Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
File: o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json)
Hash identifier: MGipnSb+H0ZM1P2HNd4gFt8MEIJteIy6gIN7wHeJ7Ys=
Subject key identifier: B0:C7:EF:65:7A:64:EA:F6:F3:5E:54:8A:17:98:FA:F4:D8:14:7C:39
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Certificate issuer: /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial: 019CAC7DE24EEC88D027A5735EB45AE4C37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
Manifest number: 0738
Signing time: Mon 02 Mar 2026 03:00:56 +0000
Manifest this update: Mon 02 Mar 2026 03:00:56 +0000
Manifest next update: Tue 03 Mar 2026 03:00:56 +0000
Files and hashes: 1: IASV8JRGEsONowruVRVAzSNBd00.roa (hash: q96LZrsQ0DU3+JLJjXjHuPPjiyhj2TOBmHbW59vMX1E=)
2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: 6aOLO6tzCVdosxsQsb9rgGm8mK/JqmVKDiRoLknG75c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e2:4e:ec:88:d0:27:a5:73:5e:b4:5a:e4:c3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Validity
Not Before: Mar 2 03:00:56 2026 GMT
Not After : Mar 3 03:00:56 2026 GMT
Subject: CN=b0c7ef657a64eaf6f35e548a1798faf4d8147c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:4d:95:dc:80:1d:5f:a8:c0:35:c9:38:64:
b5:c1:96:f0:df:57:f6:4f:95:61:a3:bf:67:87:4a:
96:25:7d:e1:9b:0e:fe:dc:d2:48:e1:13:b4:a5:5f:
95:d3:cd:46:ac:97:a8:a9:60:f4:ad:ae:a6:36:f6:
35:4a:4d:69:07:96:96:27:0d:cc:c3:39:45:43:0d:
ca:d6:1a:b1:fa:9f:48:ce:6d:55:50:0c:89:eb:77:
83:37:17:e5:70:cd:e4:52:02:33:f1:0a:ec:e2:e7:
85:9e:d8:d2:5a:fb:38:9e:c5:fa:b6:b2:2e:d8:c2:
c9:95:51:7a:c3:fc:bb:f7:21:bd:85:06:d9:ce:05:
68:5f:cb:58:9a:c9:fa:b8:b3:3f:a4:3b:a8:cc:18:
82:80:2f:f4:f3:23:9b:1b:ae:3f:b5:17:9a:d3:8f:
1e:ff:24:51:77:d7:8b:f9:ea:11:06:ee:4d:0c:b5:
74:fb:6e:54:31:75:7e:40:9e:c0:57:09:18:2d:57:
64:de:ac:39:bc:2a:7e:97:7e:0d:cd:6a:81:89:7b:
f6:67:bd:ca:e5:cd:3c:d2:4a:65:13:db:7d:24:c5:
c2:6c:4a:06:f7:7c:93:81:95:54:61:c1:30:36:94:
66:a7:bf:17:f7:2f:f4:f1:d3:ab:a5:59:73:9e:ab:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:EF:65:7A:64:EA:F6:F3:5E:54:8A:17:98:FA:F4:D8:14:7C:39
X509v3 Authority Key Identifier:
keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ce:0a:40:0e:d7:c6:b6:6e:30:c2:33:3e:7b:b3:94:9f:17:
ae:57:68:83:25:2e:07:73:5a:80:d4:29:74:38:23:4e:f4:63:
cb:39:71:b5:13:a8:bb:46:80:f5:b6:af:bc:c0:75:2a:7b:37:
85:db:75:33:b4:1e:07:e7:c4:cf:44:56:01:97:d6:61:ad:2a:
87:71:59:bf:4d:c8:e4:bd:97:b2:88:a3:cd:81:ab:c9:d1:ae:
3d:4c:b2:3d:e0:d7:b9:30:70:fc:78:89:51:0e:56:0b:de:9f:
13:64:fb:21:b5:0e:4d:c9:8b:5a:4f:63:22:a3:47:1d:14:a6:
7b:5c:6c:e9:e6:3d:cc:10:49:9a:8d:e0:52:45:00:69:20:5e:
c2:04:7a:db:bd:89:76:1b:3e:c6:6d:c9:f7:2a:a1:7c:1f:4d:
a0:0c:89:2d:f3:fa:61:47:6c:61:a2:d8:7e:f7:97:a0:19:23:
77:a3:e9:31:b4:41:5f:f7:27:c5:45:b2:f2:90:65:9f:63:fc:
0b:d1:07:df:77:12:8e:fa:49:5c:c9:51:fe:72:5a:0d:02:45:
15:86:98:88:3c:78:1d:4b:d8:92:9a:c5:22:6b:1d:8f:bb:6a:
ae:f3:43:ed:95:08:de:43:b5:c3:1a:08:d7:a1:61:f6:41:79:
6f:22:a6:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfeJO7IjQJ6VzXrRa5MN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNTMwOTM2OGE4YWQxM2JiMDgyNjQ0OTdmYzJlNDMxNTFl
NmQ1YTYwHhcNMjYwMzAyMDMwMDU2WhcNMjYwMzAzMDMwMDU2WjAzMTEwLwYDVQQD
EyhiMGM3ZWY2NTdhNjRlYWY2ZjM1ZTU0OGExNzk4ZmFmNGQ4MTQ3YzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyFNldyAHV+owDXJOGS1wZbw31f2
T5Vho79nh0qWJX3hmw7+3NJI4RO0pV+V081GrJeoqWD0ra6mNvY1Sk1pB5aWJw3M
wzlFQw3K1hqx+p9Izm1VUAyJ63eDNxflcM3kUgIz8Qrs4ueFntjSWvs4nsX6trIu
2MLJlVF6w/y79yG9hQbZzgVoX8tYmsn6uLM/pDuozBiCgC/08yObG64/tRea048e
/yRRd9eL+eoRBu5NDLV0+25UMXV+QJ7AVwkYLVdk3qw5vCp+l34NzWqBiXv2Z73K
5c080kplE9t9JMXCbEoG93yTgZVUYcEwNpRmp78X9y/08dOrpVlznqtXZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDH72V6ZOr2815UiheY+vTYFHw5MB8GA1UdIwQY
MBaAFKNTCTaKitE7sIJkSX/C5DFR5tWmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzFNSk5vcUswVHV3Z21SSmY4TGtNVkhtMWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lZTZmZDAtMjc5Mi00OWM0LWIyZDIt
MTcxNDIyM2I5NDllLzEvbzFNSk5vcUswVHV3Z21SSmY4TGtNVkhtMWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lZTZmZDAtMjc5Mi00OWM0LWIyZDItMTcxNDIyM2I5NDll
LzEvbzFNSk5vcUswVHV3Z21SSmY4TGtNVkhtMWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADs4KQA7X
xrZuMMIzPnuzlJ8XrldogyUuB3NagNQpdDgjTvRjyzlxtROou0aA9bavvMB1Kns3
hdt1M7QeB+fEz0RWAZfWYa0qh3FZv03I5L2XsoijzYGrydGuPUyyPeDXuTBw/HiJ
UQ5WC96fE2T7IbUOTcmLWk9jIqNHHRSme1xs6eY9zBBJmo3gUkUAaSBewgR6272J
dhs+xm3J9yqhfB9NoAyJLfP6YUdsYaLYfveXoBkjd6PpMbRBX/cnxUWy8pBln2P8
C9EH33cSjvpJXMlR/nJaDQJFFYaYiDx4HUvYkprFImsdj7tqrvND7ZUI3kO1wxoI
16Fh9kF5byKmAA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:33:36 2026 by rpki-client