Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: qbLegohpNfeNdOQN0Kl3fRaqWsSReZPw/2y3T1w8tTg=
Subject key identifier: 05:82:A3:C8:EF:40:16:A8:FC:F0:DC:99:10:8D:16:59:B4:0F:BC:A3
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 01A17092D8E076D4E3E881D8153E9C7A7E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 102C
Signing time: Sun 25 Oct 2026 01:00:34 +0000
Manifest this update: Sun 25 Oct 2026 01:00:34 +0000
Manifest next update: Mon 26 Oct 2026 01:00:34 +0000
Files and hashes: 1: 3hMHIVOHYf4xHOB_QIaghE5RKyU.roa (hash: iiTzIP6NLT0/sC8FwGaVheusdiRxnlTvSAKBPuTjCdI=)
2: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: xco+kP6tjksg0U5wXa8KsP+11LrfSVSUkcsJZIw7w+o=)
3: ylTUix0nZCbBGNa6yxbMJ3pbJDQ.asa (hash: oRmCnqZJex+p+VhWAUp4LwTMwfCm/4vGc6Wx1HLZbm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:92:d8:e0:76:d4:e3:e8:81:d8:15:3e:9c:7a:7e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Oct 25 01:00:34 2026 GMT
Not After : Oct 26 01:00:34 2026 GMT
Subject: CN=0582a3c8ef4016a8fcf0dc99108d1659b40fbca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:32:c0:31:cd:24:79:b7:42:4d:83:c0:41:
69:5d:e9:66:30:69:f8:1e:9d:ee:55:f1:2c:46:d2:
7d:d4:47:f3:a5:58:2f:20:c1:f4:fb:56:a1:33:b8:
92:84:46:32:d2:ba:39:a8:65:91:ff:ed:fe:6e:5b:
57:b4:69:06:a3:9b:73:ca:e5:b5:8b:eb:5c:f9:a8:
39:a9:51:75:05:43:58:6a:43:d5:a0:e8:34:93:dd:
41:b6:8e:c2:b1:43:b0:60:5f:80:97:00:9b:f6:0d:
02:e2:bf:08:94:c8:7c:c4:07:94:57:02:2c:a5:06:
3c:e4:6f:46:6d:87:f2:9f:82:06:32:aa:89:ae:aa:
b7:d7:42:b2:f2:74:57:fb:dd:5f:ee:2f:70:1a:00:
a3:a0:49:ae:32:db:26:72:14:9a:6c:6f:b9:0d:be:
d4:4f:9b:7e:d7:74:31:7f:75:03:e9:2f:a3:07:2f:
be:f6:af:00:24:7d:e1:c6:66:c3:03:89:98:eb:a4:
eb:9d:c7:54:08:97:28:d5:4b:42:8b:81:08:52:cc:
f5:73:26:c7:be:63:fd:68:7f:9a:f2:59:5c:33:84:
e1:31:c5:30:57:07:2f:e0:83:39:f4:34:da:8e:9a:
7e:c0:2a:02:c1:91:b0:45:c4:b8:f9:40:be:0e:86:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:A3:C8:EF:40:16:A8:FC:F0:DC:99:10:8D:16:59:B4:0F:BC:A3
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:13:7f:50:83:b3:dc:97:23:88:72:8b:fa:a6:f4:fa:b7:11:
74:6e:ed:c8:f7:01:b1:03:77:6e:30:31:ef:b3:3f:01:91:ef:
be:12:17:64:50:fd:73:ed:1b:09:57:a1:a3:db:d9:39:61:b8:
79:9f:fe:fa:63:46:7a:53:2a:32:2b:db:ce:5a:96:8d:3d:37:
85:29:3a:17:3d:9d:50:1a:b8:e8:e3:6d:ef:7c:3c:a3:07:f1:
d4:9d:aa:f9:b0:b8:43:ce:99:ec:55:e9:c0:6e:fd:b5:46:00:
a9:2f:69:b4:32:c8:4f:19:69:da:b5:90:b3:89:d6:ba:b4:02:
56:f1:e1:1c:c6:53:73:fd:6a:00:4a:af:16:95:41:de:89:0d:
e4:30:65:10:ee:1b:31:e7:8d:7d:95:28:c6:7b:98:63:34:89:
0a:30:7e:b0:74:60:14:c6:5c:27:0a:4b:50:7b:7e:4d:54:0d:
b3:88:fb:4f:34:dc:7f:61:bc:fc:e5:15:4d:67:eb:8e:0a:68:
4a:61:d2:ca:4c:fc:ee:47:e8:0b:70:ef:ea:3a:1a:bc:73:1a:
3e:77:34:b1:68:26:4c:58:22:bc:4e:f6:d5:b2:ec:5f:79:1d:
a7:c3:c1:3a:3c:cc:68:25:24:98:8b:c0:a1:8e:05:a9:08:41:
b1:b2:86:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFwktjgdtTj6IHYFT6cen5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTY0N2RhYzcyOWY0N2IwNjM2OWM0Yzk3NDFjZjk0Mzk1
M2RjNTkwHhcNMjYxMDI1MDEwMDM0WhcNMjYxMDI2MDEwMDM0WjAzMTEwLwYDVQQD
EygwNTgyYTNjOGVmNDAxNmE4ZmNmMGRjOTkxMDhkMTY1OWI0MGZiY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2QywDHNJHm3Qk2DwEFpXelmMGn4
Hp3uVfEsRtJ91EfzpVgvIMH0+1ahM7iShEYy0ro5qGWR/+3+bltXtGkGo5tzyuW1
i+tc+ag5qVF1BUNYakPVoOg0k91Bto7CsUOwYF+AlwCb9g0C4r8IlMh8xAeUVwIs
pQY85G9GbYfyn4IGMqqJrqq310Ky8nRX+91f7i9wGgCjoEmuMtsmchSabG+5Db7U
T5t+13Qxf3UD6S+jBy++9q8AJH3hxmbDA4mY66TrncdUCJco1UtCi4EIUsz1cybH
vmP9aH+a8llcM4ThMcUwVwcv4IM59DTajpp+wCoCwZGwRcS4+UC+DoYUjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWCo8jvQBao/PDcmRCNFlm0D7yjMB8GA1UdIwQY
MBaAFKCmR9rHKfR7BjacTJdBz5Q5U9xZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYTFmODgtNzA3Zi00MWJkLWI5YmQt
ZmI2OTgzY2U5ZGZmLzEvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYTFmODgtNzA3Zi00MWJkLWI5YmQtZmI2OTgzY2U5ZGZm
LzEvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRN/UIOz
3JcjiHKL+qb0+rcRdG7tyPcBsQN3bjAx77M/AZHvvhIXZFD9c+0bCVeho9vZOWG4
eZ/++mNGelMqMivbzlqWjT03hSk6Fz2dUBq46ONt73w8owfx1J2q+bC4Q86Z7FXp
wG79tUYAqS9ptDLITxlp2rWQs4nWurQCVvHhHMZTc/1qAEqvFpVB3okN5DBlEO4b
MeeNfZUoxnuYYzSJCjB+sHRgFMZcJwpLUHt+TVQNs4j7TzTcf2G8/OUVTWfrjgpo
SmHSykz87kfoC3Dv6joavHMaPnc0sWgmTFgivE721bLsX3kdp8PBOjzMaCUkmIvA
oY4FqQhBsbKG0w==
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:23:16 2026 by rpki-client