Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json)
Hash identifier: B/mwdiMkanffMOS39tIm2yZ1nxb56MGu0LIRoLsg7tY=
Subject key identifier: 81:40:47:D0:C3:42:BC:81:01:74:83:42:A6:8B:D5:B1:3B:F9:D7:A2
Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Certificate serial: 019A7149AF28D60B9120AA062CA0589C20CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
Manifest number: 1308
Signing time: Tue 11 Nov 2025 05:00:45 +0000
Manifest this update: Tue 11 Nov 2025 05:00:45 +0000
Manifest next update: Wed 12 Nov 2025 05:00:45 +0000
Files and hashes: 1: gbYZs5g8-tzRIgFZupm0nJKzwkw.roa (hash: 71Q7AYKf4HSZ+MQCf6bmElagIFGNwEfBKHJD2B+78+4=)
2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: hc9c0AsQLlsBf13XqKqo5DC2dZhFZqd7HGEHOk1I4J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:af:28:d6:0b:91:20:aa:06:2c:a0:58:9c:20:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Validity
Not Before: Nov 11 05:00:45 2025 GMT
Not After : Nov 12 05:00:45 2025 GMT
Subject: CN=814047d0c342bc8101748342a68bd5b13bf9d7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2a:6b:45:96:9a:a8:a6:6c:48:ca:c0:26:c2:
c9:5a:ce:42:87:17:8c:35:29:9b:69:11:ae:29:ac:
a3:36:cb:65:38:9b:93:80:f0:5e:26:94:08:56:71:
ca:6c:b2:a3:12:e8:cc:bc:82:78:4c:92:5d:0e:e6:
d5:d8:80:3e:61:01:f4:4d:96:2e:aa:56:30:66:03:
40:56:39:12:70:5a:3a:99:93:df:1f:b0:87:83:2d:
55:78:22:9a:aa:9d:c0:cc:7b:b3:43:89:4e:72:7e:
44:05:c6:12:0b:93:59:56:77:e2:39:80:24:7c:1c:
d3:49:90:ba:ec:b6:06:d4:19:86:7c:57:25:63:51:
d8:43:6c:b7:5b:11:ee:7e:67:8c:d9:20:53:b5:1b:
78:d8:83:bc:ff:70:1e:4b:06:d4:71:7b:7e:54:a4:
45:06:6d:0b:26:e0:a0:d4:98:c3:e1:1b:e4:80:05:
74:2d:c2:ff:11:80:0d:ef:17:29:2d:c8:f4:ee:6e:
4e:bc:1c:fb:2f:b5:cd:55:84:8e:09:58:93:47:27:
44:ff:05:f3:4e:89:ef:09:03:f3:7d:5a:7a:67:96:
cc:e9:1d:11:d6:2c:60:15:e9:1a:57:4a:a4:68:7b:
ec:9c:a5:47:62:75:41:07:0d:3b:c4:c8:8a:b2:e0:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:40:47:D0:C3:42:BC:81:01:74:83:42:A6:8B:D5:B1:3B:F9:D7:A2
X509v3 Authority Key Identifier:
keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:61:55:54:a8:b7:11:39:7c:8b:11:80:c3:db:80:ef:87:aa:
03:bd:81:c5:c0:91:d4:32:39:26:54:2f:20:9b:8e:bc:80:43:
2e:7f:95:03:03:1d:32:4a:c5:83:21:4e:89:7f:20:b9:31:07:
f2:33:36:1d:18:e9:d1:8e:fa:ef:25:c8:8c:12:2b:79:a8:52:
d5:b2:62:82:9a:d0:ad:d1:cf:ba:8d:7d:91:f5:6d:6c:0e:f7:
9c:30:cf:e6:82:bf:05:f6:9a:cb:37:b8:ed:92:c8:a2:b3:b0:
16:ab:45:a2:e3:2c:4b:b5:8f:d1:53:a3:88:13:d9:6e:ed:61:
04:ca:62:d9:5b:95:2e:a4:e6:ef:b8:c5:62:1b:d9:e6:1b:fb:
05:90:b3:ba:20:fc:78:eb:e0:4b:4f:d0:41:7c:f9:4b:fe:20:
91:a1:ea:14:9b:84:f5:e2:b3:88:96:bc:94:30:2b:2f:be:c0:
16:79:96:22:75:ed:bc:3f:6d:b7:29:31:45:63:68:d2:fe:cf:
ff:0c:37:0e:4e:03:a8:7f:b1:f8:a4:91:78:28:8a:36:69:be:
b7:98:15:fc:36:c0:8e:be:79:50:98:3e:18:60:2b:b8:4f:f1:
60:6c:2f:6b:9c:fa:08:86:26:59:0f:82:b7:db:57:9c:18:90:
9e:88:cd:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSa8o1guRIKoGLKBYnCDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTZmYzcyNjJiYTc4MmRkNWY2NDMwODU5ODJiNWQzNjcw
M2RiZmIwHhcNMjUxMTExMDUwMDQ1WhcNMjUxMTEyMDUwMDQ1WjAzMTEwLwYDVQQD
Eyg4MTQwNDdkMGMzNDJiYzgxMDE3NDgzNDJhNjhiZDViMTNiZjlkN2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SprRZaaqKZsSMrAJsLJWs5ChxeM
NSmbaRGuKayjNstlOJuTgPBeJpQIVnHKbLKjEujMvIJ4TJJdDubV2IA+YQH0TZYu
qlYwZgNAVjkScFo6mZPfH7CHgy1VeCKaqp3AzHuzQ4lOcn5EBcYSC5NZVnfiOYAk
fBzTSZC67LYG1BmGfFclY1HYQ2y3WxHufmeM2SBTtRt42IO8/3AeSwbUcXt+VKRF
Bm0LJuCg1JjD4RvkgAV0LcL/EYAN7xcpLcj07m5OvBz7L7XNVYSOCViTRydE/wXz
TonvCQPzfVp6Z5bM6R0R1ixgFekaV0qkaHvsnKVHYnVBBw07xMiKsuB8dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFAR9DDQryBAXSDQqaL1bE7+deiMB8GA1UdIwQY
MBaAFKGm/HJiungt1fZDCFmCtdNnA9v7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FiOGNtSzZlQzNWOWtNSVdZSzEwMmNEMl9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZjEzYTUtYThkYi00YzM3LWI3YTct
YzUzNzg1ODFiMGUxLzEvb2FiOGNtSzZlQzNWOWtNSVdZSzEwMmNEMl9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZjEzYTUtYThkYi00YzM3LWI3YTctYzUzNzg1ODFiMGUx
LzEvb2FiOGNtSzZlQzNWOWtNSVdZSzEwMmNEMl9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGFVVKi3
ETl8ixGAw9uA74eqA72BxcCR1DI5JlQvIJuOvIBDLn+VAwMdMkrFgyFOiX8guTEH
8jM2HRjp0Y767yXIjBIreahS1bJigprQrdHPuo19kfVtbA73nDDP5oK/Bfaayze4
7ZLIorOwFqtFouMsS7WP0VOjiBPZbu1hBMpi2VuVLqTm77jFYhvZ5hv7BZCzuiD8
eOvgS0/QQXz5S/4gkaHqFJuE9eKziJa8lDArL77AFnmWInXtvD9ttykxRWNo0v7P
/ww3Dk4DqH+x+KSReCiKNmm+t5gV/DbAjr55UJg+GGAruE/xYGwva5z6CIYmWQ+C
t9tXnBiQnojNWQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:10 2025 by rpki-client