Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
File: Oi05yYtAVrNsu_aIXo_dblcPzIE.mft (raw, json)
Hash identifier: QG7OV/SrzbPXccjazVcnBNZU3ptFv+qWA4ACX/3ltqc=
Subject key identifier: D6:F6:8C:FD:E6:BF:CC:71:B6:AA:4A:63:B6:97:88:00:72:8B:78:B2
Authority key identifier: 3A:2D:39:C9:8B:40:56:B3:6C:BB:F6:88:5E:8F:DD:6E:57:0F:CC:81
Certificate issuer: /CN=3a2d39c98b4056b36cbbf6885e8fdd6e570fcc81
Certificate serial: 01A107386104E4236618E4AED37E883842B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oi05yYtAVrNsu_aIXo_dblcPzIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
Manifest number: 7D
Signing time: Sun 04 Oct 2026 14:01:37 +0000
Manifest this update: Sun 04 Oct 2026 14:01:37 +0000
Manifest next update: Mon 05 Oct 2026 14:01:37 +0000
Files and hashes: 1: L8ht9E8DcXzWCPeSSyyZ36n8uB0.asa (hash: aLGxu4UYr6iu82UJ+37AS1m8rImlWGsXHrpCEYFbFSk=)
2: Oi05yYtAVrNsu_aIXo_dblcPzIE.crl (hash: 4ddwqrJFf+MG3lfxqL1F+EAOQLxeccMWgUVzqcTCiNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oi05yYtAVrNsu_aIXo_dblcPzIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:38:61:04:e4:23:66:18:e4:ae:d3:7e:88:38:42:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a2d39c98b4056b36cbbf6885e8fdd6e570fcc81
Validity
Not Before: Oct 4 14:01:37 2026 GMT
Not After : Oct 5 14:01:37 2026 GMT
Subject: CN=d6f68cfde6bfcc71b6aa4a63b6978800728b78b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:39:55:ae:28:ff:d2:a4:48:f8:36:2e:9b:
85:80:9d:a6:39:93:b5:f4:32:c8:c4:f3:6d:a6:a1:
d6:e2:55:9d:c7:3b:9d:71:09:e0:ad:5f:29:b2:ad:
49:6c:15:f2:1c:61:2d:a9:08:0c:26:ee:a8:87:37:
9d:b6:b7:40:b1:f6:2b:ae:87:d4:cf:12:ee:c7:52:
5e:80:75:ee:48:fb:bd:52:49:f7:a8:94:03:54:82:
83:ea:2f:aa:7b:ee:bb:75:02:6b:d3:87:13:a1:b7:
eb:36:7c:6b:e0:30:4a:40:e6:68:90:5b:4e:8a:27:
8f:b9:18:eb:04:f3:d0:d5:79:8e:2a:64:fb:aa:4f:
09:93:a3:fd:50:d2:aa:7d:03:10:43:df:bd:2e:6b:
dd:3f:e7:87:aa:85:1f:83:32:b9:48:10:8c:8a:79:
0a:44:0b:d7:1b:1e:ed:bd:d0:95:12:75:3a:5d:85:
08:5c:a9:f0:45:e1:66:4c:2f:36:e4:64:35:eb:6c:
7c:60:e2:d1:27:66:b0:67:2d:0e:49:9b:4a:b4:35:
c0:06:5c:9b:b7:0f:28:a5:48:ad:f5:c3:41:40:51:
90:40:46:84:05:01:a4:56:44:91:48:4e:f7:0f:3c:
79:64:8e:1a:9d:66:5e:bc:bd:48:01:9a:d1:be:c6:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F6:8C:FD:E6:BF:CC:71:B6:AA:4A:63:B6:97:88:00:72:8B:78:B2
X509v3 Authority Key Identifier:
keyid:3A:2D:39:C9:8B:40:56:B3:6C:BB:F6:88:5E:8F:DD:6E:57:0F:CC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oi05yYtAVrNsu_aIXo_dblcPzIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:60:49:20:57:5d:1b:e5:c1:1a:b6:5b:d4:47:d6:1a:23:82:
