Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: nAX3jNnig3dTqfDTkkfAO4we17UCA5dD4vlNMAjLH3A=
Subject key identifier: 9D:6F:B6:2C:3A:27:B2:6C:D1:52:86:9C:59:25:4E:B9:05:8D:1D:51
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 019CAA8F75AFC321F6F1F7EFD99C9ECEBF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 078D
Signing time: Sun 01 Mar 2026 18:00:54 +0000
Manifest this update: Sun 01 Mar 2026 18:00:54 +0000
Manifest next update: Mon 02 Mar 2026 18:00:54 +0000
Files and hashes: 1: AhYsuHNUbK8a0XunNi5rUoZZd74.roa (hash: +Iz4KrzXh/10Mx5yBgfEhonyL6CqUOw7mbJ6px2LQGs=)
2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=)
3: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: 3CIhUCPB/DXOWtDeupOcPq8c4+JNQoqwsku3Y88i3LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:75:af:c3:21:f6:f1:f7:ef:d9:9c:9e:ce:bf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Mar 1 18:00:54 2026 GMT
Not After : Mar 2 18:00:54 2026 GMT
Subject: CN=9d6fb62c3a27b26cd152869c59254eb9058d1d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:b9:a2:57:ac:93:71:1a:b2:44:0d:a8:4c:
11:95:db:38:73:3e:09:18:62:6c:96:3c:dd:c6:b7:
d1:e0:7e:ab:67:41:0b:f9:aa:8d:cc:d5:81:71:b7:
0a:41:3c:2f:c9:4a:7e:37:7e:64:6d:63:3c:08:5a:
0c:9e:66:4d:d5:4d:ef:e5:11:9d:49:9d:73:27:78:
1f:13:86:33:16:5a:e0:89:60:96:a1:fb:a5:43:1d:
ca:95:42:22:1f:32:5c:20:d2:0e:75:8b:25:3c:f8:
b1:98:8f:15:e0:e5:ca:75:2e:93:92:e1:29:4d:11:
69:00:49:38:a6:17:cf:b3:25:2a:84:07:a1:62:8d:
9a:a2:2e:6b:9c:21:01:a5:24:98:e4:34:c7:34:65:
08:0b:bb:78:56:70:f4:c0:4a:c7:29:92:fa:83:88:
c4:97:e9:27:89:e1:c2:25:d4:5f:4f:19:d2:ee:ea:
be:91:db:29:69:4a:b1:97:d9:07:94:3d:46:32:91:
e4:d6:4c:27:d9:ed:66:33:dc:b4:62:fb:dc:1b:89:
bd:e8:0f:c9:fa:2a:53:5e:88:29:00:c0:ea:be:41:
4c:5a:d6:f2:b9:3a:b8:42:15:3b:87:85:22:2e:a2:
6d:0a:b7:36:17:ac:78:93:73:30:60:3c:b5:71:70:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6F:B6:2C:3A:27:B2:6C:D1:52:86:9C:59:25:4E:B9:05:8D:1D:51
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:71:79:c6:14:f3:e9:91:e5:31:9c:1d:35:98:5a:bc:51:e1:
0d:77:ef:f8:e7:4a:9a:f7:3c:37:5a:d4:e4:1b:53:0c:51:d1:
16:14:84:6e:ca:36:5d:84:34:0e:c9:7c:85:46:41:68:c3:ed:
4b:3b:13:a8:78:c3:d5:70:ce:46:6d:d8:e6:ba:6b:6d:43:b6:
83:8b:54:07:ea:7d:59:0c:d6:08:28:80:eb:19:42:15:8c:97:
62:ef:c3:15:7f:9c:05:11:01:9e:dd:e1:aa:60:44:d9:7d:fc:
86:1f:80:1a:46:49:eb:a6:d7:a3:67:df:a7:06:e0:05:41:de:
dc:f0:5d:38:b0:87:71:e4:14:5b:77:40:27:76:8b:e9:9e:1c:
fa:6b:18:a3:bd:66:11:6e:eb:10:e2:78:a9:bc:9c:e8:47:5c:
ec:fb:f4:c0:58:5c:7f:f4:a5:5e:a0:83:3e:0a:2c:e6:4d:ad:
f3:c1:7b:7f:45:8b:eb:22:6e:90:56:33:a8:3d:33:a6:34:d7:
06:b7:93:35:2b:99:b2:0d:c9:cd:9a:2f:a6:bb:e6:28:fc:f0:
45:ff:d2:55:92:15:83:a3:d4:eb:29:c3:d2:d6:fd:a9:1f:16:
c6:19:34:f5:2b:f4:61:62:95:22:c8:de:69:be:22:a0:bf:fb:
6a:20:fc:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj3WvwyH28ffv2Zyezr9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTU1YmYyODg4NzUzZTQ0Njc1YjYxZGRhMzAzOTRkOTAx
NTZjMGEwHhcNMjYwMzAxMTgwMDU0WhcNMjYwMzAyMTgwMDU0WjAzMTEwLwYDVQQD
Eyg5ZDZmYjYyYzNhMjdiMjZjZDE1Mjg2OWM1OTI1NGViOTA1OGQxZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdK5olesk3EaskQNqEwRlds4cz4J
GGJsljzdxrfR4H6rZ0EL+aqNzNWBcbcKQTwvyUp+N35kbWM8CFoMnmZN1U3v5RGd
SZ1zJ3gfE4YzFlrgiWCWofulQx3KlUIiHzJcINIOdYslPPixmI8V4OXKdS6TkuEp
TRFpAEk4phfPsyUqhAehYo2aoi5rnCEBpSSY5DTHNGUIC7t4VnD0wErHKZL6g4jE
l+knieHCJdRfTxnS7uq+kdspaUqxl9kHlD1GMpHk1kwn2e1mM9y0YvvcG4m96A/J
+ipTXogpAMDqvkFMWtbyuTq4QhU7h4UiLqJtCrc2F6x4k3MwYDy1cXAXBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1vtiw6J7Js0VKGnFklTrkFjR1RMB8GA1UdIwQY
MBaAFKGlW/KIh1PkRnW2HdowOU2QFWwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQt
MjdjOWQ5MTE0MjM4LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQtMjdjOWQ5MTE0MjM4
LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnF5xhTz
6ZHlMZwdNZhavFHhDXfv+OdKmvc8N1rU5BtTDFHRFhSEbso2XYQ0Dsl8hUZBaMPt
SzsTqHjD1XDORm3Y5rprbUO2g4tUB+p9WQzWCCiA6xlCFYyXYu/DFX+cBREBnt3h
qmBE2X38hh+AGkZJ66bXo2ffpwbgBUHe3PBdOLCHceQUW3dAJ3aL6Z4c+msYo71m
EW7rEOJ4qbyc6Edc7Pv0wFhcf/SlXqCDPgos5k2t88F7f0WL6yJukFYzqD0zpjTX
BreTNSuZsg3JzZovprvmKPzwRf/SVZIVg6PU6ynD0tb9qR8Wxhk09Sv0YWKVIsje
ab4ioL/7aiD8XA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:57 2026 by rpki-client