
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: OKtrvBVueVb6k9YIeK0CMv8MHkiFGzvwlDQ1aQeqKX0=
Subject key identifier: 1B:54:F1:75:FD:73:25:AE:BF:0E:7E:AF:34:89:FF:4D:C2:C6:61:54
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 01A125B059D2B03C2298F186521D7AB3BB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 0D39
Signing time: Sat 10 Oct 2026 12:01:16 +0000
Manifest this update: Sat 10 Oct 2026 12:01:16 +0000
Manifest next update: Sun 11 Oct 2026 12:01:16 +0000
Files and hashes: 1: 5frQX9750HL3NN8-MyZHPLOJTsI.roa (hash: pxj83AtJMZvXD4c0K+PkZXGVzhxJMxFhP3iPQm4dFuQ=)
2: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: iFi7gruMD+TXf9uSbMi9CXnuHzo3j60bvy6SlGFYuRM=)
3: yzlJwvPmp_FWuAYFJVX7D34LL5o.roa (hash: oyzk/Lk1+iN0NJFMafNwk7yqhxfs0bRUTnktsAxu4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:59:d2:b0:3c:22:98:f1:86:52:1d:7a:b3:bb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Oct 10 12:01:16 2026 GMT
Not After : Oct 11 12:01:16 2026 GMT
Subject: CN=1b54f175fd7325aebf0e7eaf3489ff4dc2c66154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:38:a0:66:40:e8:59:bb:48:5f:cb:86:96:
3d:24:00:0d:9c:3e:13:25:8a:57:55:cd:cf:b9:91:
2c:23:bd:32:8f:bb:00:e6:45:8a:5c:bf:49:44:ad:
ae:dc:f5:22:dd:34:79:54:60:47:8a:48:e1:05:46:
40:4c:6f:23:eb:ed:54:8e:7a:3b:96:82:67:5d:8e:
2e:94:40:bf:e3:20:f4:db:93:29:9a:bc:6a:e6:99:
15:c2:58:46:c7:5a:e9:dd:ef:26:da:29:c8:77:67:
fd:23:e4:2a:91:17:0e:0d:4d:de:e2:8c:c0:84:ec:
20:36:21:21:79:6e:41:97:75:27:60:39:df:37:68:
de:1e:39:65:04:97:07:71:58:ef:2e:54:28:03:00:
e1:1b:db:fd:1b:78:5e:4f:68:13:f7:dd:0d:94:66:
cd:b5:49:fb:06:43:19:ef:5f:1c:ab:61:37:77:73:
8f:34:73:60:57:da:b3:bb:54:07:5d:8b:09:47:8d:
bb:7c:9c:8d:12:93:b7:7b:78:89:a9:1c:42:b1:5d:
bd:5a:0a:1f:49:99:13:e7:c2:81:92:ee:75:70:c4:
4f:76:be:c1:0d:3c:e6:5d:0d:ef:67:b9:58:b9:c4:
8e:e4:38:79:cb:ff:5a:12:cb:85:96:70:c5:ef:0c:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:54:F1:75:FD:73:25:AE:BF:0E:7E:AF:34:89:FF:4D:C2:C6:61:54
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4b:04:e4:51:46:b9:f0:25:f3:6d:2b:49:d6:24:26:b4:2a:
0e:40:f5:a0:41:29:ea:68:87:d9:5a:d4:ae:4b:e6:64:d0:e4:
15:98:ff:ef:eb:7f:a8:ca:62:e0:ff:b3:85:91:31:f2:69:b0:
dd:9f:53:24:4f:ff:fc:6d:2a:24:42:1d:66:f9:61:0c:4a:b2:
73:78:ee:97:fd:83:5f:3d:4c:86:5a:04:43:85:80:ab:8b:84:
4b:39:f8:61:85:e9:e4:fa:56:63:56:45:a7:b7:f4:bb:8b:00:
2c:07:b2:a9:76:9c:98:0f:dd:d7:51:2e:42:0f:d7:8c:c3:93:
85:9f:97:ea:50:2c:bb:26:cf:5f:db:bc:29:c7:89:4d:b1:51:
f0:9d:65:3a:4e:70:dc:be:fb:cc:6c:7c:19:51:e4:68:01:de:
62:5c:2b:99:b4:a7:1a:cf:e2:eb:d7:b7:0f:8e:fe:09:87:93:
12:00:d4:0a:8a:23:6e:7a:1e:4d:7b:08:75:8f:f2:ed:dc:dc:
fb:34:5a:79:a3:8f:b3:2c:0c:bc:06:18:7c:87:fe:5f:b1:0e:
13:89:fd:f7:3d:e1:82:f1:0d:b8:40:35:ae:95:df:3e:08:6b:
76:27:04:d2:2c:a6:de:82:58:41:2e:00:b4:cd:76:6d:61:1c:
d8:09:a3:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElsFnSsDwimPGGUh16s7tTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTNhMGMxZjFkODFlZTA2OTY0M2I0MGMzMjM5OTliYjU1
ODQ2MzEwHhcNMjYxMDEwMTIwMTE2WhcNMjYxMDExMTIwMTE2WjAzMTEwLwYDVQQD
EygxYjU0ZjE3NWZkNzMyNWFlYmYwZTdlYWYzNDg5ZmY0ZGMyYzY2MTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sE4oGZA6Fm7SF/LhpY9JAANnD4T
JYpXVc3PuZEsI70yj7sA5kWKXL9JRK2u3PUi3TR5VGBHikjhBUZATG8j6+1Ujno7
loJnXY4ulEC/4yD025Mpmrxq5pkVwlhGx1rp3e8m2inId2f9I+QqkRcODU3e4ozA
hOwgNiEheW5Bl3UnYDnfN2jeHjllBJcHcVjvLlQoAwDhG9v9G3heT2gT990NlGbN
tUn7BkMZ718cq2E3d3OPNHNgV9qzu1QHXYsJR427fJyNEpO3e3iJqRxCsV29Wgof
SZkT58KBku51cMRPdr7BDTzmXQ3vZ7lYucSO5Dh5y/9aEsuFlnDF7wxNgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtU8XX9cyWuvw5+rzSJ/03CxmFUMB8GA1UdIwQY
MBaAFEXjoMHx2B7gaWQ7QMMjmZu1WEYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYjMxZGEtNDQ5MS00ZjNlLWJhZTUt
M2Q1N2I2NmIyMTM0LzEvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYjMxZGEtNDQ5MS00ZjNlLWJhZTUtM2Q1N2I2NmIyMTM0
LzEvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0sE5FFG
ufAl820rSdYkJrQqDkD1oEEp6miH2VrUrkvmZNDkFZj/7+t/qMpi4P+zhZEx8mmw
3Z9TJE///G0qJEIdZvlhDEqyc3jul/2DXz1MhloEQ4WAq4uESzn4YYXp5PpWY1ZF
p7f0u4sALAeyqXacmA/d11EuQg/XjMOThZ+X6lAsuybPX9u8KceJTbFR8J1lOk5w
3L77zGx8GVHkaAHeYlwrmbSnGs/i69e3D47+CYeTEgDUCoojbnoeTXsIdY/y7dzc
+zRaeaOPsywMvAYYfIf+X7EOE4n99z3hgvENuEA1rpXfPghrdicE0iym3oJYQS4A
tM12bWEc2AmjTg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:48:22 2026 by rpki-client