6b:38:ca:0f:53:6f:18:9f:80:44:dc:89:0d:79:52:4e:5a:28:
15:a3:50:08:66:b9:6c:1f:79:e0:b6:56:eb:b3:02:11:0d:30:
0c:08:fe:f2:bd:07:6e:af:b5:16:c8:85:f7:81:bb:43:80:6c:
82:ce:3c:57:cd:77:e8:57:2d:8e:eb:de:fc:ca:ff:4e:ec:30:
24:f9:07:b2:d1:08:c9:42:87:30:b2:34:06:34:d9:b4:6c:33:
48:2a:ee:72:77:58:16:5a:c9:35:55:6e:09:de:75:08:e1:91:
77:d4:26:a0:43:4b:73:e7:22:cb:8c:ea:ff:35:e1:22:51:68:
4c:ff:61:eb:33:cf:cf:3b:66:7e:c1:10:9b:4d:cd:8f:7c:70:
79:72:08:e8:96:f4:f1:bb:40:78:00:69:ea:c9:63:03:4c:43:
98:47:20:23:1f:39:1c:5c:0d:70:4f:61:c6:22:ec:eb:21:b0:
30:3a:dd:a9:fe:81:22:d2:b1:20:8b:a5:5b:0e:7d:f6:f9:14:
2f:15:99:1d:24:19:52:db:8f:62:5d:44:d3:5e:eb:70:4a:8f:
cc:15:83:9c:b0:b5:ca:40:4e:99:b6:d5:eb:03:7c:a7:7f:4e:
aa:48:6f:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHOGEE5CNmGOSu036IOEKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMmQzOWM5OGI0MDU2YjM2Y2JiZjY4ODVlOGZkZDZlNTcw
ZmNjODEwHhcNMjYxMDA0MTQwMTM3WhcNMjYxMDA1MTQwMTM3WjAzMTEwLwYDVQQD
EyhkNmY2OGNmZGU2YmZjYzcxYjZhYTRhNjNiNjk3ODgwMDcyOGI3OGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W05Va4o/9KkSPg2LpuFgJ2mOZO1
9DLIxPNtpqHW4lWdxzudcQngrV8psq1JbBXyHGEtqQgMJu6ohzedtrdAsfYrrofU
zxLux1JegHXuSPu9Ukn3qJQDVIKD6i+qe+67dQJr04cTobfrNnxr4DBKQOZokFtO
iiePuRjrBPPQ1XmOKmT7qk8Jk6P9UNKqfQMQQ9+9LmvdP+eHqoUfgzK5SBCMinkK
RAvXGx7tvdCVEnU6XYUIXKnwReFmTC825GQ162x8YOLRJ2awZy0OSZtKtDXABlyb
tw8opUit9cNBQFGQQEaEBQGkVkSRSE73Dzx5ZI4anWZevL1IAZrRvsa+JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNb2jP3mv8xxtqpKY7aXiAByi3iyMB8GA1UdIwQY
MBaAFDotOcmLQFazbLv2iF6P3W5XD8yBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2kwNXlZdEFWck5zdV9hSVhvX2RibGNQeklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8wNDkwZTEtZGFkYi00ODg5LTlmZmYt
MGY4YzBiYTE1Y2ExLzEvT2kwNXlZdEFWck5zdV9hSVhvX2RibGNQeklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8wNDkwZTEtZGFkYi00ODg5LTlmZmYtMGY4YzBiYTE1Y2Ex
LzEvT2kwNXlZdEFWck5zdV9hSVhvX2RibGNQeklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWBJIFdd
G+XBGrZb1EfWGiOCazjKD1NvGJ+ARNyJDXlSTlooFaNQCGa5bB954LZW67MCEQ0w
DAj+8r0Hbq+1FsiF94G7Q4Bsgs48V8136Fctjuve/Mr/TuwwJPkHstEIyUKHMLI0
BjTZtGwzSCrucndYFlrJNVVuCd51COGRd9QmoENLc+ciy4zq/zXhIlFoTP9h6zPP
zztmfsEQm03Nj3xweXII6Jb08btAeABp6sljA0xDmEcgIx85HFwNcE9hxiLs6yGw
MDrdqf6BItKxIIulWw599vkULxWZHSQZUtuPYl1E017rcEqPzBWDnLC1ykBOmbbV
6wN8p39OqkhvPQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:27 2026 by rpki-client