Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json)
Hash identifier: UWyXvEE247SjBraYZPiZNifGI54Zz6sjUR3ug2Z/Zrk=
Subject key identifier: D4:3F:AC:9E:BD:C0:3A:9D:33:79:56:B0:39:73:3C:3D:7E:50:6C:41
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 019F11527EFADA9EAEF846E4EE6321626509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
Manifest number: 148D
Signing time: Mon 29 Jun 2026 03:00:46 +0000
Manifest this update: Mon 29 Jun 2026 03:00:46 +0000
Manifest next update: Tue 30 Jun 2026 03:00:46 +0000
Files and hashes: 1: 6GbxDT6a6WV6sMU4TLzGDdlwYGg.asa (hash: IznoMM07vrX9zSwsytLqGEh6ipn7AIyTyq5l5KBrdbs=)
2: VN57OoPBsGwrpB2MMJuifcY0BKk.roa (hash: DcZvkcVJE9Z9uRMzY1z6mkbvBqMp9YTBuJgd294hlxc=)
3: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: Ttl+VX3s67DuDCSAlgRBZcGoY4g4bNe2T98mQQnuuyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:7e:fa:da:9e:ae:f8:46:e4:ee:63:21:62:65:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Jun 29 03:00:46 2026 GMT
Not After : Jun 30 03:00:46 2026 GMT
Subject: CN=d43fac9ebdc03a9d337956b039733c3d7e506c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:e4:ee:6e:9b:af:6d:a6:d9:a3:57:09:ef:
3b:2a:a1:80:a6:51:e2:80:43:63:65:90:39:11:55:
2b:cd:27:17:21:45:df:07:27:95:48:1f:93:4b:13:
a2:89:2b:3b:cf:29:23:11:64:49:22:dc:d3:2a:fa:
ef:1a:00:6e:4d:62:26:e8:48:c9:ed:1d:ba:da:64:
68:29:49:c5:dc:7a:da:ef:51:8d:52:a8:ca:81:fc:
c3:dc:02:0e:a5:0f:96:8d:24:93:a3:e2:a9:ad:e0:
1e:f1:9b:06:46:61:6b:23:3f:96:7c:4c:e7:cd:f1:
3c:e6:8a:96:6e:4d:14:e1:5b:eb:21:db:99:28:3a:
59:08:71:a2:af:90:f1:6b:b1:21:0e:d0:41:cc:2c:
60:20:88:5a:45:a9:2c:3c:42:04:ff:f1:09:c4:bb:
81:c4:4a:f1:4d:40:8a:25:e8:54:74:ee:ac:4a:63:
e0:92:f5:ab:73:f8:dc:b9:19:45:05:1e:9d:1f:b2:
93:d0:4a:52:1f:a1:06:8e:67:52:5d:e2:8a:ea:28:
3c:07:de:ad:80:33:4f:9d:2b:22:ad:cb:60:2a:8d:
a6:2d:9c:89:86:b1:a9:a5:9b:e5:4b:58:97:40:4e:
e7:49:69:23:d7:dc:31:f0:6b:ef:78:b5:99:cf:4e:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3F:AC:9E:BD:C0:3A:9D:33:79:56:B0:39:73:3C:3D:7E:50:6C:41
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:04:ef:2b:17:04:c1:13:74:de:d8:2c:7b:f6:3a:50:b9:04:
e8:b0:21:0e:98:9b:0c:57:10:a6:0b:ea:83:da:c2:d2:e6:97:
a1:05:1a:4d:8a:12:e7:de:e1:34:ed:60:ee:ef:7e:f1:b8:b2:
e6:70:21:a9:a8:74:9c:5e:62:3c:cc:c4:56:91:70:42:6b:7c:
2a:b2:86:dd:18:1a:15:91:8a:78:9a:50:f2:51:c7:7a:26:71:
3e:45:72:04:db:d0:27:40:17:ca:5c:79:21:1b:8b:c3:db:e8:
5b:d4:ef:e9:0d:6c:84:01:e0:8b:51:ca:86:af:e3:8d:f3:fe:
5c:82:af:cd:61:e2:ef:7b:6f:7d:0e:32:49:a0:38:61:30:37:
09:7b:f4:8e:62:84:db:55:e9:51:da:06:17:58:35:50:cd:57:
f6:9c:df:a1:a6:67:6b:1e:67:07:68:34:15:6a:6a:48:9f:1f:
30:ad:ec:fc:96:86:15:e2:fe:70:dd:75:6d:c8:46:20:55:ca:
c0:a5:01:ef:b5:24:27:c8:fe:35:eb:56:a1:c2:08:8c:4a:c2:
8f:e2:fc:bc:ac:73:3c:7f:cc:4f:fa:f1:1e:05:f6:e1:d3:33:
51:31:c1:c4:4d:5c:e7:ba:6a:5a:f4:c4:11:9b:e6:cf:6c:9b:
e6:72:fc:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RUn762p6u+Ebk7mMhYmUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMGNiNGI4ZDU2OTQ3NzUxMmNlNTc4ODViYTZhMjg5OGZi
YzJkOTUwHhcNMjYwNjI5MDMwMDQ2WhcNMjYwNjMwMDMwMDQ2WjAzMTEwLwYDVQQD
EyhkNDNmYWM5ZWJkYzAzYTlkMzM3OTU2YjAzOTczM2MzZDdlNTA2YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Pk7m6br22m2aNXCe87KqGAplHi
gENjZZA5EVUrzScXIUXfByeVSB+TSxOiiSs7zykjEWRJItzTKvrvGgBuTWIm6EjJ
7R262mRoKUnF3Hra71GNUqjKgfzD3AIOpQ+WjSSTo+KpreAe8ZsGRmFrIz+WfEzn
zfE85oqWbk0U4VvrIduZKDpZCHGir5Dxa7EhDtBBzCxgIIhaRaksPEIE//EJxLuB
xErxTUCKJehUdO6sSmPgkvWrc/jcuRlFBR6dH7KT0EpSH6EGjmdSXeKK6ig8B96t
gDNPnSsirctgKo2mLZyJhrGppZvlS1iXQE7nSWkj19wx8GvveLWZz0774QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ/rJ69wDqdM3lWsDlzPD1+UGxBMB8GA1UdIwQY
MBaAFKAMtLjVaUd1Es5XiFumoomPvC2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUt
MThjNzBlYmY2ODFhLzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUtMThjNzBlYmY2ODFh
LzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegTvKxcE
wRN03tgse/Y6ULkE6LAhDpibDFcQpgvqg9rC0uaXoQUaTYoS597hNO1g7u9+8biy
5nAhqah0nF5iPMzEVpFwQmt8KrKG3RgaFZGKeJpQ8lHHeiZxPkVyBNvQJ0AXylx5
IRuLw9voW9Tv6Q1shAHgi1HKhq/jjfP+XIKvzWHi73tvfQ4ySaA4YTA3CXv0jmKE
21XpUdoGF1g1UM1X9pzfoaZnax5nB2g0FWpqSJ8fMK3s/JaGFeL+cN11bchGIFXK
wKUB77UkJ8j+NetWocIIjErCj+L8vKxzPH/MT/rxHgX24dMzUTHBxE1c57pqWvTE
EZvmz2yb5nL8zw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:13 2026 by rpki-client