
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
File: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft (raw, json)
Hash identifier: Zx0Z/0tI4tgymK6NIcheMp6glDORcp8hiqhKdboLrYY=
Subject key identifier: EA:A9:98:79:06:50:3D:7C:4F:16:EB:A5:21:9E:CE:3F:79:2A:86:4A
Authority key identifier: 3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
Certificate issuer: /CN=3a62746967900b24c59d214f40532d76feff81e4
Certificate serial: 01A0EDAF695A18E475C805FF2F8769F0898F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
Manifest number: 01B7
Signing time: Tue 29 Sep 2026 15:01:30 +0000
Manifest this update: Tue 29 Sep 2026 15:01:30 +0000
Manifest next update: Wed 30 Sep 2026 15:01:30 +0000
Files and hashes: 1: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl (hash: p0C9fUsHWEWfZKI5Ng0Ja+f6TXcUxhlFEGm+vUMcVcs=)
2: aIKcl8xyOE8c2T5VfSfWvfIZQIU.roa (hash: rP1uuNWiqen7TPqE1GYuJGzp+rVZ1OGQdR+rdwxUdFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:69:5a:18:e4:75:c8:05:ff:2f:87:69:f0:89:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a62746967900b24c59d214f40532d76feff81e4
Validity
Not Before: Sep 29 15:01:30 2026 GMT
Not After : Sep 30 15:01:30 2026 GMT
Subject: CN=eaa9987906503d7c4f16eba5219ece3f792a864a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:74:7d:bb:57:07:fe:6a:46:9b:ae:b7:46:
b9:47:80:92:b4:d6:59:95:f5:b7:00:6f:86:04:92:
a8:92:ee:61:b1:05:9b:3e:46:ba:2b:9c:7d:e2:ff:
0b:9e:88:26:ad:60:63:16:55:66:7b:eb:18:60:75:
2f:19:1f:77:58:df:d3:48:ee:9b:9e:86:7e:ae:4d:
6b:45:54:73:bd:e6:83:e3:2f:5a:53:5c:be:8d:4f:
bc:56:fe:0d:3d:56:45:74:b2:78:09:e5:b9:6e:96:
66:7d:cf:68:dc:70:36:34:6e:66:e9:f1:b3:0d:bd:
12:eb:40:01:84:63:f1:9d:25:0e:00:5a:80:71:78:
46:d3:6d:ae:7c:77:2d:b6:69:cf:87:3c:49:97:06:
ae:5c:60:07:2e:fd:27:5c:00:b3:3d:a6:6a:e3:84:
03:19:a5:85:71:37:f8:75:a5:37:eb:4f:21:0b:88:
b8:4a:7c:6c:04:82:5e:cb:f6:5c:d6:c7:53:81:d8:
ea:fc:54:20:a9:eb:43:08:1d:1b:b7:93:a6:2f:52:
77:5a:f6:be:6f:d9:3a:99:0f:3f:67:a1:1f:bb:32:
3d:5c:7b:e8:5e:c8:4a:a9:62:d1:98:79:68:b4:11:
ad:c7:c0:3b:41:f0:5e:ce:39:3e:6a:f3:10:c3:11:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A9:98:79:06:50:3D:7C:4F:16:EB:A5:21:9E:CE:3F:79:2A:86:4A
X509v3 Authority Key Identifier:
keyid:3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a0:27:cd:6a:74:51:94:b6:4b:89:10:ef:86:87:aa:57:67:
65:17:97:8e:eb:74:f3:5d:67:95:8f:95:88:df:98:03:92:2b:
