Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: KvcKHtffm8S76JUO69OE4vfvV7Opm1HLWYyiSeNIdZA=
Subject key identifier: 26:4E:8E:52:F2:3D:22:E9:0D:93:21:A6:54:7F:AA:8E:03:18:BA:52
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 01A122E634CE5074B459EAFAB2976F371AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 1A97
Signing time: Fri 09 Oct 2026 23:01:14 +0000
Manifest this update: Fri 09 Oct 2026 23:01:14 +0000
Manifest next update: Sat 10 Oct 2026 23:01:14 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: kfNfN6yuXdNgS0bzGY0eDWlq8PN8HWyDGCBdfQ8IkK0=)
2: nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa (hash: WwxgQJEoxT9RlD+HkKWEjQjejeBr0IIFvMv1CfM5j4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:e6:34:ce:50:74:b4:59:ea:fa:b2:97:6f:37:1a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Oct 9 23:01:14 2026 GMT
Not After : Oct 10 23:01:14 2026 GMT
Subject: CN=264e8e52f23d22e90d9321a6547faa8e0318ba52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:00:87:26:8d:e2:80:cf:de:e6:91:fe:39:
43:b5:e5:00:ab:4b:f8:cd:6e:39:84:90:33:e3:ae:
e2:08:3c:8c:90:14:c6:91:80:c8:f7:ee:16:63:06:
a5:d4:f3:cf:ca:0b:cc:b7:3d:bc:5f:ed:10:a6:cd:
d2:2c:28:e8:68:fb:82:72:03:39:65:4c:a1:21:3d:
81:75:fd:d3:f9:74:8e:4f:4a:fa:29:e6:9d:e0:bb:
b4:ea:43:33:f3:fb:5b:a3:c8:bf:c5:d3:22:b6:70:
f3:f6:58:ac:9c:33:58:eb:d7:cf:66:97:6c:c6:ce:
9e:c5:bb:9f:b0:28:4e:2d:1b:fd:aa:6c:6b:72:76:
9d:27:b1:7f:60:2b:12:32:4f:38:5b:53:1b:33:0d:
a3:e9:72:ca:4c:3b:ca:a2:55:68:5a:51:fe:e9:29:
42:90:18:00:73:95:40:dc:c2:64:02:12:da:91:ac:
af:d6:e3:79:46:a8:72:32:09:e3:47:82:98:c5:49:
8c:b4:18:8d:e8:03:6a:03:96:3c:7f:74:01:f5:91:
2c:dd:09:97:a1:f7:5b:fa:80:93:42:8c:f9:f3:1e:
3d:ed:86:a0:40:c8:6e:53:1b:de:eb:d3:5a:3a:7b:
2c:6a:2d:cb:8b:bc:2c:25:5a:4b:0b:96:f2:8a:32:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:8E:52:F2:3D:22:E9:0D:93:21:A6:54:7F:AA:8E:03:18:BA:52
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9c:ce:69:f2:ef:91:9c:e9:f5:1f:ff:e1:23:56:20:03:cb:
4c:95:b3:c9:42:c4:71:b8:bf:fc:73:18:e0:93:6a:f9:a3:8b:
3a:09:9a:bd:27:11:5e:d2:b5:58:97:17:69:05:cb:4d:7b:ac:
ad:69:9b:b0:4d:b6:30:57:f3:9a:be:17:2e:03:df:93:cd:fb:
2a:60:33:68:8c:41:f0:4c:3a:a9:ed:54:2d:83:e2:d1:f9:aa:
09:54:53:30:8f:c6:a0:79:f5:b3:f8:cc:25:60:c6:a1:61:9c:
d0:b0:16:13:54:55:97:bf:18:27:af:75:2a:1b:d1:4d:2b:c5:
50:05:62:54:c8:75:27:22:9f:fd:8c:ee:d6:13:12:cf:2d:de:
55:cc:a6:a0:fe:8a:50:5d:5d:06:a9:56:eb:19:39:2f:db:96:
6f:4e:7b:95:6e:e2:dc:50:bb:9f:c7:e6:d4:b4:ff:89:7a:5f:
fd:2f:1d:e0:5d:78:62:a6:fe:ab:21:ac:53:9d:74:31:fe:81:
b6:48:2f:c4:af:5f:76:86:af:8b:eb:7d:76:90:49:d9:87:d0:
e1:b0:58:1b:64:ec:81:32:14:31:d5:b8:43:55:58:9f:31:44:
c5:84:ba:a1:35:64:27:7a:8a:b9:14:02:07:d9:e8:0e:8e:75:
bb:06:fc:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEi5jTOUHS0Wer6spdvNxr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhM2NmOTkxOWEyYzgxNDZjOTZmNWExNGIxNTc0NTliNzk0
YjZhMmUwHhcNMjYxMDA5MjMwMTE0WhcNMjYxMDEwMjMwMTE0WjAzMTEwLwYDVQQD
EygyNjRlOGU1MmYyM2QyMmU5MGQ5MzIxYTY1NDdmYWE4ZTAzMThiYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI0AhyaN4oDP3uaR/jlDteUAq0v4
zW45hJAz467iCDyMkBTGkYDI9+4WYwal1PPPygvMtz28X+0Qps3SLCjoaPuCcgM5
ZUyhIT2Bdf3T+XSOT0r6Kead4Lu06kMz8/tbo8i/xdMitnDz9lisnDNY69fPZpds
xs6exbufsChOLRv9qmxrcnadJ7F/YCsSMk84W1MbMw2j6XLKTDvKolVoWlH+6SlC
kBgAc5VA3MJkAhLakayv1uN5RqhyMgnjR4KYxUmMtBiN6ANqA5Y8f3QB9ZEs3QmX
ofdb+oCTQoz58x497YagQMhuUxve69NaOnssai3Li7wsJVpLC5byijIQNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZOjlLyPSLpDZMhplR/qo4DGLpSMB8GA1UdIwQY
MBaAFDo8+ZGaLIFGyW9aFLFXRZt5S2ouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMt
NzBjYmY1MTQ5YTVhLzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMtNzBjYmY1MTQ5YTVh
LzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5zOafLv
kZzp9R//4SNWIAPLTJWzyULEcbi//HMY4JNq+aOLOgmavScRXtK1WJcXaQXLTXus
rWmbsE22MFfzmr4XLgPfk837KmAzaIxB8Ew6qe1ULYPi0fmqCVRTMI/GoHn1s/jM
JWDGoWGc0LAWE1RVl78YJ691KhvRTSvFUAViVMh1JyKf/Yzu1hMSzy3eVcymoP6K
UF1dBqlW6xk5L9uWb057lW7i3FC7n8fm1LT/iXpf/S8d4F14Yqb+qyGsU510Mf6B
tkgvxK9fdoavi+t9dpBJ2YfQ4bBYG2TsgTIUMdW4Q1VYnzFExYS6oTVkJ3qKuRQC
B9noDo51uwb8Ng==
-----END CERTIFICATE-----
Generated at Sat Oct 10 04:30:53 2026 by rpki-client