Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
File: oL_QbOhVti2baIzYxTXV9JTNOTI.mft (raw, json)
Hash identifier: EBKi9SC8YyhLgp/S4WJQh9SDiV+TryVHd3TRIsJM/ZE=
Subject key identifier: AE:D7:3D:09:E4:99:78:97:A0:25:46:7C:02:A5:35:FC:7C:7B:58:6C
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 01A13522D1671B53FF73E57DA6B2916434B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
Manifest number: 1AA7
Signing time: Tue 13 Oct 2026 12:00:36 +0000
Manifest this update: Tue 13 Oct 2026 12:00:36 +0000
Manifest next update: Wed 14 Oct 2026 12:00:36 +0000
Files and hashes: 1: LKfnJFP3stLPWkjsWhakvnaxplg.roa (hash: 3FNKamFL0cuW1/UK40gTZTnTQ2szlVWiH3Kqp5bB2Jc=)
2: oL_QbOhVti2baIzYxTXV9JTNOTI.crl (hash: 6BS1/QIkN98OuXa84a8hW1fzpglCEVS4ycyB90eizfs=)
3: vvVsYWWoAOYdpjYQrdRCqadNLp0.roa (hash: 7wSWVSVEK2tx71oit1iR5MZZ41C88wL0lV1CJmf846k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:22:d1:67:1b:53:ff:73:e5:7d:a6:b2:91:64:34:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Oct 13 12:00:36 2026 GMT
Not After : Oct 14 12:00:36 2026 GMT
Subject: CN=aed73d09e4997897a025467c02a535fc7c7b586c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:4e:5b:b1:3b:03:30:c5:e7:2c:5f:08:f6:
30:0d:1f:cb:c6:b7:80:ef:bd:c3:f8:2c:b6:9c:47:
70:7a:7a:52:86:c8:97:65:5b:a7:6a:63:91:77:ba:
d4:70:85:65:2b:72:c2:5c:89:ae:0f:83:36:c3:09:
bd:20:62:42:10:53:b7:40:96:f6:98:6d:94:47:f4:
3f:c9:fe:77:08:39:64:dc:27:bb:e4:8d:ec:c2:af:
8e:5b:8b:51:c8:c4:fa:f7:42:34:f3:44:4c:f1:f8:
70:c5:83:aa:87:e8:f3:86:b0:3e:95:a2:f6:6f:44:
7b:b7:fc:8c:33:7f:84:e2:98:5d:c8:d9:6d:d7:8f:
4d:50:69:ae:5f:d6:26:9f:72:7f:b6:7b:ab:f4:05:
cb:a2:d5:8d:16:e3:f3:d6:b7:cc:ef:72:4f:8f:55:
9f:bc:2d:70:d6:70:0b:b6:fe:4d:18:76:3b:54:86:
c3:b8:ac:0f:aa:f5:88:57:ef:d4:df:84:ac:8e:95:
1b:17:26:44:24:a2:fa:9c:e3:5b:07:41:92:6d:d0:
a2:33:97:d1:46:16:7c:fe:28:c7:ea:e2:b8:bd:04:
72:4d:d8:a4:4d:4d:33:50:37:c4:fd:9f:83:f2:1a:
68:60:cd:78:81:c6:7c:4b:02:03:f4:ee:7e:4d:0e:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D7:3D:09:E4:99:78:97:A0:25:46:7C:02:A5:35:FC:7C:7B:58:6C
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9d:b3:7d:d8:5e:bc:1b:6a:13:94:00:ab:63:6e:2f:82:c9:
f1:5a:34:31:0b:f7:ed:e4:10:9f:93:64:64:3d:8e:fc:86:d8:
4f:93:a7:28:c0:fe:c3:d7:56:79:53:d9:56:e0:b1:33:9d:96:
0d:91:e2:7e:97:6b:9f:cd:98:da:d4:e1:eb:90:f2:a5:e5:77:
42:e0:2f:84:1f:da:7f:1b:ff:41:80:db:85:9b:f9:20:6a:97:
13:38:a5:e1:81:c2:55:49:32:db:ee:a4:29:35:e2:2d:a1:cf:
ca:04:76:65:9b:d9:d6:4f:9d:1e:1d:b9:03:ae:2b:20:c8:cd:
fe:7c:b8:4b:a1:5d:e6:ce:23:a4:5d:e1:3e:99:b9:76:25:4a:
df:49:61:51:ff:71:cc:a7:f6:82:a6:91:59:c8:be:80:eb:b8:
76:42:4a:57:84:8b:d5:b7:09:85:1d:12:36:2e:3e:69:65:09:
2a:5a:98:d6:ea:82:1f:82:a4:1a:5c:bd:03:41:58:52:1c:64:
b0:2a:5c:b3:8f:07:ee:a5:5a:5b:e4:d3:cf:69:2e:2c:e5:db:
d9:0b:b6:55:43:26:57:ca:71:82:b0:2e:06:fb:d1:0f:40:41:
1a:04:82:bf:5e:01:3b:19:3d:31:df:bc:3c:d1:1a:81:33:1c:
54:ef:d2:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1ItFnG1P/c+V9prKRZDSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYmZkMDZjZTg1NWI2MmQ5YjY4OGNkOGM1MzVkNWY0OTRj
ZDM5MzIwHhcNMjYxMDEzMTIwMDM2WhcNMjYxMDE0MTIwMDM2WjAzMTEwLwYDVQQD
EyhhZWQ3M2QwOWU0OTk3ODk3YTAyNTQ2N2MwMmE1MzVmYzdjN2I1ODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8hOW7E7AzDF5yxfCPYwDR/LxreA
773D+Cy2nEdwenpShsiXZVunamORd7rUcIVlK3LCXImuD4M2wwm9IGJCEFO3QJb2
mG2UR/Q/yf53CDlk3Ce75I3swq+OW4tRyMT690I080RM8fhwxYOqh+jzhrA+laL2
b0R7t/yMM3+E4phdyNlt149NUGmuX9Ymn3J/tnur9AXLotWNFuPz1rfM73JPj1Wf
vC1w1nALtv5NGHY7VIbDuKwPqvWIV+/U34SsjpUbFyZEJKL6nONbB0GSbdCiM5fR
RhZ8/ijH6uK4vQRyTdikTU0zUDfE/Z+D8hpoYM14gcZ8SwID9O5+TQ7vsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7XPQnkmXiXoCVGfAKlNfx8e1hsMB8GA1UdIwQY
MBaAFKC/0GzoVbYtm2iM2MU11fSUzTkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2Ut
NjcxODM5MjAwNjA0LzEvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2UtNjcxODM5MjAwNjA0
LzEvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJ2zfdhe
vBtqE5QAq2NuL4LJ8Vo0MQv37eQQn5NkZD2O/IbYT5OnKMD+w9dWeVPZVuCxM52W
DZHifpdrn82Y2tTh65DypeV3QuAvhB/afxv/QYDbhZv5IGqXEzil4YHCVUky2+6k
KTXiLaHPygR2ZZvZ1k+dHh25A64rIMjN/ny4S6Fd5s4jpF3hPpm5diVK30lhUf9x
zKf2gqaRWci+gOu4dkJKV4SL1bcJhR0SNi4+aWUJKlqY1uqCH4KkGly9A0FYUhxk
sCpcs48H7qVaW+TTz2kuLOXb2Qu2VUMmV8pxgrAuBvvRD0BBGgSCv14BOxk9Md+8
PNEagTMcVO/Sow==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:29:28 2026 by rpki-client