Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: 44c4Soy2DGAGSYK+Y93YSxuCwd6+rP90u88KW0tnzV8=
Subject key identifier: F9:FB:39:EA:B0:15:6B:5B:BC:21:9B:B6:2D:9D:81:86:7A:14:7D:58
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 01A13936B9C6BEBD72C9945743F799BF3F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 13D0
Signing time: Wed 14 Oct 2026 07:00:50 +0000
Manifest this update: Wed 14 Oct 2026 07:00:50 +0000
Manifest next update: Thu 15 Oct 2026 07:00:50 +0000
Files and hashes: 1: E_iRTXv34ZqZD3pIYO9UjKGuMZM.roa (hash: i1fiJO0e9H9m1mOdq45mO4/oIY+M6L6ueaw+taXDZdY=)
2: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: nL/H0a7mJv+ine28SwuDR966QGryRjsL3YNUxGyGKJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:36:b9:c6:be:bd:72:c9:94:57:43:f7:99:bf:3f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Oct 14 07:00:50 2026 GMT
Not After : Oct 15 07:00:50 2026 GMT
Subject: CN=f9fb39eab0156b5bbc219bb62d9d81867a147d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:af:22:9a:8f:52:5a:38:63:e2:cc:f8:a0:
3e:a7:3e:cf:f7:40:85:6e:c1:fa:8d:d9:62:2d:89:
8a:90:98:f1:3f:9a:1d:d2:3f:b3:80:7f:59:f5:86:
ca:3e:6a:62:fc:30:51:28:75:54:89:e4:71:98:f7:
04:b0:24:74:84:5b:ee:d9:30:03:a2:79:a5:d1:2f:
72:77:97:53:df:82:43:b7:56:fc:a2:3c:4c:ef:77:
13:63:b1:49:39:9f:3c:40:bd:64:e5:0e:26:43:2b:
ee:c5:39:15:c0:68:08:8f:0e:c0:c4:b3:ee:b3:a9:
f0:52:b8:9e:c7:93:15:a7:d1:52:02:b1:7a:6c:93:
1f:c6:4f:3d:cf:f9:f1:a1:cd:b8:d7:bc:63:6f:d2:
07:68:05:93:87:49:7e:e8:7b:82:ec:46:33:fd:07:
97:15:3d:3d:79:a4:c8:9b:73:83:68:95:9b:34:aa:
29:cf:b3:92:d6:00:34:b0:a9:98:ab:d9:17:63:48:
94:0b:0f:3f:dd:37:1e:ff:65:5a:5e:01:59:57:9f:
84:e6:35:c0:a7:21:cd:18:f9:27:25:46:dc:3c:0d:
d3:04:88:ad:90:4f:72:dc:4b:92:57:f9:3b:36:ad:
1b:fb:a7:0b:93:57:fa:76:00:92:0d:ab:75:fb:c8:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:39:EA:B0:15:6B:5B:BC:21:9B:B6:2D:9D:81:86:7A:14:7D:58
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:35:6d:fc:e5:30:86:19:34:53:32:56:24:23:24:c4:c6:02:
e5:83:f3:f0:e0:cb:04:ba:d7:3c:ee:e7:0c:7a:8c:6b:69:15:
f7:45:30:86:f6:6d:fe:2f:f7:0e:85:62:50:b9:75:ae:1d:bb:
54:73:5f:e6:61:51:9c:62:9d:6b:a0:43:f7:9b:4a:70:1b:73:
a0:43:65:29:36:15:04:ba:01:96:fa:2e:a8:c0:c8:06:51:01:
37:71:99:0b:06:9d:c4:8a:47:93:db:b5:57:e7:46:ed:9f:74:
e3:a9:58:a0:06:bc:9b:19:8a:8d:55:67:92:d4:ae:8d:cc:2d:
cd:1e:78:c1:f2:25:79:45:56:76:dd:f0:8e:e4:d7:d5:9a:34:
eb:10:39:2f:08:35:b4:85:cc:ca:0c:01:fb:68:34:f2:3f:7c:
8f:2b:af:98:69:6e:8a:62:dd:a8:99:bd:75:0a:da:70:07:31:
1a:60:91:b3:40:95:2f:5a:37:44:4b:00:66:d7:e6:87:6f:73:
1c:d0:10:ce:53:90:35:68:7b:5a:df:fe:b8:15:6e:3c:aa:67:
ae:e0:44:2f:6a:f2:b0:1e:0b:1f:d3:de:89:72:af:82:6e:e9:
2b:29:c4:ec:60:bb:78:8c:b7:e1:c5:91:b5:25:29:74:73:f8:
8a:9a:bc:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE5NrnGvr1yyZRXQ/eZvz+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMDk5NWE4N2JmNjRkYzQ5NDliODE5ZGZlMDJmOGE1ODZh
YWE0ZGUwHhcNMjYxMDE0MDcwMDUwWhcNMjYxMDE1MDcwMDUwWjAzMTEwLwYDVQQD
EyhmOWZiMzllYWIwMTU2YjViYmMyMTliYjYyZDlkODE4NjdhMTQ3ZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXqvIpqPUlo4Y+LM+KA+pz7P90CF
bsH6jdliLYmKkJjxP5od0j+zgH9Z9YbKPmpi/DBRKHVUieRxmPcEsCR0hFvu2TAD
onml0S9yd5dT34JDt1b8ojxM73cTY7FJOZ88QL1k5Q4mQyvuxTkVwGgIjw7AxLPu
s6nwUriex5MVp9FSArF6bJMfxk89z/nxoc2417xjb9IHaAWTh0l+6HuC7EYz/QeX
FT09eaTIm3ODaJWbNKopz7OS1gA0sKmYq9kXY0iUCw8/3Tce/2VaXgFZV5+E5jXA
pyHNGPknJUbcPA3TBIitkE9y3EuSV/k7Nq0b+6cLk1f6dgCSDat1+8iyJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPn7OeqwFWtbvCGbti2dgYZ6FH1YMB8GA1UdIwQY
MBaAFKAJlah79k3ElJuBnf4C+KWGqqTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGIt
ODkzOGU5NTU2MzQyLzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGItODkzOGU5NTU2MzQy
LzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTVt/OUw
hhk0UzJWJCMkxMYC5YPz8ODLBLrXPO7nDHqMa2kV90UwhvZt/i/3DoViULl1rh27
VHNf5mFRnGKda6BD95tKcBtzoENlKTYVBLoBlvouqMDIBlEBN3GZCwadxIpHk9u1
V+dG7Z9046lYoAa8mxmKjVVnktSujcwtzR54wfIleUVWdt3wjuTX1Zo06xA5Lwg1
tIXMygwB+2g08j98jyuvmGluimLdqJm9dQracAcxGmCRs0CVL1o3REsAZtfmh29z
HNAQzlOQNWh7Wt/+uBVuPKpnruBEL2rysB4LH9PeiXKvgm7pKynE7GC7eIy34cWR
tSUpdHP4ipq8Ow==
-----END CERTIFICATE-----
Generated at Wed Oct 14 17:30:55 2026 by rpki-client