Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: A6HEeSH+Axt97q85QNtS78Uv4e58q/BQkiZhjVmLOkM=
Subject key identifier: F9:C5:FA:AA:91:29:D5:BC:96:F0:C6:F1:52:5D:EE:AA:C5:5F:5D:1B
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 01A0C5FC11C7D7C6C4106BFEE2FDABF46BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 1A6F
Signing time: Mon 21 Sep 2026 22:00:26 +0000
Manifest this update: Mon 21 Sep 2026 22:00:26 +0000
Manifest next update: Tue 22 Sep 2026 22:00:26 +0000
Files and hashes: 1: 1Ci6CgQlWtwRj4abWotGCgJ_WbE.roa (hash: 21FDHL6tsfpOVwV9wPtKykM8GJxDD9usWaIS/proET0=)
2: BRf1u2tI0MdQq-fmpym4aodlAHc.roa (hash: EgaKCAtRV2lGFKlk2kU+aO26h/pUeqeqSUfRHYRzlNU=)
3: WlSa4s52rbN1YrdI2sTxISuXgVs.roa (hash: UFrSiCT3Ok3mVBZnw8kOQNxyLA+lThdQN1709llpw+A=)
4: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: DzVhDJxWceiOIW22DtDQrh4r1c0kaCVL20Q15eYJYpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:11:c7:d7:c6:c4:10:6b:fe:e2:fd:ab:f4:6b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Sep 21 22:00:26 2026 GMT
Not After : Sep 22 22:00:26 2026 GMT
Subject: CN=f9c5faaa9129d5bc96f0c6f1525deeaac55f5d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:14:53:a4:16:f5:af:ad:fb:68:2b:b7:7e:
ed:08:c1:ef:d8:ae:01:fe:0e:1e:cf:46:7e:a9:2c:
4d:0a:00:be:9b:cb:5f:3b:84:19:90:4f:91:30:92:
75:96:46:53:fd:0a:8e:99:92:92:04:c0:4b:7b:4e:
35:5f:fd:bf:38:d9:10:28:1c:4b:6b:9b:2d:45:01:
3b:af:01:4f:2d:2f:11:02:d7:99:73:f5:7a:3c:b7:
f7:7f:83:33:3a:0c:bf:5d:ff:47:36:01:22:f6:40:
ce:04:cf:0e:37:8e:61:81:53:b0:c8:da:5a:03:85:
fb:10:c2:9c:c0:91:88:d9:38:08:ef:10:c3:fd:c8:
1b:c7:5d:34:08:18:e4:bc:e5:47:94:de:dc:74:e1:
41:db:0f:d6:98:8d:d0:72:55:9c:85:6f:94:82:52:
6d:be:4d:d9:16:5b:fa:17:25:ea:3f:8c:96:6d:c8:
a4:ab:56:e0:79:7d:3d:f1:69:ab:ec:c0:84:9c:7b:
28:4b:df:84:ae:ff:0d:54:63:1d:09:38:5f:ee:3a:
6a:7f:d9:20:3e:fa:14:d1:cc:5c:cc:97:8b:e7:35:
d0:0c:6b:56:ed:13:19:4a:af:a7:d6:b6:e3:a2:0f:
3b:11:79:f8:cc:60:18:93:13:fa:ca:63:eb:7e:f5:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C5:FA:AA:91:29:D5:BC:96:F0:C6:F1:52:5D:EE:AA:C5:5F:5D:1B
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:38:16:ac:71:e3:18:62:8c:d4:52:92:3f:d0:f2:77:3f:69:
f1:97:a9:e8:13:77:80:74:30:50:90:ba:47:07:9c:b1:4e:9c:
ee:60:72:13:fc:d0:9e:75:e2:cb:7c:9e:b3:68:c2:88:96:3a:
4c:8a:a0:19:13:b3:f6:f1:1d:4a:15:0c:47:b8:d8:3a:0e:42:
5f:40:24:7a:c0:f6:a4:49:7a:cb:c6:e7:3b:65:6f:e7:46:55:
8f:fc:af:b8:16:6b:4f:3b:c3:c7:52:32:8c:b9:a7:ad:9d:20:
34:b7:87:93:3f:db:88:6d:65:94:dc:8f:ee:88:38:ca:60:a5:
85:5e:08:3e:20:f8:11:61:eb:21:8a:b6:2f:ab:b1:43:74:c1:
55:4d:7e:f9:44:61:fc:e8:ac:e0:3a:8b:53:d8:e1:a6:f4:73:
a1:e4:f2:33:6e:78:14:12:64:cf:75:52:07:f5:b1:e9:30:e7:
1f:21:5c:60:fc:70:21:cb:ec:c5:2e:38:f6:2a:a8:73:da:81:
1f:8c:34:e2:1b:77:60:4a:c8:af:07:d8:16:a7:c8:d5:58:1f:
1f:43:81:92:e3:a1:5b:d0:d3:a0:b2:bb:8b:f6:df:2f:88:d0:
61:f3:41:d9:85:c8:4d:67:90:04:fd:a3:05:fa:e8:a8:4c:a8:
9e:0f:69:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF/BHH18bEEGv+4v2r9Gu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTE1NDQ0MWRmOTYyM2VlYjVhMTk2MTM4ZDIxYmVmNTgy
NGI0NDEwHhcNMjYwOTIxMjIwMDI2WhcNMjYwOTIyMjIwMDI2WjAzMTEwLwYDVQQD
EyhmOWM1ZmFhYTkxMjlkNWJjOTZmMGM2ZjE1MjVkZWVhYWM1NWY1ZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOMUU6QW9a+t+2grt37tCMHv2K4B
/g4ez0Z+qSxNCgC+m8tfO4QZkE+RMJJ1lkZT/QqOmZKSBMBLe041X/2/ONkQKBxL
a5stRQE7rwFPLS8RAteZc/V6PLf3f4MzOgy/Xf9HNgEi9kDOBM8ON45hgVOwyNpa
A4X7EMKcwJGI2TgI7xDD/cgbx100CBjkvOVHlN7cdOFB2w/WmI3QclWchW+UglJt
vk3ZFlv6FyXqP4yWbcikq1bgeX098Wmr7MCEnHsoS9+Erv8NVGMdCThf7jpqf9kg
PvoU0cxczJeL5zXQDGtW7RMZSq+n1rbjog87EXn4zGAYkxP6ymPrfvXE+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnF+qqRKdW8lvDG8VJd7qrFX10bMB8GA1UdIwQY
MBaAFKChVEQd+WI+61oZYTjSG+9YJLRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmIt
OWQ5NDM2NzFhOGEzLzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmItOWQ5NDM2NzFhOGEz
LzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjgWrHHj
GGKM1FKSP9Dydz9p8Zep6BN3gHQwUJC6RwecsU6c7mByE/zQnnXiy3yes2jCiJY6
TIqgGROz9vEdShUMR7jYOg5CX0AkesD2pEl6y8bnO2Vv50ZVj/yvuBZrTzvDx1Iy
jLmnrZ0gNLeHkz/biG1llNyP7og4ymClhV4IPiD4EWHrIYq2L6uxQ3TBVU1++URh
/Ois4DqLU9jhpvRzoeTyM254FBJkz3VSB/Wx6TDnHyFcYPxwIcvsxS449iqoc9qB
H4w04ht3YErIrwfYFqfI1VgfH0OBkuOhW9DToLK7i/bfL4jQYfNB2YXITWeQBP2j
BfroqEyong9pmg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:47:32 2026 by rpki-client