Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: aM7jjMe8VEHqTmLSnnrEYot++jWKtyN7zbmuosG3cXM=
Subject key identifier: 7B:8B:8F:17:2F:1D:A4:C9:7D:06:E7:2B:1A:17:4C:D0:A4:BC:CF:84
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 01A12B44F50CC21D9FF35DD293064D41A266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 14:01:41 +0000
Manifest this update: Sun 11 Oct 2026 14:01:41 +0000
Manifest next update: Mon 12 Oct 2026 14:01:41 +0000
Files and hashes: 1: 9qy5igh9qX4Uci7bRZZV_psOu7w.roa (hash: Tnhc5d5aGwpLgFhdFa9P4ZDIL3T2P5zMzH6turPE6uU=)
2: fOlQP3-PfpjSE6EMsORwi3KiU_0.roa (hash: 9xJNvssU8LW9KKQFyieBw8RskBII5JpvnR6eOew6NAc=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: fulx9+RhvS5AuZpQsogXB/eW61BqOXAqVGa3LhL2DXA=)
4: y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa (hash: 1lKjAhubbXr/HU27nWYgH1iiL0s0e2dhdfsbjU73q04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:f5:0c:c2:1d:9f:f3:5d:d2:93:06:4d:41:a2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Oct 11 14:01:41 2026 GMT
Not After : Oct 12 14:01:41 2026 GMT
Subject: CN=7b8b8f172f1da4c97d06e72b1a174cd0a4bccf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:97:5c:ab:c0:d3:0e:a2:78:af:f2:e3:e2:
ba:37:04:16:ce:02:91:a4:6f:41:5a:2f:28:2e:01:
cd:b2:71:8c:6e:ab:2a:38:9f:6e:e8:15:41:64:cc:
54:49:03:3a:ef:ed:30:51:59:2a:94:3b:90:9b:65:
26:a8:a9:46:96:d6:c7:9a:3c:b7:8e:c7:a8:87:79:
57:ad:d6:8e:4d:af:3c:16:f4:94:fb:f4:bd:50:29:
01:c8:60:f6:bc:1f:9f:86:5b:ec:31:d0:69:67:12:
be:8c:7f:fd:62:8d:bb:2d:55:7c:11:a7:87:0c:41:
36:88:79:cd:69:38:91:2d:d7:e9:24:46:a8:50:ea:
70:b0:b8:a9:c5:37:31:b8:2c:6e:d2:83:9e:44:b2:
7f:1a:df:45:2c:76:2c:d7:55:50:e8:06:a1:de:f0:
06:b0:f3:fd:c6:79:76:e3:ab:e9:43:4d:0e:61:db:
54:6c:8e:3e:95:fa:04:07:63:95:a7:2e:01:d9:e5:
3a:13:6f:cd:ae:8c:54:50:2b:13:f0:2e:03:bf:98:
68:39:f9:9b:ca:1d:73:60:71:3c:80:b6:e9:d4:71:
d8:98:dd:06:af:80:29:72:e9:3b:94:15:9a:a0:6f:
a6:b5:bb:84:fb:7f:64:8d:22:01:59:5e:6a:3f:68:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8B:8F:17:2F:1D:A4:C9:7D:06:E7:2B:1A:17:4C:D0:A4:BC:CF:84
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:24:b4:fb:94:24:2f:a8:fa:30:c9:48:0f:8d:52:ff:05:8a:
23:d4:ac:e2:31:b7:23:53:2b:b1:c4:f6:d7:70:c9:54:4a:2a:
7e:50:f7:b8:87:e0:b8:c9:d4:16:b3:c8:ba:86:dc:27:fe:6e:
9b:20:32:76:dd:09:38:fd:3a:74:34:bb:ac:5e:d8:23:18:a8:
b8:59:2b:90:57:ff:e7:ae:80:e1:b1:b7:b7:10:ff:cb:20:2e:
30:ac:76:a9:70:47:d4:d8:e9:7f:8c:26:4d:dc:58:d2:74:10:
f3:ff:f3:57:c3:10:b5:e5:3b:8d:da:97:8a:50:59:6f:10:e6:
20:e0:d6:8c:7f:25:59:3b:25:9b:75:f4:66:47:37:e7:c2:ba:
d9:eb:65:60:d3:44:5e:3d:b0:7e:05:bb:8f:d7:7a:3b:ce:86:
9b:4d:11:16:fc:3e:e4:38:ef:c2:e1:da:42:61:12:c5:e6:12:
cc:77:ef:3a:f1:5a:a9:92:ad:15:63:80:be:93:44:af:f7:9a:
c7:57:ca:a4:4c:ec:27:43:4a:45:0c:61:52:d8:4c:eb:35:0d:
29:13:05:41:e1:ef:a7:f2:19:5e:63:2f:99:95:48:b3:a8:d5:
bd:b1:89:9f:21:52:87:cd:a9:b1:43:68:20:45:ec:7b:4d:38:
12:ae:b7:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErRPUMwh2f813SkwZNQaJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx
ODM0MjkwHhcNMjYxMDExMTQwMTQxWhcNMjYxMDEyMTQwMTQxWjAzMTEwLwYDVQQD
Eyg3YjhiOGYxNzJmMWRhNGM5N2QwNmU3MmIxYTE3NGNkMGE0YmNjZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVqXXKvA0w6ieK/y4+K6NwQWzgKR
pG9BWi8oLgHNsnGMbqsqOJ9u6BVBZMxUSQM67+0wUVkqlDuQm2UmqKlGltbHmjy3
jseoh3lXrdaOTa88FvSU+/S9UCkByGD2vB+fhlvsMdBpZxK+jH/9Yo27LVV8EaeH
DEE2iHnNaTiRLdfpJEaoUOpwsLipxTcxuCxu0oOeRLJ/Gt9FLHYs11VQ6Aah3vAG
sPP9xnl246vpQ00OYdtUbI4+lfoEB2OVpy4B2eU6E2/NroxUUCsT8C4Dv5hoOfmb
yh1zYHE8gLbp1HHYmN0Gr4Apcuk7lBWaoG+mtbuE+39kjSIBWV5qP2hZxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuLjxcvHaTJfQbnKxoXTNCkvM+EMB8GA1UdIwQY
MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt
N2QwODI5MWE3NjYyLzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy
LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyS0+5Qk
L6j6MMlID41S/wWKI9Ss4jG3I1MrscT213DJVEoqflD3uIfguMnUFrPIuobcJ/5u
myAydt0JOP06dDS7rF7YIxiouFkrkFf/566A4bG3txD/yyAuMKx2qXBH1Njpf4wm
TdxY0nQQ8//zV8MQteU7jdqXilBZbxDmIODWjH8lWTslm3X0Zkc358K62etlYNNE
Xj2wfgW7j9d6O86Gm00RFvw+5DjvwuHaQmESxeYSzHfvOvFaqZKtFWOAvpNEr/ea
x1fKpEzsJ0NKRQxhUthM6zUNKRMFQeHvp/IZXmMvmZVIs6jVvbGJnyFSh82psUNo
IEXse004Eq63kg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:38:36 2026 by rpki-client