Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
File: oYM1MM41ev8SGjHmyY4f6RM7sCM.mft (raw, json)
Hash identifier: 88pRASA4efHGXt8AvC7pWNem2/6PmvwU3wumroOGWjA=
Subject key identifier: DD:30:17:40:1E:D3:A2:32:D5:A3:0B:66:A4:7E:8B:AD:8A:5C:C5:1A
Authority key identifier: A1:83:35:30:CE:35:7A:FF:12:1A:31:E6:C9:8E:1F:E9:13:3B:B0:23
Certificate issuer: /CN=a1833530ce357aff121a31e6c98e1fe9133bb023
Certificate serial: 01A0C47B56A16E8FB54562F147BD5CDCC129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:00:12 +0000
Manifest this update: Mon 21 Sep 2026 15:00:12 +0000
Manifest next update: Tue 22 Sep 2026 15:00:12 +0000
Files and hashes: 1: oYM1MM41ev8SGjHmyY4f6RM7sCM.crl (hash: ftcDALI4avn7PG8SIMeYyxl9zHX4Ep4heZvIy3JYqoU=)
2: vZuspMqoseBbPHNG2fmOMxJAoRk.roa (hash: O8Akdsdgsu3O3BLQ4nDzeqQ7DRsdv1T4urleIjReCIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:56:a1:6e:8f:b5:45:62:f1:47:bd:5c:dc:c1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1833530ce357aff121a31e6c98e1fe9133bb023
Validity
Not Before: Sep 21 15:00:12 2026 GMT
Not After : Sep 22 15:00:12 2026 GMT
Subject: CN=dd3017401ed3a232d5a30b66a47e8bad8a5cc51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:3a:dd:e1:d2:48:89:13:db:bc:cc:1f:e5:
2a:0a:e9:bb:b5:6a:b4:d2:5c:80:68:89:d9:47:ea:
9a:12:e8:e7:0c:7a:33:5a:bc:4f:c0:02:fb:00:f1:
09:7c:42:65:8f:51:2c:25:e7:79:ea:0b:db:c2:35:
a5:f6:d6:c8:fe:8e:71:76:b1:7e:4c:68:48:7b:71:
dc:79:2e:1d:1c:44:c4:db:24:3d:15:70:6f:cf:80:
97:b4:3d:6a:ae:8e:29:8f:c9:7d:1c:9e:b2:1a:8a:
ee:6e:86:9b:e1:06:4c:54:c5:ba:1b:f9:c4:13:28:
61:5b:bb:e2:53:c6:69:91:9b:32:ed:87:ef:35:3b:
37:ff:be:7b:fe:82:b0:82:fb:d5:96:b3:86:07:ac:
75:46:5b:ba:2e:d8:26:6e:7a:d0:e5:89:58:60:d6:
58:e7:70:53:01:7a:1f:aa:f1:ae:2f:b3:76:23:9e:
2c:6c:ab:c2:47:15:8d:57:09:9b:c7:4f:74:8f:e8:
5c:63:99:56:74:bc:7a:e7:32:b1:7b:92:55:de:02:
66:6b:7c:82:e7:90:f3:c2:74:93:44:09:28:fc:3d:
eb:5f:80:3e:94:71:e9:9d:52:58:c2:94:58:f7:44:
87:4f:62:5b:0a:a5:9b:d1:e7:9c:7d:86:b9:6f:5e:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:30:17:40:1E:D3:A2:32:D5:A3:0B:66:A4:7E:8B:AD:8A:5C:C5:1A
X509v3 Authority Key Identifier:
keyid:A1:83:35:30:CE:35:7A:FF:12:1A:31:E6:C9:8E:1F:E9:13:3B:B0:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b0:c1:2f:5b:ae:ff:50:27:77:bd:0e:db:b5:3d:8d:d8:84:
