Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json)
Hash identifier: I2p+g5gv75qMmu2IJyq+kWf/1HvyOMPkeKGT+kQ69XY=
Subject key identifier: E1:D4:C4:BD:47:4C:5A:B9:23:24:55:17:25:01:D1:D1:44:B0:E7:3E
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial: 01A08AC3464FF7891971ECEFE86AE20BF73A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
Manifest number: 0BBA
Signing time: Thu 10 Sep 2026 10:00:48 +0000
Manifest this update: Thu 10 Sep 2026 10:00:48 +0000
Manifest next update: Fri 11 Sep 2026 10:00:48 +0000
Files and hashes: 1: AtniHnWS_m5XJnsdI3EUIOstzH4.roa (hash: KMRx9/qM9+4wF0F9XLzExOU323HbvcZo4zC4bgJQesg=)
2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: swWTfn+uus0IYzTmrM8+Ykxdp5pq4XwbiQqbPKvqqVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:46:4f:f7:89:19:71:ec:ef:e8:6a:e2:0b:f7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Validity
Not Before: Sep 10 10:00:48 2026 GMT
Not After : Sep 11 10:00:48 2026 GMT
Subject: CN=e1d4c4bd474c5ab9232455172501d1d144b0e73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:97:6c:94:6d:d5:ff:a9:5c:4d:d6:37:6a:
e9:4e:a4:05:f7:f2:f0:ad:5f:6d:0a:29:72:70:f4:
d5:07:e0:55:00:1f:dd:a3:f1:a9:7f:cd:51:34:e1:
a4:89:d6:ae:42:92:d7:02:38:5d:cc:a9:18:82:9c:
b6:32:cb:ad:c1:5c:1f:f6:89:02:c5:c7:f9:1e:c8:
e0:a5:4c:b5:e3:88:20:3d:ac:36:68:7e:78:b7:45:
87:6f:2e:ec:4b:0f:94:ee:39:87:6c:2c:db:73:85:
c2:07:0d:f0:70:4c:26:03:86:8e:df:4b:ba:56:dc:
26:69:2b:ed:8a:0b:e6:82:e2:50:95:62:65:23:66:
74:5b:95:57:7a:62:5d:ee:30:52:7e:aa:ad:33:75:
1f:ae:e2:7d:bb:2d:00:72:c4:3c:a3:10:f6:0f:fe:
cd:e5:24:be:26:0b:37:16:20:fa:62:b9:26:68:56:
b4:6c:22:a9:c4:09:3c:f1:7a:65:f4:ac:72:52:75:
ba:24:f5:31:d2:0c:15:52:2d:77:a7:04:ce:6c:1b:
d7:3c:87:d7:40:9e:20:4c:f8:87:c3:22:85:74:d2:
fd:e3:f1:fc:e5:94:50:70:5d:33:08:36:c7:7a:f1:
83:95:fc:79:74:4b:d4:9c:df:1c:65:22:1f:7a:00:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D4:C4:BD:47:4C:5A:B9:23:24:55:17:25:01:D1:D1:44:B0:E7:3E
X509v3 Authority Key Identifier:
keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2b:e9:4e:89:e6:4a:da:51:ce:f1:20:54:7b:33:d3:1f:56:
e4:a1:39:f2:fc:f1:47:40:03:ab:d2:a5:aa:99:cb:c8:79:95:
a4:eb:95:69:f0:e5:3b:3e:19:ea:6e:2c:df:10:f4:79:a2:75:
32:ad:3c:f0:6f:66:85:a6:f9:51:ff:3e:60:ea:8e:15:62:05:
49:fa:e2:32:07:65:3a:1c:f3:7a:5d:16:9b:60:b8:bf:15:47:
44:99:08:8f:0e:9e:35:d2:73:9d:34:c7:3f:42:11:19:8a:1c:
b0:36:ba:e3:c6:87:9c:66:f6:b5:d4:13:a4:b4:ad:a0:68:aa:
f8:af:ac:30:a3:ab:36:b6:c1:c5:dc:4c:6c:de:aa:b4:ae:e5:
94:b3:b6:d6:e0:bd:38:a4:2a:05:c4:b9:ea:bb:b5:62:48:d5:
89:70:80:f0:32:01:07:b2:91:2c:cd:2b:76:80:22:d9:e1:cd:
92:7a:a9:f8:3f:a4:ab:5e:3e:ff:6b:75:24:3c:e6:ed:fc:c4:
c4:9f:e5:28:72:66:f9:ba:0a:7e:e3:66:d5:12:20:b7:44:29:
f5:66:8b:de:37:bc:97:1a:3b:5d:7d:ab:4d:22:b1:8c:1d:63:
ef:81:a8:3d:f0:41:10:86:ee:81:93:40:1b:c8:fe:d7:65:fb:
0e:cc:b3:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw0ZP94kZcezv6GriC/c6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZTMxMjhmZDA5ZGMxOGU2NmVlNDIxMmE3ZTY0ZjNlNGU3
NGE4MTQwHhcNMjYwOTEwMTAwMDQ4WhcNMjYwOTExMTAwMDQ4WjAzMTEwLwYDVQQD
EyhlMWQ0YzRiZDQ3NGM1YWI5MjMyNDU1MTcyNTAxZDFkMTQ0YjBlNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeCXbJRt1f+pXE3WN2rpTqQF9/Lw
rV9tCilycPTVB+BVAB/do/Gpf81RNOGkidauQpLXAjhdzKkYgpy2MsutwVwf9okC
xcf5HsjgpUy144ggPaw2aH54t0WHby7sSw+U7jmHbCzbc4XCBw3wcEwmA4aO30u6
VtwmaSvtigvmguJQlWJlI2Z0W5VXemJd7jBSfqqtM3UfruJ9uy0AcsQ8oxD2D/7N
5SS+Jgs3FiD6YrkmaFa0bCKpxAk88Xpl9KxyUnW6JPUx0gwVUi13pwTObBvXPIfX
QJ4gTPiHwyKFdNL94/H85ZRQcF0zCDbHevGDlfx5dEvUnN8cZSIfegA4SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHUxL1HTFq5IyRVFyUB0dFEsOc+MB8GA1UdIwQY
MBaAFKDjEo/QncGOZu5CEqfmTz5OdKgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYjRlNzMtYTE1NC00MDU5LWI2MjIt
OGZkNWNhYmE1NGU5LzEvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wYjRlNzMtYTE1NC00MDU5LWI2MjItOGZkNWNhYmE1NGU5
LzEvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCvpTonm
StpRzvEgVHsz0x9W5KE58vzxR0ADq9KlqpnLyHmVpOuVafDlOz4Z6m4s3xD0eaJ1
Mq088G9mhab5Uf8+YOqOFWIFSfriMgdlOhzzel0Wm2C4vxVHRJkIjw6eNdJznTTH
P0IRGYocsDa648aHnGb2tdQTpLStoGiq+K+sMKOrNrbBxdxMbN6qtK7llLO21uC9
OKQqBcS56ru1YkjViXCA8DIBB7KRLM0rdoAi2eHNknqp+D+kq14+/2t1JDzm7fzE
xJ/lKHJm+boKfuNm1RIgt0Qp9WaL3je8lxo7XX2rTSKxjB1j74GoPfBBEIbugZNA
G8j+12X7DsyzQA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:13:17 2026 by rpki-client