Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
File: OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft (raw, json)
Hash identifier: YTekIMgeJbViZfLwuKUEpINty/qekttQQJlT8VDbmNo=
Subject key identifier: 9E:CF:EF:63:6F:1D:69:5A:67:85:0B:1E:06:28:66:CD:A5:30:62:40
Authority key identifier: 3A:A5:18:71:0D:03:97:2C:75:A1:76:DB:C2:B9:97:38:80:D0:8C:9F
Certificate issuer: /CN=3aa518710d03972c75a176dbc2b9973880d08c9f
Certificate serial: 01A0C66A7A1022DC1201B974C23D217D3AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:01 +0000
Manifest this update: Tue 22 Sep 2026 00:01:01 +0000
Manifest next update: Wed 23 Sep 2026 00:01:01 +0000
Files and hashes: 1: OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.crl (hash: Zt9myvJFC3BgzOmeNMT1Fos5Jzq4lXcaTX6c2mYjdr0=)
2: lGUSShaLZbHrG2hxXfbd3gujno0.roa (hash: cC+BsnEt29P3BJfc+K3wjvfhKLVQR7wZcV1TURDbdTs=)
3: naOdqcYODmRtxOcy9Qc1k89TSYc.asa (hash: xGnv4cIxdw0NhIR5zzNkuvrK8dWoa3n0RqBgikLm7Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:7a:10:22:dc:12:01:b9:74:c2:3d:21:7d:3a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa518710d03972c75a176dbc2b9973880d08c9f
Validity
Not Before: Sep 22 00:01:01 2026 GMT
Not After : Sep 23 00:01:01 2026 GMT
Subject: CN=9ecfef636f1d695a67850b1e062866cda5306240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:60:a7:22:e4:b7:69:30:0e:f1:90:ff:fe:0e:
ef:a9:01:c7:e0:03:f6:9c:df:e8:85:0e:3c:50:0c:
65:87:c2:7c:8b:ae:4e:60:66:40:bc:81:be:2b:24:
d4:0a:4c:07:b7:c9:46:62:3d:dd:56:b8:76:b0:2c:
d2:33:82:1e:0d:4e:21:96:cd:eb:3d:95:a8:fd:23:
cb:30:8b:b2:c5:f4:37:02:a4:a1:60:33:98:7a:37:
bc:ec:cc:ef:b8:f3:1f:09:2d:da:9c:4a:34:4f:6e:
4e:81:1c:40:bd:da:97:8b:c0:cc:f2:0e:4a:fe:84:
d1:ea:8e:3e:ef:a8:0e:16:f6:8d:78:ff:56:13:a6:
c4:5f:f2:2e:7c:23:3e:e7:2d:60:f9:58:12:d4:cd:
c5:53:b4:39:ce:93:b2:46:9f:4f:a1:f3:8e:72:8f:
47:c2:52:5d:a9:11:eb:df:3a:5c:7b:cf:7b:e8:9d:
2a:d3:60:b5:73:4c:fa:e9:1e:ba:b1:13:fb:0a:0f:
f3:3a:f1:08:b5:e8:e0:2a:01:e0:08:53:4a:5e:39:
1b:d8:11:d6:d7:60:40:a7:1f:ad:9c:7b:93:b5:09:
32:b7:9c:f2:10:ec:49:0f:c2:19:da:57:7d:43:57:
e1:f9:8d:64:b8:c1:68:41:c4:16:87:84:c6:ab:3c:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:EF:63:6F:1D:69:5A:67:85:0B:1E:06:28:66:CD:A5:30:62:40
X509v3 Authority Key Identifier:
keyid:3A:A5:18:71:0D:03:97:2C:75:A1:76:DB:C2:B9:97:38:80:D0:8C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7c:3c:a6:5a:c8:d0:e5:6f:df:ae:f9:f6:59:c6:9a:c2:9c:
