Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: 8Y7NE5CIiJ76PnkyJ/YZZ48bSZUNDf+JsTjMXeKr8S0=
Subject key identifier: 77:83:AE:0D:33:3A:6E:D3:FC:12:C5:49:7F:EC:FE:29:57:FA:28:4C
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 019EC2C8FEDC0CAD2E35366B0355899913CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 04EA
Signing time: Sat 13 Jun 2026 21:00:12 +0000
Manifest this update: Sat 13 Jun 2026 21:00:12 +0000
Manifest next update: Sun 14 Jun 2026 21:00:12 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: fenJuiTj3Emeuvrh/HwkAYmfYbd7WvJD6a0Cf36zQ/I=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c8:fe:dc:0c:ad:2e:35:36:6b:03:55:89:99:13:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Jun 13 21:00:12 2026 GMT
Not After : Jun 14 21:00:12 2026 GMT
Subject: CN=7783ae0d333a6ed3fc12c5497fecfe2957fa284c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:1d:52:c9:ec:0e:73:0a:d1:ab:f6:e5:1c:
4e:43:11:88:3b:84:46:52:d5:e4:ad:0b:29:06:17:
26:42:12:ef:5e:dd:a7:7c:b3:de:69:02:d8:d9:83:
75:60:6e:0b:b6:d1:96:a6:9f:42:f8:c4:7c:cb:74:
69:40:91:cb:27:e9:9c:0f:7b:5a:1c:d9:0d:06:f0:
09:f3:62:d4:6a:ea:04:85:48:75:bb:20:d6:e2:0e:
b3:1a:90:d8:55:c8:9f:71:e7:1c:c6:2f:cb:70:06:
f7:90:19:f6:4a:1b:f1:81:f9:30:7b:1a:3a:8f:e5:
5f:80:7e:4a:c7:64:49:c0:84:94:7d:d3:51:66:c6:
e3:38:95:89:e9:be:25:55:d7:63:47:54:51:1b:27:
d3:20:0c:66:74:39:45:54:0a:fc:4e:8b:3b:12:26:
9c:2e:c3:04:d5:22:1e:ac:62:e9:d8:95:96:5c:7e:
a2:21:ea:7b:de:93:27:a1:a5:1a:87:c5:dc:98:ac:
bd:b8:36:11:56:7d:a9:e5:dd:8b:00:13:d9:0c:93:
e1:96:8e:ff:3a:f0:9d:0c:76:78:1f:38:ce:82:e5:
18:72:e2:34:57:3c:5c:2f:88:d4:a9:19:ba:14:70:
a9:94:c2:b4:9c:96:fc:72:2a:12:a5:49:5e:ae:8c:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:83:AE:0D:33:3A:6E:D3:FC:12:C5:49:7F:EC:FE:29:57:FA:28:4C
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:84:1e:39:58:4f:32:57:fb:6f:30:82:3b:a8:d3:0b:db:26:
0e:f9:a7:96:24:92:7c:da:e8:28:2b:0b:fe:5f:cc:8f:5e:04:
2f:6a:ef:ab:4b:09:1d:2d:11:c1:51:84:1c:55:02:fc:a1:fe:
92:5c:43:c6:c7:dd:d6:33:6b:03:0c:98:67:9d:90:bc:58:11:
6c:a5:87:4f:8f:23:8f:29:4d:1f:55:9d:51:cd:8b:6a:a2:6c:
16:06:0d:c1:b4:7c:5d:f2:e8:0c:50:37:8a:4b:0e:1e:11:4f:
ef:8c:4b:44:3a:b8:2c:b1:73:2f:2d:00:48:d0:c1:de:80:23:
65:b8:2c:11:3e:13:83:94:03:5c:9d:f8:6b:38:04:11:e3:25:
ad:ec:81:96:f1:8a:81:38:0c:cd:27:ff:de:0f:a2:3b:ea:da:
ba:1f:30:87:40:f8:a0:55:34:81:4e:1a:a1:f2:a1:c7:48:0a:
25:f2:9e:72:4e:f0:46:09:9b:e1:a4:a2:41:49:c0:07:9c:6d:
94:13:06:a7:21:40:96:4e:94:6b:95:fa:e9:67:fe:a6:e0:98:
c0:71:7d:f4:05:c1:e7:db:93:82:94:c9:9c:4f:16:5b:16:0d:
6b:85:90:95:b5:4f:6f:d9:b9:a2:03:40:c6:63:c3:50:d8:8d:
b1:ee:af:03
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ7CyP7cDK0uNTZrA1WJmRPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw
NDRmNTcwHhcNMjYwNjEzMjEwMDEyWhcNMjYwNjE0MjEwMDEyWjAzMTEwLwYDVQQD
Eyg3NzgzYWUwZDMzM2E2ZWQzZmMxMmM1NDk3ZmVjZmUyOTU3ZmEyODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs84dUsnsDnMK0av25RxOQxGIO4RG
UtXkrQspBhcmQhLvXt2nfLPeaQLY2YN1YG4LttGWpp9C+MR8y3RpQJHLJ+mcD3ta
HNkNBvAJ82LUauoEhUh1uyDW4g6zGpDYVcifceccxi/LcAb3kBn2Shvxgfkwexo6
j+VfgH5Kx2RJwISUfdNRZsbjOJWJ6b4lVddjR1RRGyfTIAxmdDlFVAr8Tos7Eiac
LsME1SIerGLp2JWWXH6iIep73pMnoaUah8XcmKy9uDYRVn2p5d2LABPZDJPhlo7/
OvCdDHZ4HzjOguUYcuI0VzxcL4jUqRm6FHCplMK0nJb8cioSpUlerozb/wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHeDrg0zOm7T/BLFSX/s/ilX+ihMMB8GA1UdIwQY
MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw
LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw
NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoQe
OVhPMlf7bzCCO6jTC9smDvmnliSSfNroKCsL/l/Mj14EL2rvq0sJHS0RwVGEHFUC
/KH+klxDxsfd1jNrAwyYZ52QvFgRbKWHT48jjylNH1WdUc2LaqJsFgYNwbR8XfLo
DFA3iksOHhFP74xLRDq4LLFzLy0ASNDB3oAjZbgsET4Tg5QDXJ34azgEEeMlreyB
lvGKgTgMzSf/3g+iO+rauh8wh0D4oFU0gU4aofKhx0gKJfKeck7wRgmb4aSiQUnA
B5xtlBMGpyFAlk6Ua5X66Wf+puCYwHF99AXB59uTgpTJnE8WWxYNa4WQlbVPb9m5
ogNAxmPDUNiNse6vAw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:30 2026 by rpki-client