Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: QS7s0YedZr6VPqHvTvDRsBDyDxBIN3THrs8KMOchoxw=
Subject key identifier: 9B:B8:F1:C9:63:D4:D2:58:8F:E7:25:91:1D:6A:1E:17:90:AA:0C:F4
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 01A13891F633E09E960BF8C8E88F086B2882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 1825
Signing time: Wed 14 Oct 2026 04:00:52 +0000
Manifest this update: Wed 14 Oct 2026 04:00:52 +0000
Manifest next update: Thu 15 Oct 2026 04:00:52 +0000
Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: NFPgqCaUGmai4xauzRDEtDWca57T4p1rtKnOJvYaO+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:91:f6:33:e0:9e:96:0b:f8:c8:e8:8f:08:6b:28:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Oct 14 04:00:52 2026 GMT
Not After : Oct 15 04:00:52 2026 GMT
Subject: CN=9bb8f1c963d4d2588fe725911d6a1e1790aa0cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:33:60:61:05:b6:e5:e1:bb:ce:8c:2c:4e:
f9:f3:ae:ba:94:37:16:19:4b:0c:ba:79:7f:e0:66:
2b:c5:f6:22:69:86:6d:0f:76:49:9f:b4:cb:74:96:
ec:e6:09:d1:95:bf:36:83:c6:f1:da:24:18:b4:06:
61:f8:cd:77:a4:7d:0b:38:f1:f2:9d:c7:9d:4f:23:
a0:11:7e:92:15:7e:53:00:d3:f6:25:4d:c8:a1:13:
8f:9c:39:98:7d:7a:64:c9:9c:e2:b4:78:8c:fe:ab:
ef:6e:e2:40:a9:c0:8c:e0:4e:88:05:4c:b7:8c:04:
fd:50:9c:de:97:18:35:fe:8b:52:a1:08:11:61:aa:
1c:65:04:28:f0:67:78:db:0a:4b:a6:b7:2f:11:12:
f0:db:4a:c0:fd:0d:13:2b:38:67:f5:af:b9:9f:e1:
5a:1f:86:53:e6:25:75:bc:02:65:b0:6b:9a:36:87:
44:9b:8f:4a:0e:65:50:02:f8:c4:7b:fa:26:04:59:
95:e2:e1:21:b9:00:ba:a2:6b:d2:66:4d:fb:59:0e:
d8:56:36:63:97:dc:2d:59:34:95:56:dd:37:04:92:
0a:10:c0:1a:19:17:80:8e:3d:ac:7d:a2:3c:d9:42:
8d:95:6a:71:d2:c5:63:d5:f2:e1:18:10:6f:1b:cf:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B8:F1:C9:63:D4:D2:58:8F:E7:25:91:1D:6A:1E:17:90:AA:0C:F4
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:52:b8:a9:dc:73:f8:41:0c:d4:ab:f0:4b:e3:5c:90:23:8c:
2a:cb:8a:d8:95:12:8f:80:87:c9:cb:d4:72:b2:71:50:5e:e3:
37:88:ad:26:eb:49:40:b0:c8:0e:bb:86:99:d7:a6:be:32:2d:
8f:3e:c5:57:5f:30:10:be:05:3c:19:ae:e0:d4:80:f5:e3:58:
0d:ef:b1:00:b3:be:78:3a:50:ef:1f:5d:63:b9:e1:f9:19:c9:
22:de:14:5d:41:d9:23:7d:7a:e6:50:66:60:12:a5:39:81:12:
1f:a8:1a:01:37:9b:1a:e0:90:20:be:18:ba:e3:60:46:06:3e:
83:87:94:f6:cd:e8:dd:cb:a0:06:c8:c9:a9:5d:91:98:92:99:
26:5c:20:a7:13:70:b1:74:22:ab:c7:eb:41:b8:38:fa:08:87:
6f:96:69:52:76:13:15:92:5f:93:65:85:c1:fb:ee:0d:5a:cb:
f5:03:99:5c:15:96:d6:96:a7:1d:4e:26:7f:0d:b3:8a:08:21:
b2:bc:9f:2c:9d:3a:86:f0:fa:6e:f7:8c:55:b0:d6:1a:bd:97:
15:6e:93:83:91:6c:34:c6:5d:53:bc:90:ac:ae:14:56:d5:b6:
17:27:b2:96:c8:78:34:3c:c5:19:25:0a:b1:5c:27:5f:50:65:
2e:4a:d4:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE4kfYz4J6WC/jI6I8IayiCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZWVhODQ2NTUxYzZlNDE5Yjk0N2UwZGExMDdlZWNiMDA3
MDQxOWEwHhcNMjYxMDE0MDQwMDUyWhcNMjYxMDE1MDQwMDUyWjAzMTEwLwYDVQQD
Eyg5YmI4ZjFjOTYzZDRkMjU4OGZlNzI1OTExZDZhMWUxNzkwYWEwY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlkzYGEFtuXhu86MLE758666lDcW
GUsMunl/4GYrxfYiaYZtD3ZJn7TLdJbs5gnRlb82g8bx2iQYtAZh+M13pH0LOPHy
ncedTyOgEX6SFX5TANP2JU3IoROPnDmYfXpkyZzitHiM/qvvbuJAqcCM4E6IBUy3
jAT9UJzelxg1/otSoQgRYaocZQQo8Gd42wpLprcvERLw20rA/Q0TKzhn9a+5n+Fa
H4ZT5iV1vAJlsGuaNodEm49KDmVQAvjEe/omBFmV4uEhuQC6omvSZk37WQ7YVjZj
l9wtWTSVVt03BJIKEMAaGReAjj2sfaI82UKNlWpx0sVj1fLhGBBvG89wxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJu48clj1NJYj+clkR1qHheQqgz0MB8GA1UdIwQY
MBaAFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODIt
MjgzMWE0ODUwNjQ1LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODItMjgzMWE0ODUwNjQ1
LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFK4qdxz
+EEM1KvwS+NckCOMKsuK2JUSj4CHycvUcrJxUF7jN4itJutJQLDIDruGmdemvjIt
jz7FV18wEL4FPBmu4NSA9eNYDe+xALO+eDpQ7x9dY7nh+RnJIt4UXUHZI3165lBm
YBKlOYESH6gaATebGuCQIL4YuuNgRgY+g4eU9s3o3cugBsjJqV2RmJKZJlwgpxNw
sXQiq8frQbg4+giHb5ZpUnYTFZJfk2WFwfvuDVrL9QOZXBWW1panHU4mfw2ziggh
sryfLJ06hvD6bveMVbDWGr2XFW6Tg5FsNMZdU7yQrK4UVtW2Fyeylsh4NDzFGSUK
sVwnX1BlLkrUBg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 13:02:16 2026 by rpki-client