a2:9d:26:62:a9:b8:2e:d1:2e:d4:6d:ff:8a:8d:96:b5:6a:d9:
33:2c:ec:46:05:31:a6:a0:18:c4:1b:56:55:2b:d6:d1:06:7e:
7b:28:51:45:8a:61:77:d6:db:8c:11:a8:41:d3:8d:a9:d3:7c:
9b:47:66:41:16:41:e7:c3:39:9f:4e:62:90:26:a4:e4:32:81:
21:be:ab:03:e3:d7:74:0f:33:fb:06:62:b1:c5:7c:f9:70:cf:
7f:c1:14:51:6a:ee:35:4e:fd:40:2f:74:2d:19:68:04:5c:a8:
39:40:fa:08:bd:f5:c8:eb:70:11:e4:5c:be:93:99:54:55:33:
a4:bb:1b:6d:7b:8e:16:46:cc:e2:fb:b9:9d:9c:a7:30:b3:4f:
72:42:bc:88:a1:f9:17:55:64:96:4a:0c:90:de:90:fb:30:cd:
bf:8d:1b:45:bb:38:ee:c1:3d:e4:fd:d4:21:78:88:8f:c0:44:
19:b1:d3:e7:c5:b0:fc:6a:6e:2a:3d:d9:1e:55:23:23:86:a1:
12:52:11:75:d7:3b:81:0d:2a:3b:eb:b3:f5:79:a4:9c:72:2b:
8d:04:33:95:f2:96:45:b4:b4:6f:b8:d2:29:87:55:70:46:b9:
49:b4:66:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEe1ahbo+1RWLxR71c3MEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODMzNTMwY2UzNTdhZmYxMjFhMzFlNmM5OGUxZmU5MTMz
YmIwMjMwHhcNMjYwOTIxMTUwMDEyWhcNMjYwOTIyMTUwMDEyWjAzMTEwLwYDVQQD
EyhkZDMwMTc0MDFlZDNhMjMyZDVhMzBiNjZhNDdlOGJhZDhhNWNjNTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPo63eHSSIkT27zMH+UqCum7tWq0
0lyAaInZR+qaEujnDHozWrxPwAL7APEJfEJlj1EsJed56gvbwjWl9tbI/o5xdrF+
TGhIe3HceS4dHETE2yQ9FXBvz4CXtD1qro4pj8l9HJ6yGoruboab4QZMVMW6G/nE
EyhhW7viU8ZpkZsy7YfvNTs3/757/oKwgvvVlrOGB6x1Rlu6LtgmbnrQ5YlYYNZY
53BTAXofqvGuL7N2I54sbKvCRxWNVwmbx090j+hcY5lWdLx65zKxe5JV3gJma3yC
55DzwnSTRAko/D3rX4A+lHHpnVJYwpRY90SHT2JbCqWb0eecfYa5b17g9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0wF0Ae06Iy1aMLZqR+i62KXMUaMB8GA1UdIwQY
MBaAFKGDNTDONXr/Ehox5smOH+kTO7AjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lNMU1NNDFldjhTR2pIbXlZNGY2Uk03c0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYt
NzFhMjdlZjgxNzg2LzEvb1lNMU1NNDFldjhTR2pIbXlZNGY2Uk03c0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYtNzFhMjdlZjgxNzg2
LzEvb1lNMU1NNDFldjhTR2pIbXlZNGY2Uk03c0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibDBL1uu
/1And70O27U9jdiEop0mYqm4LtEu1G3/io2WtWrZMyzsRgUxpqAYxBtWVSvW0QZ+
eyhRRYphd9bbjBGoQdONqdN8m0dmQRZB58M5n05ikCak5DKBIb6rA+PXdA8z+wZi
scV8+XDPf8EUUWruNU79QC90LRloBFyoOUD6CL31yOtwEeRcvpOZVFUzpLsbbXuO
FkbM4vu5nZynMLNPckK8iKH5F1VklkoMkN6Q+zDNv40bRbs47sE95P3UIXiIj8BE
GbHT58Ww/GpuKj3ZHlUjI4ahElIRddc7gQ0qO+uz9XmknHIrjQQzlfKWRbS0b7jS
KYdVcEa5SbRmww==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:15:48 2026 by rpki-client