Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: sAx3hE4qhbpOsRf3KavLh9246exea0FyGiojudCBTak=
Subject key identifier: C1:30:EE:CA:BE:23:C7:E4:09:B5:EE:A2:5D:2A:C8:E7:1D:90:CC:1B
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 01A1893FA2349B6036C9B5DB7404D2A25B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 1365
Signing time: Thu 29 Oct 2026 20:00:11 +0000
Manifest this update: Thu 29 Oct 2026 20:00:11 +0000
Manifest next update: Fri 30 Oct 2026 20:00:11 +0000
Files and hashes: 1: Lw6dpIVKTrHkqnvz6_8ZfhY3LHE.roa (hash: zWKT6y6B8vxLNvJ+sCTyWUsXCNlPOrbo7d9YXIBVvAM=)
2: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: ILkGwAFYTagZlx6KvyJkZ+U8j5jrbChHIRx3sC0edUE=)
3: yGo3bd_PBkdSOHP97aSwO25CbMs.roa (hash: 4G7Mo+idHxtoGcT5AVhMItxtHJ9uui0A13uK+5ubrzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:3f:a2:34:9b:60:36:c9:b5:db:74:04:d2:a2:5b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Oct 29 20:00:11 2026 GMT
Not After : Oct 30 20:00:11 2026 GMT
Subject: CN=c130eecabe23c7e409b5eea25d2ac8e71d90cc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:5a:9e:b8:1a:a8:97:48:da:65:2d:03:eb:
24:17:76:ea:5d:d7:6c:57:58:97:3a:41:b6:17:ec:
01:ac:7f:b6:85:c6:63:10:c4:c7:bc:9c:43:6c:f9:
9d:e1:3c:86:3d:e4:7c:22:97:f1:14:bf:91:88:65:
32:1c:b6:17:d6:ad:10:a9:44:fb:06:c4:61:d1:1e:
9b:b3:05:4d:d4:9e:cb:7b:d3:13:15:42:63:8c:fc:
c9:eb:ab:df:0d:11:f5:6c:53:65:1d:e5:af:b5:7f:
46:15:71:12:85:a3:b6:be:05:16:4b:d2:d2:5f:00:
0c:0e:38:31:87:a6:d4:22:6d:c3:43:75:d8:35:25:
b7:17:5f:25:23:49:11:f2:01:93:ea:68:7b:3a:fb:
d6:5b:1d:14:e9:ed:92:38:aa:d7:a2:bc:4e:50:98:
a4:03:09:5f:3e:f4:5c:2d:a7:e2:a0:5c:51:d6:95:
d5:f1:74:9a:0d:e1:0a:f6:84:83:fc:4b:e6:18:c0:
d2:f7:c3:3b:70:83:5c:1c:bd:d8:75:54:60:94:3f:
8b:5f:16:dd:1a:40:50:f1:16:14:d1:4c:99:d1:3e:
ee:f2:1e:ad:23:e0:80:33:a0:80:92:46:36:f1:59:
22:da:79:88:7a:a5:35:84:17:af:a3:ff:d4:f8:c6:
0a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:30:EE:CA:BE:23:C7:E4:09:B5:EE:A2:5D:2A:C8:E7:1D:90:CC:1B
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d7:3b:9e:67:2e:ad:2c:77:a9:71:30:f0:b3:ef:c5:05:39:
d2:e3:2c:b8:f9:1e:c6:57:8f:56:f9:b8:48:fb:c4:9b:12:bd:
eb:a9:80:84:0c:1c:0e:fd:32:14:f3:bc:f4:5f:d9:4d:9e:65:
48:5b:71:5f:74:47:02:5d:0a:a9:d0:87:ef:cd:2f:b0:c4:8f:
2d:15:8e:3e:dc:33:ff:34:a0:87:47:b1:18:2f:b5:44:21:fc:
62:03:2b:ce:2b:00:bf:8c:4f:f8:f5:f7:c8:fd:24:fc:a1:cc:
22:c3:7b:64:c8:4e:d8:cf:d0:6b:99:87:73:72:a7:9d:fa:5f:
65:ae:07:76:be:7f:f8:39:72:20:bf:6c:40:60:bc:05:8b:5d:
ba:24:d8:fd:1d:72:2c:89:27:91:46:f7:96:20:07:86:26:35:
b2:48:2c:16:dd:ad:27:53:11:c7:86:fa:34:29:e9:4a:d4:c4:
60:46:7c:0c:2c:cc:8f:a5:bc:7f:11:84:ae:37:2e:c3:17:bc:
3d:02:f6:fa:e5:5a:1f:ab:70:e0:6d:7b:14:4d:25:9c:15:3c:
a1:d2:36:01:35:a1:b6:8b:6d:8e:d9:81:b3:b9:78:88:5c:8d:
3d:f0:3b:29:a4:7f:bc:1f:60:51:b0:4c:49:83:95:b5:72:36:
f7:2a:07:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGJP6I0m2A2ybXbdATSolsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjQ2ZDNmOTA3NThkOGEzNzQzZjE1NWY2MmJmZmZmMWJi
NjM2NmEwHhcNMjYxMDI5MjAwMDExWhcNMjYxMDMwMjAwMDExWjAzMTEwLwYDVQQD
EyhjMTMwZWVjYWJlMjNjN2U0MDliNWVlYTI1ZDJhYzhlNzFkOTBjYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBJanrgaqJdI2mUtA+skF3bqXdds
V1iXOkG2F+wBrH+2hcZjEMTHvJxDbPmd4TyGPeR8IpfxFL+RiGUyHLYX1q0QqUT7
BsRh0R6bswVN1J7Le9MTFUJjjPzJ66vfDRH1bFNlHeWvtX9GFXEShaO2vgUWS9LS
XwAMDjgxh6bUIm3DQ3XYNSW3F18lI0kR8gGT6mh7OvvWWx0U6e2SOKrXorxOUJik
AwlfPvRcLafioFxR1pXV8XSaDeEK9oSD/EvmGMDS98M7cINcHL3YdVRglD+LXxbd
GkBQ8RYU0UyZ0T7u8h6tI+CAM6CAkkY28Vki2nmIeqU1hBevo//U+MYKEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEw7sq+I8fkCbXuol0qyOcdkMwbMB8GA1UdIwQY
MBaAFKFkbT+QdY2KN0PxVfYr//8btjZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yYjcwZjAtNGRhMy00YjQ1LWE5NWQt
NDhhMjBlNmU1ZDhiLzEvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yYjcwZjAtNGRhMy00YjQ1LWE5NWQtNDhhMjBlNmU1ZDhi
LzEvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtc7nmcu
rSx3qXEw8LPvxQU50uMsuPkexlePVvm4SPvEmxK966mAhAwcDv0yFPO89F/ZTZ5l
SFtxX3RHAl0KqdCH780vsMSPLRWOPtwz/zSgh0exGC+1RCH8YgMrzisAv4xP+PX3
yP0k/KHMIsN7ZMhO2M/Qa5mHc3KnnfpfZa4Hdr5/+DlyIL9sQGC8BYtduiTY/R1y
LIknkUb3liAHhiY1skgsFt2tJ1MRx4b6NCnpStTEYEZ8DCzMj6W8fxGErjcuwxe8
PQL2+uVaH6tw4G17FE0lnBU8odI2ATWhtottjtmBs7l4iFyNPfA7KaR/vB9gUbBM
SYOVtXI29yoHAg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:07:44 2026 by rpki-client