjhiYjM4
ZmVhMDMwHhcNMjYwMzAxMTcwMTAxWhcNMjYwMzAyMTcwMTAxWjAzMTEwLwYDVQQD
EygxNWRmZDYxZDA5YjE1MTg3YTUxMjgyNGQ2NjUyMzVkZTNjZjBlN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodaMmHulljNfCrp8v/p8usnHFdpN
VRbwu2rnqYMY4fpIAFTm2QBpTxp7bEwMiaOkEaz+E/IId+30lDrpgTTLy/EoQz2P
aRtaegY9zTX5iVkNYhkFG+ymmMtZgBNqHwLXpLaOTW2X+z6CqJzrq4so13W2ZlDQ
yjvzeRRuL87DJn1duN2DXTg4NcQ0e+IpTgdivyVWeBno55l4LSbPESL2TM3B8v/9
uILjImDHoRGilbjOr+DLP6C38sHjInaIZyh2rUGHMRDK8mRo/tVdOPDQpvz3wDbJ
stoXz+xtl+l/GxlA/UARSVNuj3G9hqm9hwgNp3Yf2JLUdiZDcfYPBKdCYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXf1h0JsVGHpRKCTWZSNd488Of9MB8GA1UdIwQY
MBaAFKNGSCDcxGdp/RVMjLrma4uzj+oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzBaSUlOekVaMm45RlV5TXV1WnJpN09QNmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMmMzOWQtMWIxZi00ZTQxLTkyYjAt
ZTBhMmEyYzc5NDJlLzEvbzBaSUlOekVaMm45RlV5TXV1WnJpN09QNmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMmMzOWQtMWIxZi00ZTQxLTkyYjAtZTBhMmEyYzc5NDJl
LzEvbzBaSUlOekVaMm45RlV5TXV1WnJpN09QNmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXIT8amW
7qRLa3WFi6eBbeMo0eipKdluSHMLOctNO3JPpsdz3CNyr97Cm4SdHV0Gl1UtwNWC
Ysz8UJW8/bU+tiU1gTzOLNv6vyeDaZPihSIk7/8JRvRe5aiR/U1dFS4AqBJ/bSuv
5m2NNLeknoxx0xaNhKt2AnjOHSlQsBEzenC75K2UPrSnoLHOQqrNAR32QZg+mtJK
LMpEIQjsxYfSU9gvt4NX/t1LlZXcyvZJPcWQlvRfx+bm5Z10/4BQMEdjW3GDvaQ0
2DOJdfD7eCFpzCJW8Pkcl/FyWoj9RrPZpdZK3SaEJpR7boQj1kBjZDC14YKU2Xs4
CtqbY/GidrW84w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:32:33 2026 by rpki-client