Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: TnTwMmsi75rMJYd6HaWKRJCGB7cJ/N8txjl2Q7Blp/o=
Subject key identifier: 43:F0:B4:EF:C2:3B:97:A3:8D:AF:D9:21:DF:B5:E7:53:B9:EA:25:F7
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 01A1287A301AC20C06D0BA736ED96BE42918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 01:00:58 +0000
Manifest this update: Sun 11 Oct 2026 01:00:58 +0000
Manifest next update: Mon 12 Oct 2026 01:00:58 +0000
Files and hashes: 1: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: ZrAvyoHSYBNXcMNe0Pfq5MCgboSmKxMUumc4jVootdM=)
2: mBkIIhBUokxiDs7U62dP6EGJ28A.roa (hash: KThHm1xgh12oiiD8xAb/mt2PPatVJSHJqHsKnrjqp7Q=)
3: uEzMp8gZyoHebkBdiY9KRs9lacE.asa (hash: x7WXJvWldueVaogAt4aCHUIb6RJurPgI+nLyD+k45kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:30:1a:c2:0c:06:d0:ba:73:6e:d9:6b:e4:29:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Oct 11 01:00:58 2026 GMT
Not After : Oct 12 01:00:58 2026 GMT
Subject: CN=43f0b4efc23b97a38dafd921dfb5e753b9ea25f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:6a:a3:21:36:63:14:59:34:4b:7c:ae:30:
60:35:4f:61:2a:30:a7:e6:36:9e:21:3f:52:47:13:
0d:26:c3:a0:b0:c8:de:05:90:89:28:0f:09:2a:87:
77:44:73:6a:81:23:af:65:14:be:72:44:d5:29:b1:
48:59:a9:9c:e9:cb:39:db:02:35:19:f3:83:9d:b3:
d7:bc:a4:66:25:31:52:9e:ab:ad:de:8c:46:ac:ad:
f7:82:38:20:d2:c0:2a:f6:f0:ee:9e:12:c1:96:0a:
38:ec:6d:ac:cf:1f:0e:0c:33:e9:2d:ad:e7:e9:a9:
19:5b:98:04:ab:b7:e0:e1:df:76:6c:31:86:2b:bd:
4c:e4:27:86:cd:6b:46:0a:99:3d:01:d7:f6:b4:fa:
6d:29:b9:f0:a7:33:9a:b4:6b:e8:b4:bc:a3:dd:c0:
03:75:97:d8:a4:a8:f8:57:34:73:e1:2a:5d:fb:bf:
c9:c6:39:da:30:1f:ae:31:05:83:32:ef:85:b0:b6:
d7:02:41:22:75:ac:73:fb:87:06:51:ba:65:0f:ea:
01:ab:02:7a:ac:00:5d:eb:97:44:0c:ab:6e:62:b9:
c4:8a:2a:f0:72:80:97:8e:f1:33:07:8e:16:88:4c:
5c:87:18:77:fc:97:0a:b4:11:48:dc:d2:69:52:02:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F0:B4:EF:C2:3B:97:A3:8D:AF:D9:21:DF:B5:E7:53:B9:EA:25:F7
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:26:2a:b3:b8:28:9b:4b:c9:29:30:ae:51:cf:a9:58:f1:95:
1c:86:ab:e3:11:07:c3:40:f6:65:5b:20:c2:2a:ee:da:3c:24:
02:46:06:5a:07:78:9d:d5:fc:e1:f2:7e:35:bb:14:09:55:9f:
3a:6c:02:00:cf:fc:15:5d:ea:79:e0:f2:6e:b8:32:ae:e3:83:
e0:ec:a3:42:16:dc:c2:7e:cb:ad:7f:2a:9a:91:c8:1c:3b:5b:
cc:02:86:71:af:05:e0:ad:2e:4f:38:27:a0:46:3b:96:b2:3c:
f7:f2:14:29:68:7f:29:8b:23:ef:52:44:1e:d4:3b:2f:78:2c:
12:ed:fd:39:e3:c6:61:b3:ac:2a:35:47:4f:40:dc:33:2f:64:
c6:19:fc:53:9d:f9:c0:c5:c6:22:e3:cf:f5:90:1b:14:af:93:
8b:50:1f:ca:bc:8f:87:8a:25:f7:35:b4:dc:9a:5a:57:3d:30:
29:7d:df:68:0b:d8:6a:7e:05:42:03:bc:b4:c2:02:3d:e7:c7:
fd:e5:34:4a:ba:b9:77:be:cd:0e:b7:d5:0d:6a:98:ac:8b:de:
42:9f:29:82:31:77:8d:95:34:7e:17:59:9f:ae:98:e4:a0:04:
8d:72:4f:d2:b9:70:14:e6:81:07:5c:c1:cb:f4:98:f4:ec:9b:
72:49:80:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoejAawgwG0Lpzbtlr5CkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDg4NjljZTU0YjlkM2IyZjNlMzlhZWUyYzljOGViMTlj
YjViMGYwHhcNMjYxMDExMDEwMDU4WhcNMjYxMDEyMDEwMDU4WjAzMTEwLwYDVQQD
Eyg0M2YwYjRlZmMyM2I5N2EzOGRhZmQ5MjFkZmI1ZTc1M2I5ZWEyNWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruxqoyE2YxRZNEt8rjBgNU9hKjCn
5jaeIT9SRxMNJsOgsMjeBZCJKA8JKod3RHNqgSOvZRS+ckTVKbFIWamc6cs52wI1
GfODnbPXvKRmJTFSnqut3oxGrK33gjgg0sAq9vDunhLBlgo47G2szx8ODDPpLa3n
6akZW5gEq7fg4d92bDGGK71M5CeGzWtGCpk9Adf2tPptKbnwpzOatGvotLyj3cAD
dZfYpKj4VzRz4Spd+7/JxjnaMB+uMQWDMu+FsLbXAkEidaxz+4cGUbplD+oBqwJ6
rABd65dEDKtuYrnEiirwcoCXjvEzB44WiExchxh3/JcKtBFI3NJpUgK+qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPwtO/CO5ejja/ZId+151O56iX3MB8GA1UdIwQY
MBaAFDlIhpzlS507Lz45ruLJyOsZy1sPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDct
MjhiZGFiY2E3MGNiLzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDctMjhiZGFiY2E3MGNi
LzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViYqs7go
m0vJKTCuUc+pWPGVHIar4xEHw0D2ZVsgwiru2jwkAkYGWgd4ndX84fJ+NbsUCVWf
OmwCAM/8FV3qeeDybrgyruOD4OyjQhbcwn7LrX8qmpHIHDtbzAKGca8F4K0uTzgn
oEY7lrI89/IUKWh/KYsj71JEHtQ7L3gsEu39OePGYbOsKjVHT0DcMy9kxhn8U535
wMXGIuPP9ZAbFK+Ti1AfyryPh4ol9zW03JpaVz0wKX3faAvYan4FQgO8tMICPefH
/eU0Srq5d77NDrfVDWqYrIveQp8pgjF3jZU0fhdZn66Y5KAEjXJP0rlwFOaBB1zB
y/SY9OybckmAgg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:06:59 2026 by rpki-client