Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: 16OXMDQvuxyHkvHmZpzlRM3nwUARv+slLhprIt3v4Ew=
Subject key identifier: A1:DD:2F:6B:90:8E:00:A9:2F:14:7A:39:98:9F:6C:13:FC:D2:F8:6B
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 01A14FBE8EFCF92B5D5A6A83EE3B08F9709B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 1AB5
Signing time: Sun 18 Oct 2026 16:00:50 +0000
Manifest this update: Sun 18 Oct 2026 16:00:50 +0000
Manifest next update: Mon 19 Oct 2026 16:00:50 +0000
Files and hashes: 1: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: AiDPM9Wr1qXFHbXYbYeq4KxTw6h2McYcFY+WQJylNK4=)
2: qD-udMWogv1RWmmNx555UrdPqVk.roa (hash: tt02ErUs19MVdE/pg4jrYCoKExmW/kUQzgxB8MltUrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 14:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:be:8e:fc:f9:2b:5d:5a:6a:83:ee:3b:08:f9:70:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Oct 18 16:00:50 2026 GMT
Not After : Oct 19 16:00:50 2026 GMT
Subject: CN=a1dd2f6b908e00a92f147a39989f6c13fcd2f86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:94:c7:70:bd:4a:9e:f0:23:8b:b6:ec:f9:
b5:97:01:6d:92:e3:96:2e:4b:f9:34:ca:8f:8a:ae:
c3:96:88:31:35:be:d2:61:d9:32:bc:fe:52:90:f8:
9c:73:04:70:fd:fe:d4:54:88:17:84:d1:8c:a5:92:
ae:32:cd:d8:7a:6b:d2:1b:ca:96:62:b2:e9:8f:fc:
2a:73:24:86:44:12:84:01:af:a5:1d:fc:59:8f:ab:
85:0f:f4:5e:c1:06:5d:2c:3e:86:61:99:12:33:82:
41:f6:28:75:c9:d0:8e:c0:64:50:08:da:c4:a0:36:
64:81:52:49:14:a6:6b:ce:40:75:24:a1:cd:45:fc:
1f:ee:0f:3c:de:d2:c3:0b:6e:6b:f4:d5:66:73:c3:
d5:da:95:07:24:f7:99:64:a5:0d:86:ab:91:58:3f:
53:85:88:4f:69:fc:9c:e6:e5:b3:fd:f8:4c:d9:aa:
5f:15:0c:f8:72:07:22:9f:c0:ef:4b:67:12:e7:3a:
71:8e:d4:f6:ad:ae:32:30:6a:9d:4f:eb:76:da:e7:
53:6e:3a:8a:cc:44:af:44:98:d6:b9:8f:59:ac:2f:
1c:3e:bc:27:70:4e:27:b2:69:ee:51:b2:2a:6e:bf:
e2:05:ec:61:b0:40:bf:2f:02:1b:8d:74:81:04:7a:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DD:2F:6B:90:8E:00:A9:2F:14:7A:39:98:9F:6C:13:FC:D2:F8:6B
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:28:fb:21:3b:5c:c2:58:81:5f:d9:54:93:91:da:ac:aa:93:
ab:5e:2f:e4:47:1f:76:3e:26:4a:25:0e:0f:47:15:a0:84:94:
3d:6a:52:99:55:65:58:11:62:b0:4a:33:7a:51:80:0c:43:6a:
77:20:24:15:73:d4:78:d4:0f:ac:9c:6d:1c:17:27:8a:e5:79:
a3:55:cd:84:22:dd:82:dd:fc:31:e8:1e:f2:95:d4:79:f1:44:
c6:61:56:47:85:ba:99:c9:79:f3:fa:42:cf:40:76:e7:e6:5e:
a7:9b:26:a8:f9:89:42:e0:fc:1c:f8:50:a3:68:79:11:3e:93:
09:5c:87:a6:11:d8:bf:93:2b:1e:55:e4:ad:08:6e:08:ae:a8:
e2:88:68:ad:65:a2:b1:63:ca:5f:c4:db:b0:f8:0d:0b:12:4e:
07:ec:2f:30:78:8a:8d:13:b5:ba:75:23:4c:dc:9d:ff:00:a8:
6c:6b:10:97:9b:bd:0a:dc:92:3e:65:07:37:bb:43:a0:dd:51:
c0:6c:4c:ba:6a:a1:76:cd:87:2d:18:6e:9c:13:5b:7a:8a:be:
19:34:af:cd:2a:b1:30:28:a3:1d:c0:a0:4a:93:04:1f:1b:7f:
9f:69:7a:01:00:7f:9e:b8:29:50:25:3f:cf:71:5a:ae:9e:f2:
4f:b1:45:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFPvo78+StdWmqD7jsI+XCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzk2M2QxYTExZDAwZDM4NGFkZWRmOWJiODZlNTM4NDlh
OWIxOGMwHhcNMjYxMDE4MTYwMDUwWhcNMjYxMDE5MTYwMDUwWjAzMTEwLwYDVQQD
EyhhMWRkMmY2YjkwOGUwMGE5MmYxNDdhMzk5ODlmNmMxM2ZjZDJmODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEiUx3C9Sp7wI4u27Pm1lwFtkuOW
Lkv5NMqPiq7DlogxNb7SYdkyvP5SkPiccwRw/f7UVIgXhNGMpZKuMs3YemvSG8qW
YrLpj/wqcySGRBKEAa+lHfxZj6uFD/RewQZdLD6GYZkSM4JB9ih1ydCOwGRQCNrE
oDZkgVJJFKZrzkB1JKHNRfwf7g883tLDC25r9NVmc8PV2pUHJPeZZKUNhquRWD9T
hYhPafyc5uWz/fhM2apfFQz4cgcin8DvS2cS5zpxjtT2ra4yMGqdT+t22udTbjqK
zESvRJjWuY9ZrC8cPrwncE4nsmnuUbIqbr/iBexhsEC/LwIbjXSBBHozOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHdL2uQjgCpLxR6OZifbBP80vhrMB8GA1UdIwQY
MBaAFKPJY9GhHQDThK3t+buG5ThJqbGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhsajBhRWRBTk9FcmUzNXU0YmxPRW1wc1l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mYzUyYTAtZTBmNy00ODBiLWJhN2Qt
MTA0MmVhOGUzYmZiLzEvbzhsajBhRWRBTk9FcmUzNXU0YmxPRW1wc1l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mYzUyYTAtZTBmNy00ODBiLWJhN2QtMTA0MmVhOGUzYmZi
LzEvbzhsajBhRWRBTk9FcmUzNXU0YmxPRW1wc1l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaij7ITtc
wliBX9lUk5HarKqTq14v5Ecfdj4mSiUOD0cVoISUPWpSmVVlWBFisEozelGADENq
dyAkFXPUeNQPrJxtHBcniuV5o1XNhCLdgt38Mege8pXUefFExmFWR4W6mcl58/pC
z0B25+Zep5smqPmJQuD8HPhQo2h5ET6TCVyHphHYv5MrHlXkrQhuCK6o4ohorWWi
sWPKX8TbsPgNCxJOB+wvMHiKjRO1unUjTNyd/wCobGsQl5u9CtySPmUHN7tDoN1R
wGxMumqhds2HLRhunBNbeoq+GTSvzSqxMCijHcCgSpMEHxt/n2l6AQB/nrgpUCU/
z3Farp7yT7FFLA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 20:58:47 2026 by rpki-client