Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: AlheVOiHKLf7mlG69g2cfciAcPILMgA3zmgcKQzTZh8=
Subject key identifier: 25:94:EB:14:0F:C5:33:7E:32:97:A1:66:20:D0:F0:30:43:07:37:F4
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 01A0C47C3A357D2B28241F78ED23034F05A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: 030D
Signing time: Mon 21 Sep 2026 15:01:10 +0000
Manifest this update: Mon 21 Sep 2026 15:01:10 +0000
Manifest next update: Tue 22 Sep 2026 15:01:10 +0000
Files and hashes: 1: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (hash: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: EKtmhh+uAA6fNd4VXI2O1er0U0FsoItLZdTXT5dtVCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:3a:35:7d:2b:28:24:1f:78:ed:23:03:4f:05:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Sep 21 15:01:10 2026 GMT
Not After : Sep 22 15:01:10 2026 GMT
Subject: CN=2594eb140fc5337e3297a16620d0f030430737f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:81:e0:89:31:f5:98:a9:28:fe:e3:d8:fa:
e7:e6:fb:6a:bd:cc:73:b5:81:0d:df:ff:d1:5a:de:
64:75:f5:2e:a9:3b:d8:82:70:41:61:77:98:75:7d:
83:3f:c7:cc:97:40:ae:a0:a0:f0:18:31:01:04:dc:
ea:a9:23:90:bd:7b:32:d1:0a:94:39:7c:a2:3b:60:
50:5c:26:a0:97:72:c2:3e:61:6c:1e:4b:0b:9c:c2:
27:53:41:84:7a:73:27:4e:44:1d:a0:c6:32:f9:93:
9b:11:89:ec:58:16:74:67:80:3d:a5:6a:04:33:73:
e3:34:ba:3e:bf:1e:3f:21:a1:7c:5e:10:e6:33:79:
f3:d9:58:cf:f4:39:41:e9:7e:6a:aa:c3:5d:52:1f:
13:35:7f:f1:62:e8:54:b1:cd:d8:ad:12:7d:b9:a7:
2a:2a:48:12:4b:8e:47:95:45:35:39:29:92:9a:56:
2e:07:86:b6:bd:ef:10:c7:d7:14:4d:3e:e3:d4:b0:
be:e1:9e:66:28:82:60:68:1f:5e:ad:4c:ad:57:55:
14:16:7e:20:13:86:1d:54:6f:46:93:07:12:e3:a1:
97:ad:97:0a:95:df:31:c5:17:41:24:04:7d:ee:53:
c3:25:4b:69:3d:4a:90:a7:52:de:7c:29:91:63:f1:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:94:EB:14:0F:C5:33:7E:32:97:A1:66:20:D0:F0:30:43:07:37:F4
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ef:66:75:d8:ba:58:a6:a8:a0:f3:a1:bb:72:41:1c:54:2b:
cc:bd:80:2e:d2:f0:9b:62:8b:c7:c1:2f:d7:f5:54:af:08:22:
50:6a:de:8c:c7:f3:1d:47:f2:bb:65:40:b5:08:44:a9:16:97:
4d:1b:8a:a1:d7:11:09:c8:ef:f7:da:3b:51:71:f0:b6:ec:d5:
2e:74:15:56:a8:f0:dc:46:9c:3e:5d:e1:70:6e:15:9f:c2:ad:
91:94:a2:50:b2:09:d5:2e:83:7d:57:d8:cc:3d:60:a0:6f:01:
70:3e:84:60:42:3d:18:d4:96:a6:a7:7f:4f:02:8c:0b:f1:5b:
cf:ca:33:c7:e6:f8:7a:57:19:3d:1c:2d:f0:fe:77:78:a2:39:
c7:74:0a:6d:fe:71:cf:fa:27:07:b7:87:22:10:79:18:6a:2a:
3a:e2:81:e7:6f:b7:0c:a8:37:cc:6e:17:a9:b8:36:82:2f:9b:
3b:30:01:8a:c6:a4:46:01:90:4f:31:e9:ce:41:5b:76:47:f5:
93:af:a0:bb:58:77:48:6b:ae:bf:71:12:17:37:ab:07:15:de:
e1:49:ee:cf:1f:7b:4c:25:49:a5:ce:ed:e9:55:22:6f:e2:54:
c8:32:92:2a:0c:8d:23:ef:d4:ac:31:20:5c:5c:83:db:a8:49:
f5:98:3c:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfDo1fSsoJB947SMDTwWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGNiNWIyNmVhNjVkODFmZGY2M2ExZDliMjAwNTcwOTEw
MDAzYjAwHhcNMjYwOTIxMTUwMTEwWhcNMjYwOTIyMTUwMTEwWjAzMTEwLwYDVQQD
EygyNTk0ZWIxNDBmYzUzMzdlMzI5N2ExNjYyMGQwZjAzMDQzMDczN2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH+B4Ikx9ZipKP7j2Prn5vtqvcxz
tYEN3//RWt5kdfUuqTvYgnBBYXeYdX2DP8fMl0CuoKDwGDEBBNzqqSOQvXsy0QqU
OXyiO2BQXCagl3LCPmFsHksLnMInU0GEenMnTkQdoMYy+ZObEYnsWBZ0Z4A9pWoE
M3PjNLo+vx4/IaF8XhDmM3nz2VjP9DlB6X5qqsNdUh8TNX/xYuhUsc3YrRJ9uacq
KkgSS45HlUU1OSmSmlYuB4a2ve8Qx9cUTT7j1LC+4Z5mKIJgaB9erUytV1UUFn4g
E4YdVG9GkwcS46GXrZcKld8xxRdBJAR97lPDJUtpPUqQp1LefCmRY/G7PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWU6xQPxTN+MpehZiDQ8DBDBzf0MB8GA1UdIwQY
MBaAFKCMtbJupl2B/fY6HZsgBXCRAAOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgt
Y2VlOTNjMjVlNjM5LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgtY2VlOTNjMjVlNjM5
LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFu9mddi6
WKaooPOhu3JBHFQrzL2ALtLwm2KLx8Ev1/VUrwgiUGrejMfzHUfyu2VAtQhEqRaX
TRuKodcRCcjv99o7UXHwtuzVLnQVVqjw3EacPl3hcG4Vn8KtkZSiULIJ1S6DfVfY
zD1goG8BcD6EYEI9GNSWpqd/TwKMC/Fbz8ozx+b4elcZPRwt8P53eKI5x3QKbf5x
z/onB7eHIhB5GGoqOuKB52+3DKg3zG4Xqbg2gi+bOzABisakRgGQTzHpzkFbdkf1
k6+gu1h3SGuuv3ESFzerBxXe4Unuzx97TCVJpc7t6VUib+JUyDKSKgyNI+/UrDEg
XFyD26hJ9Zg8cw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:00:38 2026 by rpki-client