Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: f7AOdUvWHSWIpdlNCxj+ZUWvdFcgIeN+aDLR7lweZs8=
Subject key identifier: 6B:3F:61:81:1C:1C:30:F2:5D:F5:5C:C3:E0:13:9C:B6:80:E2:B8:11
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 01A0ED0AC695B85E7C8D30F2B79907C4DD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 0A19
Signing time: Tue 29 Sep 2026 12:01:41 +0000
Manifest this update: Tue 29 Sep 2026 12:01:41 +0000
Manifest next update: Wed 30 Sep 2026 12:01:41 +0000
Files and hashes: 1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: t4fqtVDXLPPiMF87g+SzRL280Z1w6lc9P3mD7wS0Vww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:c6:95:b8:5e:7c:8d:30:f2:b7:99:07:c4:dd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Sep 29 12:01:41 2026 GMT
Not After : Sep 30 12:01:41 2026 GMT
Subject: CN=6b3f61811c1c30f25df55cc3e0139cb680e2b811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dc:00:66:df:4f:f6:49:33:bd:c8:1d:23:49:
5f:e7:59:f2:44:5c:f3:2a:ca:9b:f7:b9:6c:f9:ae:
33:be:5a:4b:3c:6c:25:28:d3:8d:21:73:33:7e:f0:
a0:c1:27:3c:cd:7c:e2:e9:7d:5e:19:59:6f:2e:ed:
23:57:3b:5f:b9:80:81:82:b8:e5:33:32:23:8b:4e:
e5:cf:d3:a7:71:c3:4e:dc:00:38:b5:0f:2d:cc:97:
81:64:b5:7b:03:40:c6:d6:19:9a:f0:c2:42:2b:47:
80:33:51:a7:8b:df:d4:66:54:8a:71:92:ff:c4:80:
79:e1:93:18:5a:a0:11:83:55:b3:7a:30:76:3c:40:
b3:e8:79:09:38:60:52:a5:b0:60:d5:ec:5c:1c:bb:
98:0d:54:06:bd:86:8c:4e:53:ca:59:f3:ef:4f:65:
ab:4b:20:d3:f6:e2:d1:e7:c1:30:3c:83:46:0e:90:
c9:f5:74:a7:e7:5c:3c:fd:db:9e:4c:15:91:54:21:
50:e4:22:aa:bf:ab:ff:93:bd:e4:be:5b:ff:14:46:
96:18:55:4f:51:46:02:82:49:20:a6:e6:ca:d0:8e:
95:89:a0:9f:b2:0d:85:e5:2d:0b:31:ac:29:81:1a:
08:4c:82:4e:26:98:10:d2:1f:ff:70:41:e0:3f:03:
25:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3F:61:81:1C:1C:30:F2:5D:F5:5C:C3:E0:13:9C:B6:80:E2:B8:11
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d2:c2:9d:50:4d:2f:ea:09:fc:6f:ed:70:46:20:58:a1:c7:
5c:d5:1a:e9:c8:9c:e3:a5:b1:d6:5e:0d:91:0f:ad:79:f0:a3:
c5:d1:d3:e9:c5:d8:b5:56:f0:cd:5c:27:14:91:06:8e:4b:b6:
0c:e6:da:5b:3f:5c:7f:13:d0:3d:fe:02:78:25:43:24:92:d9:
2c:f2:df:99:16:a2:1f:e6:b9:03:a9:22:af:a8:6b:80:8d:48:
96:81:35:ed:99:96:25:0e:e3:39:1b:5b:3d:a2:b2:1c:7f:a8:
40:38:71:76:f9:49:c1:8e:89:fc:c9:a5:0c:8b:83:58:8d:3a:
d0:e1:f5:2f:0c:fe:cc:3e:b9:cc:3b:b7:9a:af:17:ae:47:5c:
eb:ab:df:60:78:bb:ce:95:97:e2:74:13:ce:8f:11:d2:9e:15:
7a:cf:f4:8c:b8:9c:ca:85:d4:67:e6:6e:a0:c5:fb:7a:1a:54:
1d:fb:91:c2:15:c7:53:8b:9b:69:d3:a5:7b:10:58:42:99:46:
96:b8:a3:3b:5a:8c:0d:4f:d8:c9:92:a0:b3:b5:e5:7e:ab:ff:
e4:d6:28:d2:94:f8:80:2b:a5:d1:67:09:fa:82:26:80:5a:52:
42:02:88:09:d5:4f:81:3f:67:0f:2d:9b:1c:6c:25:78:dd:40:
67:c5:0d:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtCsaVuF58jTDyt5kHxN0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3
NDkxOWUwHhcNMjYwOTI5MTIwMTQxWhcNMjYwOTMwMTIwMTQxWjAzMTEwLwYDVQQD
Eyg2YjNmNjE4MTFjMWMzMGYyNWRmNTVjYzNlMDEzOWNiNjgwZTJiODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4twAZt9P9kkzvcgdI0lf51nyRFzz
Ksqb97ls+a4zvlpLPGwlKNONIXMzfvCgwSc8zXzi6X1eGVlvLu0jVztfuYCBgrjl
MzIji07lz9OnccNO3AA4tQ8tzJeBZLV7A0DG1hma8MJCK0eAM1Gni9/UZlSKcZL/
xIB54ZMYWqARg1WzejB2PECz6HkJOGBSpbBg1excHLuYDVQGvYaMTlPKWfPvT2Wr
SyDT9uLR58EwPINGDpDJ9XSn51w8/dueTBWRVCFQ5CKqv6v/k73kvlv/FEaWGFVP
UUYCgkkgpubK0I6ViaCfsg2F5S0LMawpgRoITIJOJpgQ0h//cEHgPwMlnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGs/YYEcHDDyXfVcw+ATnLaA4rgRMB8GA1UdIwQY
MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt
MTI1MTg0MjlmYTYzLzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz
LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdLCnVBN
L+oJ/G/tcEYgWKHHXNUa6cic46Wx1l4NkQ+tefCjxdHT6cXYtVbwzVwnFJEGjku2
DObaWz9cfxPQPf4CeCVDJJLZLPLfmRaiH+a5A6kir6hrgI1IloE17ZmWJQ7jORtb
PaKyHH+oQDhxdvlJwY6J/MmlDIuDWI060OH1Lwz+zD65zDu3mq8Xrkdc66vfYHi7
zpWX4nQTzo8R0p4Ves/0jLicyoXUZ+ZuoMX7ehpUHfuRwhXHU4ubadOlexBYQplG
lrijO1qMDU/YyZKgs7Xlfqv/5NYo0pT4gCul0WcJ+oImgFpSQgKICdVPgT9nDy2b
HGwleN1AZ8UNUQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 22:28:05 2026 by rpki-client