Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: m3k9I4Jr8bJqDRtKEWvsegiqAQaCXW7IuM2P/UOs6jw=
Subject key identifier: 98:DE:CA:3D:F6:B4:E8:AC:C3:AF:EF:5E:FF:5A:44:30:D2:BF:8F:4A
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 01A0C2C45017EB835205549B537F82189D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0FD2
Signing time: Mon 21 Sep 2026 07:00:40 +0000
Manifest this update: Mon 21 Sep 2026 07:00:40 +0000
Manifest next update: Tue 22 Sep 2026 07:00:40 +0000
Files and hashes: 1: 3hMHIVOHYf4xHOB_QIaghE5RKyU.roa (hash: iiTzIP6NLT0/sC8FwGaVheusdiRxnlTvSAKBPuTjCdI=)
2: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: vEbh5iKe16FSaR1m/xZqJnCaADKAQVTWX+FxgmTa2l8=)
3: ylTUix0nZCbBGNa6yxbMJ3pbJDQ.asa (hash: oRmCnqZJex+p+VhWAUp4LwTMwfCm/4vGc6Wx1HLZbm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:50:17:eb:83:52:05:54:9b:53:7f:82:18:9d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Sep 21 07:00:40 2026 GMT
Not After : Sep 22 07:00:40 2026 GMT
Subject: CN=98deca3df6b4e8acc3afef5eff5a4430d2bf8f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:aa:f4:3a:f7:54:da:50:ea:82:a0:80:5b:
e8:75:16:f1:6c:dc:90:e3:71:03:43:14:0f:55:53:
7a:90:ae:b3:e0:14:32:a9:95:a8:30:ec:0d:7b:c6:
e6:ab:b0:c0:6c:e8:a5:0a:d7:9e:04:9d:03:99:c2:
7b:1c:c3:8f:dc:ed:e7:82:97:d8:e9:64:f6:6c:5e:
df:b7:97:28:ab:7e:7a:34:44:fc:07:4e:b3:e2:66:
0d:81:0e:3b:f9:ea:9d:eb:b1:5f:6c:70:32:87:d0:
18:d8:ca:23:1d:3e:50:2e:b3:84:3d:e0:57:37:9b:
5d:55:86:a8:75:a7:68:3c:5e:65:de:d7:63:c6:b6:
aa:3c:b6:40:ab:d9:c0:9b:7b:43:fb:aa:b6:c5:61:
59:88:b7:5f:b7:67:6b:0e:cd:91:0d:d6:ec:cf:be:
33:3a:41:2c:28:c9:b3:36:30:77:23:5b:28:6f:1b:
3a:fe:dd:e3:76:37:be:f2:97:6a:ed:02:17:41:38:
93:c3:4c:51:b1:56:cf:ad:f4:96:d1:2d:3c:3f:97:
78:82:56:8e:59:3a:c6:24:2a:dd:16:87:7d:1d:b8:
33:72:12:96:d7:d0:57:dd:fb:d9:1c:dc:c1:c7:7e:
13:0b:22:84:fd:60:e8:e2:c7:26:ca:de:b1:03:2b:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DE:CA:3D:F6:B4:E8:AC:C3:AF:EF:5E:FF:5A:44:30:D2:BF:8F:4A
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:98:6d:fe:e3:b5:59:11:00:f5:d8:38:94:b9:16:60:59:a9:
44:4e:8b:40:ac:06:86:6d:e5:1f:af:da:de:0d:70:59:a9:67:
e6:04:52:62:36:78:6e:c5:9e:73:33:3d:20:46:ff:4b:e7:bb:
10:10:60:86:3f:c4:c4:79:1d:fa:50:e6:48:e6:1a:59:71:f0:
41:70:b8:d4:91:6e:31:a9:88:e2:83:c9:4d:21:b3:e3:d7:91:
e6:05:d4:83:fb:91:db:d7:5b:5a:34:18:3e:52:bc:f9:87:35:
c4:a5:ff:36:40:3a:65:8f:1a:ac:a2:50:47:d6:bd:96:c6:e5:
40:f0:88:4a:fd:14:b3:be:89:1a:fb:61:0b:aa:68:05:40:60:
7c:f2:11:ba:ef:d5:f5:4a:d3:7b:a4:c7:cf:0f:05:45:e5:82:
47:20:fd:f3:6e:75:94:7c:03:66:3e:5d:41:a7:e8:c9:91:3f:
9b:bc:dc:4e:6d:95:5a:06:f2:da:96:62:dd:59:3d:c7:4d:45:
25:ca:87:c8:16:9f:31:9f:ae:5d:f1:f6:63:88:6b:46:ab:9c:
6c:56:17:ab:7e:15:c8:6e:e9:46:f6:35:0f:be:61:57:02:02:
f0:3f:f0:0c:5a:24:92:9a:28:61:4d:fe:11:70:1b:0c:c1:b0:
9a:5c:43:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxFAX64NSBVSbU3+CGJ0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTY0N2RhYzcyOWY0N2IwNjM2OWM0Yzk3NDFjZjk0Mzk1
M2RjNTkwHhcNMjYwOTIxMDcwMDQwWhcNMjYwOTIyMDcwMDQwWjAzMTEwLwYDVQQD
Eyg5OGRlY2EzZGY2YjRlOGFjYzNhZmVmNWVmZjVhNDQzMGQyYmY4ZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoniq9Dr3VNpQ6oKggFvodRbxbNyQ
43EDQxQPVVN6kK6z4BQyqZWoMOwNe8bmq7DAbOilCteeBJ0DmcJ7HMOP3O3ngpfY
6WT2bF7ft5coq356NET8B06z4mYNgQ47+eqd67FfbHAyh9AY2MojHT5QLrOEPeBX
N5tdVYaodadoPF5l3tdjxraqPLZAq9nAm3tD+6q2xWFZiLdft2drDs2RDdbsz74z
OkEsKMmzNjB3I1sobxs6/t3jdje+8pdq7QIXQTiTw0xRsVbPrfSW0S08P5d4glaO
WTrGJCrdFod9HbgzchKW19BX3fvZHNzBx34TCyKE/WDo4scmyt6xAyv9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjeyj32tOisw6/vXv9aRDDSv49KMB8GA1UdIwQY
MBaAFKCmR9rHKfR7BjacTJdBz5Q5U9xZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYTFmODgtNzA3Zi00MWJkLWI5YmQt
ZmI2OTgzY2U5ZGZmLzEvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYTFmODgtNzA3Zi00MWJkLWI5YmQtZmI2OTgzY2U5ZGZm
LzEvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapht/uO1
WREA9dg4lLkWYFmpRE6LQKwGhm3lH6/a3g1wWaln5gRSYjZ4bsWeczM9IEb/S+e7
EBBghj/ExHkd+lDmSOYaWXHwQXC41JFuMamI4oPJTSGz49eR5gXUg/uR29dbWjQY
PlK8+Yc1xKX/NkA6ZY8arKJQR9a9lsblQPCISv0Us76JGvthC6poBUBgfPIRuu/V
9UrTe6THzw8FReWCRyD98251lHwDZj5dQafoyZE/m7zcTm2VWgby2pZi3Vk9x01F
JcqHyBafMZ+uXfH2Y4hrRqucbFYXq34VyG7pRvY1D75hVwIC8D/wDFokkpooYU3+
EXAbDMGwmlxDmw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:12:17 2026 by rpki-client