Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: zJ2MAiPpU9DGrTbAUNO+xrGWHJzlkW9sTFTC7EE8qk4=
Subject key identifier: 1D:EC:41:38:F3:24:24:21:62:8E:25:E8:1E:83:A1:4B:24:8B:E0:AF
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 01A06CB94D939BCBD9367221D15E289B2BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1A3A
Signing time: Fri 04 Sep 2026 14:01:18 +0000
Manifest this update: Fri 04 Sep 2026 14:01:18 +0000
Manifest next update: Sat 05 Sep 2026 14:01:18 +0000
Files and hashes: 1: HbGW1bIuKJtcKHzffUf-4COhdZM.roa (hash: XbWavlk3zf17or5OmaUS0jVlWZ00ZlHjNhNZCQ7iW5c=)
2: gbJe-QJELQjG77ZNjAeXTNXNFEw.roa (hash: 1fpv/Uz2JKbxfrghTnax/Tb7Em3yN34FPhCyAtrNWL8=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: gMamSzr84jMt+qzbzFJPPUkfyJI5l3c4VAZlCQ8ZXts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:b9:4d:93:9b:cb:d9:36:72:21:d1:5e:28:9b:2b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Sep 4 14:01:18 2026 GMT
Not After : Sep 5 14:01:18 2026 GMT
Subject: CN=1dec4138f3242421628e25e81e83a14b248be0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:47:0d:b2:c9:21:58:9c:13:35:ad:c0:b4:
9a:d5:19:bb:f1:d2:46:48:b3:ad:4c:44:50:36:fe:
0a:77:c5:14:d9:f8:e1:9c:73:b2:9e:68:1a:4d:32:
f2:0d:95:89:e3:54:c5:ef:4d:ca:24:9a:57:7d:77:
22:bc:c5:48:09:f1:51:4b:86:fa:8f:d8:56:f8:7f:
6c:a8:92:f3:3a:b1:8a:b2:ef:45:6e:1b:3a:4b:36:
db:27:08:0b:3d:c3:92:3f:1c:14:66:a6:5e:5f:1f:
fc:17:7a:fb:5e:65:37:c2:c7:0f:a3:40:ee:dd:9d:
4a:f5:af:64:2a:28:7c:38:e8:5d:00:2f:2d:3a:b2:
fd:1f:10:f3:d3:e8:ca:8c:42:72:4c:77:5a:2e:f0:
78:20:92:d5:23:6a:3b:13:e9:c4:24:36:db:6f:91:
49:ea:8a:40:b5:4d:b2:3a:4c:b1:00:6a:57:a4:94:
9c:87:a2:22:80:21:3c:db:90:af:c8:2f:31:89:4d:
f6:56:10:2b:4a:5e:63:d5:d9:f2:ba:3c:97:20:5b:
45:0d:3b:9a:c5:ff:84:2d:bf:d2:19:ff:f5:2b:28:
8b:70:0e:25:5a:62:48:8c:0e:70:58:94:87:57:fc:
b7:4f:ac:5c:62:a7:79:0e:c1:54:4d:d4:1c:13:37:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:41:38:F3:24:24:21:62:8E:25:E8:1E:83:A1:4B:24:8B:E0:AF
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f7:0e:51:96:30:f5:29:04:ba:99:95:28:e1:65:c2:75:93:
63:27:75:8b:29:73:a7:fa:d7:a3:d9:70:7d:05:92:0f:de:98:
3a:ec:53:60:ef:1d:72:1e:a9:31:5b:65:ef:f8:c1:4d:6c:7b:
0f:08:35:b1:de:89:a6:83:5d:18:31:bc:1a:a7:4b:9c:ce:a9:
60:a3:6e:c3:b4:28:33:63:47:8d:eb:5b:b1:ee:1b:37:24:ae:
2e:af:ee:8a:6d:35:ae:21:ca:1b:ac:7b:95:7e:15:85:49:4c:
d2:77:d8:4c:b4:c8:44:60:ad:2e:ec:b5:57:e4:c9:fe:83:f4:
89:d4:78:a5:dd:a2:d0:e5:06:b0:2e:bb:f3:22:30:86:60:d8:
e5:3b:8a:f4:cc:83:74:1f:b6:14:cc:9d:a3:77:b0:b3:e6:58:
47:1b:c4:0c:6c:d2:54:3a:81:47:a5:f7:11:89:82:79:f3:86:
a3:d3:36:ac:b1:28:7a:f5:26:b9:16:ff:3f:f7:b5:b1:48:25:
1e:a5:63:11:e6:16:b8:cb:e2:2e:15:5e:e2:6e:52:16:94:29:
03:f5:08:e1:2f:44:27:c9:7e:c5:56:ef:1b:de:43:8f:b2:de:
93:1e:85:8d:78:72:6f:b8:f7:6e:dd:62:b4:26:6e:b6:c6:ac:
b5:43:6a:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBsuU2Tm8vZNnIh0V4omyvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTZkNmIwODc0NjFmZGVjNmE1YjlkNTJkMjk4MzJkOGYy
OTljODcwHhcNMjYwOTA0MTQwMTE4WhcNMjYwOTA1MTQwMTE4WjAzMTEwLwYDVQQD
EygxZGVjNDEzOGYzMjQyNDIxNjI4ZTI1ZTgxZTgzYTE0YjI0OGJlMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU9HDbLJIVicEzWtwLSa1Rm78dJG
SLOtTERQNv4Kd8UU2fjhnHOynmgaTTLyDZWJ41TF703KJJpXfXcivMVICfFRS4b6
j9hW+H9sqJLzOrGKsu9Fbhs6SzbbJwgLPcOSPxwUZqZeXx/8F3r7XmU3wscPo0Du
3Z1K9a9kKih8OOhdAC8tOrL9HxDz0+jKjEJyTHdaLvB4IJLVI2o7E+nEJDbbb5FJ
6opAtU2yOkyxAGpXpJSch6IigCE825CvyC8xiU32VhArSl5j1dnyujyXIFtFDTua
xf+ELb/SGf/1KyiLcA4lWmJIjA5wWJSHV/y3T6xcYqd5DsFUTdQcEzeBCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3sQTjzJCQhYo4l6B6DoUski+CvMB8GA1UdIwQY
MBaAFKCm1rCHRh/exqW51S0pgy2PKZyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUt
MTE0OGZkZTdhZWY3LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUtMTE0OGZkZTdhZWY3
LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPcOUZYw
9SkEupmVKOFlwnWTYyd1iylzp/rXo9lwfQWSD96YOuxTYO8dch6pMVtl7/jBTWx7
Dwg1sd6JpoNdGDG8GqdLnM6pYKNuw7QoM2NHjetbse4bNySuLq/uim01riHKG6x7
lX4VhUlM0nfYTLTIRGCtLuy1V+TJ/oP0idR4pd2i0OUGsC678yIwhmDY5TuK9MyD
dB+2FMydo3ews+ZYRxvEDGzSVDqBR6X3EYmCefOGo9M2rLEoevUmuRb/P/e1sUgl
HqVjEeYWuMviLhVe4m5SFpQpA/UI4S9EJ8l+xVbvG95Dj7Lekx6FjXhyb7j3bt1i
tCZutsastUNqfw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:19:00 2026 by rpki-client