e1:e8:ef:37:66:79:bc:33:6c:ac:13:b9:cc:34:de:d6:16:ca:
5c:76:cb:3c:ee:21:a1:e0:d8:6f:e4:1b:b8:88:b1:ef:ce:62:
5d:ee:4c:6d:da:f0:3a:1b:cc:eb:eb:11:61:91:72:ab:3f:c6:
f1:f9:c3:8d:12:1a:c3:97:00:9b:28:c8:b6:7c:1b:7f:ca:c4:
55:ff:e9:81:69:91:df:90:7d:df:6e:79:73:34:80:d4:57:f7:
0b:d2:fb:4a:32:28:bd:2f:3e:c1:78:b3:23:7f:ef:4e:c6:ed:
87:25:32:ca:93:aa:77:b3:ea:c3:64:ce:bc:fa:59:0f:7a:66:
21:1f:e0:84:76:41:7c:20:31:52:a1:85:fe:c4:4b:93:e3:8f:
e7:43:62:f1:35:bd:63:71:bf:7c:07:1c:b0:f1:ae:8d:52:c2:
07:cf:65:75:f7:7e:ff:e5:2f:66:3a:4f:51:f4:ee:cc:87:24:
59:ea:bf:01:63:d3:e6:d4:1f:09:09:b2:50:0b:35:76:1a:1d:
f9:f8:d2:bb:10:d3:52:f8:54:dc:33:d6:57:eb:ac:78:25:0d:
51:7c:68:68:9f:64:eb:b2:69:04:83:9c:93:73:66:ad:e6:f3:
11:79:32:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGanoQItwSAbl0wj0hfTrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYTUxODcxMGQwMzk3MmM3NWExNzZkYmMyYjk5NzM4ODBk
MDhjOWYwHhcNMjYwOTIyMDAwMTAxWhcNMjYwOTIzMDAwMTAxWjAzMTEwLwYDVQQD
Eyg5ZWNmZWY2MzZmMWQ2OTVhNjc4NTBiMWUwNjI4NjZjZGE1MzA2MjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GCnIuS3aTAO8ZD//g7vqQHH4AP2
nN/ohQ48UAxlh8J8i65OYGZAvIG+KyTUCkwHt8lGYj3dVrh2sCzSM4IeDU4hls3r
PZWo/SPLMIuyxfQ3AqShYDOYeje87MzvuPMfCS3anEo0T25OgRxAvdqXi8DM8g5K
/oTR6o4+76gOFvaNeP9WE6bEX/IufCM+5y1g+VgS1M3FU7Q5zpOyRp9PofOOco9H
wlJdqRHr3zpce8976J0q02C1c0z66R66sRP7Cg/zOvEItejgKgHgCFNKXjkb2BHW
12BApx+tnHuTtQkyt5zyEOxJD8IZ2ld9Q1fh+Y1kuMFoQcQWh4TGqzyqcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7P72NvHWlaZ4ULHgYoZs2lMGJAMB8GA1UdIwQY
MBaAFDqlGHENA5csdaF228K5lziA0IyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3FVWWNRMERseXgxb1hiYndybVhPSURRako4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjIt
Nzk4MWZkZTZiZjM5LzEvT3FVWWNRMERseXgxb1hiYndybVhPSURRako4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjItNzk4MWZkZTZiZjM5
LzEvT3FVWWNRMERseXgxb1hiYndybVhPSURRako4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3w8plrI
0OVv36759lnGmsKc4ejvN2Z5vDNsrBO5zDTe1hbKXHbLPO4hoeDYb+QbuIix785i
Xe5MbdrwOhvM6+sRYZFyqz/G8fnDjRIaw5cAmyjItnwbf8rEVf/pgWmR35B93255
czSA1Ff3C9L7SjIovS8+wXizI3/vTsbthyUyypOqd7Pqw2TOvPpZD3pmIR/ghHZB
fCAxUqGF/sRLk+OP50Ni8TW9Y3G/fAccsPGujVLCB89ldfd+/+UvZjpPUfTuzIck
Weq/AWPT5tQfCQmyUAs1dhod+fjSuxDTUvhU3DPWV+useCUNUXxoaJ9k67JpBIOc
k3NmrebzEXkyqw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:57:32 2026 by rpki-client