Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: 1qU6hSFTyX3TOKh5qnxkr9PgW7rqGEv5kVSNVzMqNeI=
Subject key identifier: FF:6C:FF:3F:1C:ED:07:1F:D4:92:B4:86:D3:72:E7:A7:A3:53:01:55
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 01A08A8C89D3704156B56E2199BD6C3AFFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 09E6
Signing time: Thu 10 Sep 2026 09:01:01 +0000
Manifest this update: Thu 10 Sep 2026 09:01:01 +0000
Manifest next update: Fri 11 Sep 2026 09:01:01 +0000
Files and hashes: 1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: vajx9HOyZ1SLM6krlftcZ6xMmLFce+sRQF5tKDxUTEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:89:d3:70:41:56:b5:6e:21:99:bd:6c:3a:ff:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Sep 10 09:01:01 2026 GMT
Not After : Sep 11 09:01:01 2026 GMT
Subject: CN=ff6cff3f1ced071fd492b486d372e7a7a3530155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:36:6b:3c:de:34:46:3f:c5:81:7b:93:41:
90:af:68:08:85:5a:d0:1e:7e:67:88:c7:f5:c6:0c:
0c:0f:96:ee:4f:1a:4f:08:c5:68:0c:c3:c3:57:ef:
f1:84:53:8c:0f:c0:93:e0:52:32:26:26:7a:b8:ed:
f1:40:cc:b9:e5:7b:5f:9b:ed:6f:f4:a3:e6:4c:ff:
cf:ba:70:27:c4:12:04:16:58:e5:c5:53:3c:a6:78:
69:4e:5e:bc:37:c1:e4:97:a3:39:ef:a7:35:f9:e1:
6a:6a:e7:6b:de:ed:c0:e8:a3:d1:11:d2:fb:6f:4e:
5a:b0:87:9f:e0:38:72:19:86:34:2f:58:7f:5d:6d:
2c:13:b6:cb:ae:37:2d:f6:a1:bc:60:6e:b4:6b:2b:
a3:d2:2b:92:a7:91:1b:6d:8b:b5:31:28:28:31:33:
d9:6e:2b:58:eb:f9:5f:40:2a:e9:f6:03:12:4c:38:
36:72:e6:c1:db:6d:a2:68:cd:1b:b4:aa:6d:a3:18:
fb:a8:e2:2d:1b:eb:f7:b5:95:48:e2:4c:25:14:c7:
93:37:b9:e2:8f:fc:59:9e:4f:74:32:c3:4e:a1:0a:
48:ec:b1:29:1c:2a:fb:a9:c6:04:1f:bd:10:7f:30:
f5:45:b7:17:0d:c9:29:88:64:5b:c4:61:c3:09:02:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6C:FF:3F:1C:ED:07:1F:D4:92:B4:86:D3:72:E7:A7:A3:53:01:55
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c5:d8:2c:fd:86:08:0e:6f:11:69:08:67:4d:76:5e:47:8a:
86:2d:7e:30:93:fd:41:f3:68:45:5d:0f:c5:3f:3a:12:25:86:
92:c4:ee:d8:3c:3a:5c:bf:1d:7a:d1:00:03:68:cf:d9:ac:e9:
8f:d3:0b:25:56:c4:1d:06:2c:ad:09:3b:4a:41:3c:56:66:86:
f9:f1:7c:f6:44:b8:d8:5d:f1:01:eb:7d:64:3c:ed:d1:12:75:
e5:64:5e:d6:40:3f:d4:a6:48:37:c3:8e:e3:b4:21:a5:f1:c0:
23:de:ed:b5:e3:1c:45:53:a4:16:06:cd:bc:52:38:c9:bb:3a:
37:4f:25:53:4a:16:2a:19:89:30:83:53:2f:bf:be:26:58:43:
bb:72:80:d3:cd:a2:f8:b5:e0:66:f7:71:4e:e6:fe:42:43:37:
f8:9c:ad:39:3b:16:37:ed:b3:59:f8:12:59:c1:e3:40:95:40:
7f:6a:66:3b:09:63:7e:4f:f7:34:72:2a:77:4a:8c:2a:e6:af:
ce:b1:fe:a6:f5:81:dc:6b:c5:f5:b6:0b:1f:f6:94:85:58:32:
6f:f5:5e:fc:07:13:27:67:c2:2c:36:fc:80:ae:a3:62:3a:4e:
f2:47:e3:48:9a:38:92:8a:64:39:bf:69:6c:65:eb:14:67:4f:
6b:1f:59:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjInTcEFWtW4hmb1sOv/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3
NDkxOWUwHhcNMjYwOTEwMDkwMTAxWhcNMjYwOTExMDkwMTAxWjAzMTEwLwYDVQQD
EyhmZjZjZmYzZjFjZWQwNzFmZDQ5MmI0ODZkMzcyZTdhN2EzNTMwMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZg2azzeNEY/xYF7k0GQr2gIhVrQ
Hn5niMf1xgwMD5buTxpPCMVoDMPDV+/xhFOMD8CT4FIyJiZ6uO3xQMy55Xtfm+1v
9KPmTP/PunAnxBIEFljlxVM8pnhpTl68N8Hkl6M576c1+eFqaudr3u3A6KPREdL7
b05asIef4DhyGYY0L1h/XW0sE7bLrjct9qG8YG60ayuj0iuSp5EbbYu1MSgoMTPZ
bitY6/lfQCrp9gMSTDg2cubB222iaM0btKptoxj7qOItG+v3tZVI4kwlFMeTN7ni
j/xZnk90MsNOoQpI7LEpHCr7qcYEH70QfzD1RbcXDckpiGRbxGHDCQIwiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9s/z8c7Qcf1JK0htNy56ejUwFVMB8GA1UdIwQY
MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt
MTI1MTg0MjlmYTYzLzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz
LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8XYLP2G
CA5vEWkIZ012XkeKhi1+MJP9QfNoRV0PxT86EiWGksTu2Dw6XL8detEAA2jP2azp
j9MLJVbEHQYsrQk7SkE8VmaG+fF89kS42F3xAet9ZDzt0RJ15WRe1kA/1KZIN8OO
47QhpfHAI97tteMcRVOkFgbNvFI4ybs6N08lU0oWKhmJMINTL7++JlhDu3KA082i
+LXgZvdxTub+QkM3+JytOTsWN+2zWfgSWcHjQJVAf2pmOwljfk/3NHIqd0qMKuav
zrH+pvWB3GvF9bYLH/aUhVgyb/Ve/AcTJ2fCLDb8gK6jYjpO8kfjSJo4kopkOb9p
bGXrFGdPax9Z5g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:29:32 2026 by rpki-client