Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: Ixyb/e0EBEEdenf5QbMvcf1hFlWyRA+Jx33i6nv5gtU=
Subject key identifier: 83:09:BC:81:AF:8F:2E:A8:BC:51:AC:2C:6A:75:69:58:80:DC:43:D4
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 01A0F45644686823E84EA467E631C13A6E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 1A82
Signing time: Wed 30 Sep 2026 22:01:29 +0000
Manifest this update: Wed 30 Sep 2026 22:01:29 +0000
Manifest next update: Thu 01 Oct 2026 22:01:29 +0000
Files and hashes: 1: IkpqFJlNa2437VP_tcxeJyVAPMM.roa (hash: mlTIEBNdJZbIbhX3NLDEQ4pnepBeofaptKU6NdPs/uI=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: uhDyE5OueVW1rLJqdToSd/GhqWGsk+IDV+FQQh605eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:56:44:68:68:23:e8:4e:a4:67:e6:31:c1:3a:6e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Sep 30 22:01:29 2026 GMT
Not After : Oct 1 22:01:29 2026 GMT
Subject: CN=8309bc81af8f2ea8bc51ac2c6a75695880dc43d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:a7:9a:fc:c7:8d:71:08:32:21:17:f7:27:
69:6b:18:7d:72:d2:a1:90:65:d4:c5:d1:96:23:73:
f2:46:d9:81:ca:8c:7d:0b:70:26:ec:bb:1c:36:b2:
9d:7b:12:33:c2:42:66:02:24:64:bc:e7:12:bb:be:
03:63:1e:1e:7a:ec:32:63:ea:28:18:5d:8f:5a:98:
f8:60:23:35:2f:96:e8:c8:37:0a:fc:75:c4:58:ca:
0e:dc:4a:38:88:93:3a:65:26:02:01:84:a9:ed:74:
bf:e0:ba:22:66:07:d4:8f:64:4f:6c:87:cd:8f:e8:
02:b3:04:7c:ce:ae:99:03:bf:6c:3f:f1:0c:4e:72:
9d:f4:7d:0d:ef:19:8c:5e:bb:82:d7:2e:9c:68:7a:
d8:82:49:be:55:9c:77:47:cc:ca:05:54:fa:7a:88:
89:74:fa:f5:7e:9e:ad:ff:9f:34:ef:98:9a:48:bc:
a2:ff:3d:93:28:a4:57:b0:84:e1:55:79:64:be:d9:
44:cc:cd:77:56:3e:a8:7c:13:96:f1:9a:0f:8e:e9:
c2:0a:43:83:d8:53:ee:10:bb:5f:44:08:95:cc:5f:
12:d6:6c:a6:4c:b1:f4:6e:76:8b:6d:96:7f:4c:0e:
bc:35:13:40:73:e3:3a:4c:64:a3:77:3c:95:2c:52:
9c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:BC:81:AF:8F:2E:A8:BC:51:AC:2C:6A:75:69:58:80:DC:43:D4
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:06:24:21:13:93:66:13:ab:56:3f:3e:56:7b:63:6a:23:ef:
d0:30:58:73:90:0e:a8:98:81:62:92:14:bc:fd:93:1d:07:3f:
fc:78:a6:f1:20:cf:5d:4e:fe:03:0a:20:14:b9:5e:43:a0:ff:
5a:8a:24:6b:ed:cc:63:c2:34:13:b6:43:77:23:87:8c:91:4c:
a7:01:f1:ed:d1:c9:40:c1:86:c3:66:55:9c:3e:76:11:4e:3f:
66:8e:71:8b:a1:f9:f7:9d:05:12:18:c6:59:9c:59:f4:bd:c4:
f3:b3:59:df:a3:1e:3b:0d:cf:50:33:2d:dd:35:ef:3e:93:0c:
40:4b:b4:c5:ad:ae:30:2d:56:a1:97:c0:55:25:62:41:76:db:
a1:11:9a:15:9c:0e:f0:ad:f1:d3:2b:5d:82:c3:3c:8e:5b:61:
20:06:50:d2:88:73:b1:e4:95:36:46:2a:e7:5b:14:65:7a:a6:
6e:ff:28:99:5c:00:aa:6d:60:39:d8:e4:bd:f2:d1:f8:72:31:
c5:d9:5b:b8:fe:4c:dd:05:5b:0f:8c:ea:4b:ca:3b:43:d0:74:
cf:94:df:44:2d:0d:80:14:48:d5:8f:ae:08:45:3b:0c:30:0e:
47:f4:25:fe:c2:3e:ae:3c:47:40:d1:0d:f0:65:09:17:c3:65:
eb:db:b1:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD0VkRoaCPoTqRn5jHBOm5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZTI1YWNhNDM0ZmVlYjZmNTczYWE0NjNhMTJjNjk0MGJj
NGQxOTgwHhcNMjYwOTMwMjIwMTI5WhcNMjYxMDAxMjIwMTI5WjAzMTEwLwYDVQQD
Eyg4MzA5YmM4MWFmOGYyZWE4YmM1MWFjMmM2YTc1Njk1ODgwZGM0M2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC6nmvzHjXEIMiEX9ydpaxh9ctKh
kGXUxdGWI3PyRtmByox9C3Am7LscNrKdexIzwkJmAiRkvOcSu74DYx4eeuwyY+oo
GF2PWpj4YCM1L5boyDcK/HXEWMoO3Eo4iJM6ZSYCAYSp7XS/4LoiZgfUj2RPbIfN
j+gCswR8zq6ZA79sP/EMTnKd9H0N7xmMXruC1y6caHrYgkm+VZx3R8zKBVT6eoiJ
dPr1fp6t/58075iaSLyi/z2TKKRXsIThVXlkvtlEzM13Vj6ofBOW8ZoPjunCCkOD
2FPuELtfRAiVzF8S1mymTLH0bnaLbZZ/TA68NRNAc+M6TGSjdzyVLFKcfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMJvIGvjy6ovFGsLGp1aViA3EPUMB8GA1UdIwQY
MBaAFPziWspDT+629XOqRjoSxpQLxNGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wYzlkYmItZjJlZi00ZjE1LThiMmUt
NjQzZTQ0NzQ0NGQ2LzEvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8wYzlkYmItZjJlZi00ZjE1LThiMmUtNjQzZTQ0NzQ0NGQ2
LzEvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQYkIROT
ZhOrVj8+VntjaiPv0DBYc5AOqJiBYpIUvP2THQc//Him8SDPXU7+AwogFLleQ6D/
Wooka+3MY8I0E7ZDdyOHjJFMpwHx7dHJQMGGw2ZVnD52EU4/Zo5xi6H5950FEhjG
WZxZ9L3E87NZ36MeOw3PUDMt3TXvPpMMQEu0xa2uMC1WoZfAVSViQXbboRGaFZwO
8K3x0ytdgsM8jlthIAZQ0ohzseSVNkYq51sUZXqmbv8omVwAqm1gOdjkvfLR+HIx
xdlbuP5M3QVbD4zqS8o7Q9B0z5TfRC0NgBRI1Y+uCEU7DDAOR/Ql/sI+rjxHQNEN
8GUJF8Nl69uxBg==
-----END CERTIFICATE-----
Generated at Thu Oct 1 09:14:45 2026 by rpki-client