Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: RxTOrKCXT7PPSOcWUIo3OeCFc7c1OxDNNhESU3MDLTg=
Subject key identifier: 5F:F7:9F:AB:60:CD:AB:63:84:53:57:5B:9C:F6:94:5C:DB:65:3C:D5
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 01A12C5741A157B1AFB5060C0F7A38CB106F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 17E4
Signing time: Sun 11 Oct 2026 19:01:18 +0000
Manifest this update: Sun 11 Oct 2026 19:01:18 +0000
Manifest next update: Mon 12 Oct 2026 19:01:18 +0000
Files and hashes: 1: P8plIkyK6-WuYhWZxeWDqVB7a_c.roa (hash: gqqEmeyJKHVYzAhKUFpmuQoKv1vSqMH75dr97tljCyo=)
2: ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa (hash: /95XUisimBxRniA8xsATdtoTuinBvyYV4aukwLkPKtI=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: HH1NPzrOXNMznkE6zHEkKZeYLSMpEDzV9Lpjx1CmfUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:41:a1:57:b1:af:b5:06:0c:0f:7a:38:cb:10:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Oct 11 19:01:18 2026 GMT
Not After : Oct 12 19:01:18 2026 GMT
Subject: CN=5ff79fab60cdab638453575b9cf6945cdb653cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:36:c7:d9:16:0f:b0:16:8e:2a:0b:4e:a3:
09:56:8d:04:b8:88:70:65:ad:ff:06:aa:f2:62:1a:
74:ee:88:5a:e9:5c:5c:3b:aa:ba:e7:56:47:56:67:
84:35:20:57:3b:cd:0f:91:53:82:4c:e8:ef:fc:c9:
f7:f6:f4:27:f7:81:22:8b:f2:c4:e4:0f:48:84:ef:
1d:0c:69:70:67:7a:8c:a9:d0:11:b9:0c:6c:42:07:
56:f0:2d:cf:3a:9b:f7:a3:bc:78:30:13:87:7e:07:
56:2d:08:2b:ef:80:30:a1:91:cc:a9:b4:5d:12:b0:
f6:df:90:e7:f8:f6:76:f6:0e:c0:b8:85:75:91:fa:
c7:21:59:84:1c:43:f8:3e:d3:fc:a6:81:de:31:5d:
62:83:f9:07:aa:12:01:78:4f:df:e1:60:fb:51:8a:
11:a9:35:01:d4:9e:75:de:69:6d:3f:86:d6:44:2f:
ec:b8:43:7e:40:49:80:97:0a:cd:a1:97:09:bd:63:
67:78:d6:9f:7a:c0:b1:1b:f2:f2:07:f6:9f:83:05:
b0:56:a4:bb:8f:ee:89:30:c5:4f:05:b4:67:2b:87:
44:bd:d8:52:75:4f:46:88:4d:1c:8f:39:bf:39:9a:
16:d3:f8:eb:04:4d:ae:a2:f6:83:f3:7a:c7:a4:a1:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F7:9F:AB:60:CD:AB:63:84:53:57:5B:9C:F6:94:5C:DB:65:3C:D5
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d2:eb:ca:40:26:fb:b8:49:26:ec:bf:5f:fd:aa:18:81:12:
cf:cf:c2:18:71:a7:a0:ee:e9:35:f0:ba:50:b7:93:37:56:73:
cc:50:98:c9:04:52:da:37:dc:b0:be:a0:f7:3d:7d:a0:39:42:
fc:74:bd:32:ba:cd:df:6a:95:e4:8e:09:52:f5:09:27:18:d5:
61:e3:27:d3:1e:9c:35:a1:47:89:f5:7b:02:a0:4b:96:05:9a:
d5:ce:6b:8f:38:57:f5:e3:8a:5d:a9:22:5f:98:1a:9d:a5:36:
b6:02:52:d2:c0:bb:d2:1d:d5:f6:4c:8a:55:3e:5a:ec:03:14:
b4:94:3b:be:15:08:ba:16:f3:57:33:0e:96:83:55:43:f8:42:
ee:84:a4:c4:92:19:12:32:cf:37:1f:14:36:e2:6b:03:d2:d4:
e1:a1:43:e1:0a:6f:13:e0:9a:0b:bc:cb:30:d7:48:86:13:77:
3d:56:bf:58:e6:78:0e:7c:6d:ab:59:72:e8:19:e3:3f:0c:4f:
43:ff:ea:92:d2:15:14:ed:63:40:7c:5d:47:98:18:7e:b7:ea:
ed:6d:8f:a9:cb:9f:d3:05:3a:49:9f:9f:88:5c:d2:17:be:29:
44:ac:90:87:0e:28:0c:0e:84:18:8d:41:8b:c6:ce:f6:9a:5d:
b3:17:9d:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsV0GhV7GvtQYMD3o4yxBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1
ZGY1MTQwHhcNMjYxMDExMTkwMTE4WhcNMjYxMDEyMTkwMTE4WjAzMTEwLwYDVQQD
Eyg1ZmY3OWZhYjYwY2RhYjYzODQ1MzU3NWI5Y2Y2OTQ1Y2RiNjUzY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfk2x9kWD7AWjioLTqMJVo0EuIhw
Za3/BqryYhp07oha6VxcO6q651ZHVmeENSBXO80PkVOCTOjv/Mn39vQn94Eii/LE
5A9IhO8dDGlwZ3qMqdARuQxsQgdW8C3POpv3o7x4MBOHfgdWLQgr74AwoZHMqbRd
ErD235Dn+PZ29g7AuIV1kfrHIVmEHEP4PtP8poHeMV1ig/kHqhIBeE/f4WD7UYoR
qTUB1J513mltP4bWRC/suEN+QEmAlwrNoZcJvWNneNafesCxG/LyB/afgwWwVqS7
j+6JMMVPBbRnK4dEvdhSdU9GiE0cjzm/OZoW0/jrBE2uovaD83rHpKF7ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/3n6tgzatjhFNXW5z2lFzbZTzVMB8GA1UdIwQY
MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt
MTRjNTkwZmVjN2UzLzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz
LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9LrykAm
+7hJJuy/X/2qGIESz8/CGHGnoO7pNfC6ULeTN1ZzzFCYyQRS2jfcsL6g9z19oDlC
/HS9MrrN32qV5I4JUvUJJxjVYeMn0x6cNaFHifV7AqBLlgWa1c5rjzhX9eOKXaki
X5ganaU2tgJS0sC70h3V9kyKVT5a7AMUtJQ7vhUIuhbzVzMOloNVQ/hC7oSkxJIZ
EjLPNx8UNuJrA9LU4aFD4QpvE+CaC7zLMNdIhhN3PVa/WOZ4Dnxtq1ly6BnjPwxP
Q//qktIVFO1jQHxdR5gYfrfq7W2Pqcuf0wU6SZ+fiFzSF74pRKyQhw4oDA6EGI1B
i8bO9ppdsxedug==
-----END CERTIFICATE-----
Generated at Mon Oct 12 06:14:19 2026 by rpki-client