b6:61:d3:e1:7b:05:32:18:b8:9b:ad:5a:42:c2:7c:cd:26:7d:
6d:78:f1:a3:14:12:56:e4:05:29:58:38:90:c0:d1:8b:29:82:
22:ee:26:a2:46:ea:a4:0e:19:f5:22:12:2b:1a:11:99:3c:69:
71:41:12:dc:c7:44:3a:1c:a2:37:dc:a7:b0:2b:63:ee:03:b1:
f1:64:ae:4d:39:01:d5:d2:b9:1c:d9:54:9d:dc:94:1d:15:9f:
c5:e0:e4:ff:67:bc:2a:b4:37:5b:e8:93:ff:4f:bf:7f:d6:20:
94:0d:1a:77:e5:3d:78:df:4c:fc:e6:73:5f:57:f1:f6:dd:c1:
59:a6:fb:d3:e5:50:a7:ab:a8:10:6d:ab:3a:4c:60:d7:c5:64:
78:e8:f8:2a:fc:bf:76:31:dc:1d:b4:1b:1a:00:eb:af:62:4a:
62:21:b3:99:ed:7e:5a:90:e7:8f:91:8c:3f:16:ff:e9:02:75:
0f:fc:91:75:a0:0e:88:55:96:21:e3:34:49:b7:a0:f7:11:30:
06:cb:6d:6f:73:50:25:80:6d:c6:57:ce:5c:7c:75:ad:f0:e1:
98:51:1e:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtr2laGOR1yAX/L4dp8ImPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNjI3NDY5Njc5MDBiMjRjNTlkMjE0ZjQwNTMyZDc2ZmVm
ZjgxZTQwHhcNMjYwOTI5MTUwMTMwWhcNMjYwOTMwMTUwMTMwWjAzMTEwLwYDVQQD
EyhlYWE5OTg3OTA2NTAzZDdjNGYxNmViYTUyMTllY2UzZjc5MmE4NjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7F0fbtXB/5qRpuut0a5R4CStNZZ
lfW3AG+GBJKoku5hsQWbPka6K5x94v8LnogmrWBjFlVme+sYYHUvGR93WN/TSO6b
noZ+rk1rRVRzveaD4y9aU1y+jU+8Vv4NPVZFdLJ4CeW5bpZmfc9o3HA2NG5m6fGz
Db0S60ABhGPxnSUOAFqAcXhG022ufHcttmnPhzxJlwauXGAHLv0nXACzPaZq44QD
GaWFcTf4daU3608hC4i4SnxsBIJey/Zc1sdTgdjq/FQgqetDCB0bt5OmL1J3Wva+
b9k6mQ8/Z6EfuzI9XHvoXshKqWLRmHlotBGtx8A7QfBezjk+avMQwxF4ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqpmHkGUD18TxbrpSGezj95KoZKMB8GA1UdIwQY
MBaAFDpidGlnkAskxZ0hT0BTLXb+/4HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21KMGFXZVFDeVRGblNGUFFGTXRkdjdfZ2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82MjkyY2QtZDEwYi00ZTQ4LTgzY2Mt
MjVkODVjZjZlODVhLzEvT21KMGFXZVFDeVRGblNGUFFGTXRkdjdfZ2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82MjkyY2QtZDEwYi00ZTQ4LTgzY2MtMjVkODVjZjZlODVh
LzEvT21KMGFXZVFDeVRGblNGUFFGTXRkdjdfZ2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaAnzWp0
UZS2S4kQ74aHqldnZReXjut0811nlY+ViN+YA5IrtmHT4XsFMhi4m61aQsJ8zSZ9
bXjxoxQSVuQFKVg4kMDRiymCIu4mokbqpA4Z9SISKxoRmTxpcUES3MdEOhyiN9yn
sCtj7gOx8WSuTTkB1dK5HNlUndyUHRWfxeDk/2e8KrQ3W+iT/0+/f9YglA0ad+U9
eN9M/OZzX1fx9t3BWab70+VQp6uoEG2rOkxg18VkeOj4Kvy/djHcHbQbGgDrr2JK
YiGzme1+WpDnj5GMPxb/6QJ1D/yRdaAOiFWWIeM0Sbeg9xEwBsttb3NQJYBtxlfO
XHx1rfDhmFEerw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 03:23:52 2026 by rpki-client