Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: RBvlp0xYDA30G1NpSvLUhs48/7z87wP0GxmZfT8rCVo=
Subject key identifier: 5D:CA:48:16:1C:B6:2D:E7:DD:9F:30:CA:5E:19:D3:51:BB:FF:49:B9
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 019FAA87F5F12CCA9F88DFBD40F4B1994F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: 027B
Signing time: Tue 28 Jul 2026 21:01:04 +0000
Manifest this update: Tue 28 Jul 2026 21:01:04 +0000
Manifest next update: Wed 29 Jul 2026 21:01:04 +0000
Files and hashes: 1: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (hash: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: YR/1Rz/+RmlX4kUO3THkxNzI3l+WDONb0z/wPlgVENg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:f5:f1:2c:ca:9f:88:df:bd:40:f4:b1:99:4f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Jul 28 21:01:04 2026 GMT
Not After : Jul 29 21:01:04 2026 GMT
Subject: CN=5dca48161cb62de7dd9f30ca5e19d351bbff49b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:37:f4:d4:5d:44:46:6a:e4:8b:46:44:23:
7a:e5:b0:44:8d:34:d9:84:a9:18:98:8d:9c:3c:b0:
00:dc:64:3c:2c:11:d9:42:1b:5a:0f:73:bc:44:3d:
8b:5a:fc:66:6d:ea:f9:26:63:5c:d0:64:4d:b0:99:
c5:7e:dd:c4:03:49:38:00:0b:9d:de:94:b8:5a:61:
14:f6:76:06:78:08:51:36:90:49:f3:65:56:f9:5b:
33:61:89:b3:6c:cc:88:b9:68:4f:0c:6a:20:0d:6e:
3d:ff:3d:e5:58:18:31:cc:f4:77:2a:08:d7:d2:c9:
58:7f:3c:a7:a4:fa:f9:6c:50:79:51:e6:a0:a9:5c:
dc:cf:95:c4:fe:90:1e:45:a6:99:32:24:46:49:2b:
dc:39:62:d2:c2:f8:f1:b8:96:48:df:c1:0e:6b:3e:
b3:c0:91:66:2d:1e:ce:bc:b6:20:6c:a1:18:81:c0:
93:fd:f4:9c:15:ae:a3:ef:48:58:1a:24:ca:fc:0a:
76:7a:d5:14:f2:13:f0:5c:32:6b:8c:87:c5:54:7b:
0c:1f:8a:3c:a5:8c:6f:c9:3d:aa:1f:15:81:9b:9a:
28:16:84:24:7f:1e:64:f9:62:2c:69:aa:40:0a:b7:
97:87:ee:09:66:0b:cf:fc:c1:a6:32:76:f9:02:88:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CA:48:16:1C:B6:2D:E7:DD:9F:30:CA:5E:19:D3:51:BB:FF:49:B9
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bc:af:f7:2b:c7:8e:a3:db:33:81:3d:11:92:e0:df:b4:5b:
cb:cc:d9:8f:9c:1c:ed:67:6f:9a:a8:56:14:77:0f:64:be:fd:
d5:49:a9:7a:08:ec:c0:26:9b:25:2d:6c:0d:34:d7:ec:e1:4e:
e6:ff:1b:74:70:7a:5d:0f:7f:88:f5:45:dc:f1:cc:87:1a:a8:
1c:6f:9d:56:0a:e6:23:42:ce:7a:4b:f0:91:ad:80:55:81:07:
4e:5f:61:b7:d4:44:68:6a:00:94:5c:a7:3e:e6:33:f6:34:9a:
ae:b1:fb:8b:61:88:64:97:46:97:e4:06:84:b5:6d:67:f0:94:
d3:d5:b0:28:63:12:00:cb:d6:6c:21:45:76:59:3c:11:25:77:
3e:9b:1d:b8:89:24:eb:89:70:a8:71:5c:7d:75:ab:94:21:43:
93:cb:7c:0f:fc:6c:10:a1:3c:01:e2:61:a0:98:91:ac:a6:df:
e2:ab:b4:c1:a9:cd:3a:8c:44:2b:0a:8b:f4:d0:bd:75:6a:6e:
0a:f5:9c:04:8e:6a:53:07:1f:18:52:ee:37:27:b9:8d:8c:c0:
b1:90:ac:a6:cf:86:b9:00:01:43:8a:22:4f:6a:ea:8e:7e:8e:
87:2c:4f:94:e6:c2:81:95:65:c4:f9:2a:4d:11:a8:99:7a:b0:
72:2f:c6:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh/XxLMqfiN+9QPSxmU8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGNiNWIyNmVhNjVkODFmZGY2M2ExZDliMjAwNTcwOTEw
MDAzYjAwHhcNMjYwNzI4MjEwMTA0WhcNMjYwNzI5MjEwMTA0WjAzMTEwLwYDVQQD
Eyg1ZGNhNDgxNjFjYjYyZGU3ZGQ5ZjMwY2E1ZTE5ZDM1MWJiZmY0OWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f039NRdREZq5ItGRCN65bBEjTTZ
hKkYmI2cPLAA3GQ8LBHZQhtaD3O8RD2LWvxmber5JmNc0GRNsJnFft3EA0k4AAud
3pS4WmEU9nYGeAhRNpBJ82VW+VszYYmzbMyIuWhPDGogDW49/z3lWBgxzPR3KgjX
0slYfzynpPr5bFB5UeagqVzcz5XE/pAeRaaZMiRGSSvcOWLSwvjxuJZI38EOaz6z
wJFmLR7OvLYgbKEYgcCT/fScFa6j70hYGiTK/Ap2etUU8hPwXDJrjIfFVHsMH4o8
pYxvyT2qHxWBm5ooFoQkfx5k+WIsaapACreXh+4JZgvP/MGmMnb5AogQPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3KSBYcti3n3Z8wyl4Z01G7/0m5MB8GA1UdIwQY
MBaAFKCMtbJupl2B/fY6HZsgBXCRAAOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgt
Y2VlOTNjMjVlNjM5LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgtY2VlOTNjMjVlNjM5
LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7yv9yvH
jqPbM4E9EZLg37Rby8zZj5wc7WdvmqhWFHcPZL791UmpegjswCabJS1sDTTX7OFO
5v8bdHB6XQ9/iPVF3PHMhxqoHG+dVgrmI0LOekvwka2AVYEHTl9ht9REaGoAlFyn
PuYz9jSarrH7i2GIZJdGl+QGhLVtZ/CU09WwKGMSAMvWbCFFdlk8ESV3PpsduIkk
64lwqHFcfXWrlCFDk8t8D/xsEKE8AeJhoJiRrKbf4qu0wanNOoxEKwqL9NC9dWpu
CvWcBI5qUwcfGFLuNye5jYzAsZCsps+GuQABQ4oiT2rqjn6OhyxPlObCgZVlxPkq
TRGomXqwci/GQw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:12:24 2026 by rpki-client