Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: 0iZrjhGpJrq7apAwBqvDv/Oux6kKCZ0TFufVbgkHzpk=
Subject key identifier: 7E:77:6E:7E:B6:A8:1B:49:61:AC:FB:70:ED:55:2A:D5:C6:2D:5C:CE
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 019DCD877C82198F8EA6E401464E18DF9D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 046B
Signing time: Mon 27 Apr 2026 06:01:41 +0000
Manifest this update: Mon 27 Apr 2026 06:01:41 +0000
Manifest next update: Tue 28 Apr 2026 06:01:41 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: DKbfh8xL1Fx9faJzbQP3k20a+0V2320su8Kz03MLUeY=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:7c:82:19:8f:8e:a6:e4:01:46:4e:18:df:9d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Apr 27 06:01:41 2026 GMT
Not After : Apr 28 06:01:41 2026 GMT
Subject: CN=7e776e7eb6a81b4961acfb70ed552ad5c62d5cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:8a:24:48:f9:85:3c:db:e1:8e:c4:7f:81:
c4:23:a7:fd:db:b6:57:c9:bf:bf:89:c4:3f:5b:e2:
62:46:70:cc:4a:28:b9:38:35:59:aa:c6:88:13:a5:
de:52:66:2a:c7:dd:de:fd:2d:63:0c:63:a3:05:44:
63:3b:9f:87:12:62:30:b6:4b:85:c6:08:79:64:64:
62:61:d5:2b:68:5c:ef:8b:32:58:24:7c:de:ed:18:
21:9b:8d:16:04:fc:cb:7e:e9:41:3b:9a:71:cf:2a:
02:ea:a8:9b:ba:a1:6a:b4:7f:ac:48:a3:63:9a:85:
20:89:d3:2b:82:61:48:08:b6:51:77:2b:6e:aa:9c:
bd:e2:40:ec:23:b6:a7:08:a5:f1:36:22:60:f0:87:
dd:75:f3:0d:17:a2:26:e9:2b:8c:23:ea:45:7b:dc:
34:fb:98:56:08:86:ad:f3:09:e6:9f:a9:22:c1:4e:
76:0b:7e:77:dd:31:08:d0:73:11:5d:59:10:f3:05:
a3:9d:be:c2:a7:a6:e7:fd:fb:19:58:66:4b:fc:bf:
a6:97:93:2d:db:af:70:0b:d3:54:e7:44:a9:97:36:
1a:39:a7:c3:7a:24:8b:99:61:3a:11:12:88:d7:2d:
a8:fb:da:cc:5f:15:fc:f3:85:85:c5:df:37:2d:02:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:77:6E:7E:B6:A8:1B:49:61:AC:FB:70:ED:55:2A:D5:C6:2D:5C:CE
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cc:c7:33:da:9d:93:cc:c1:a9:5b:c8:2d:1a:05:e4:53:19:
74:aa:e0:34:7f:fa:40:0e:f7:52:af:fd:c9:18:71:59:db:09:
36:13:e9:a7:90:d3:41:c0:98:e1:e8:07:2d:cf:8b:0e:35:5c:
a2:2b:58:fb:e4:f0:84:ed:d0:a8:40:72:5e:c7:65:69:b8:5b:
48:8d:cc:56:54:8d:e0:e4:40:e8:5c:38:40:2b:00:91:b0:b8:
49:a3:0d:8a:e0:bf:0d:0f:a3:5f:1c:6f:a8:d1:5d:91:62:96:
a6:54:33:51:f3:7a:7c:4e:11:f3:f3:e3:34:6f:bc:16:50:4e:
66:c7:41:9b:93:71:a7:c7:01:0c:c6:9e:f3:e8:e3:b3:75:43:
00:ab:bb:30:51:5f:b1:cf:e6:8a:99:2f:b5:f4:19:1a:6d:99:
3e:da:29:92:8a:8b:8e:d4:f5:19:a0:42:c0:b4:3a:c1:9c:ad:
10:7d:75:d8:e2:02:62:39:ea:58:12:e5:c8:9f:3e:9e:42:52:
83:34:27:d4:4d:fe:71:09:ca:c8:2a:1b:e7:8b:51:52:47:00:
1c:c9:bb:01:8f:bf:af:84:8c:ae:1a:38:f0:d2:5e:c1:8a:53:
3b:6f:a4:72:ce:87:99:70:29:81:11:b0:8a:b0:bf:53:56:d5:
91:45:7a:da
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ3Nh3yCGY+OpuQBRk4Y351nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw
NDRmNTcwHhcNMjYwNDI3MDYwMTQxWhcNMjYwNDI4MDYwMTQxWjAzMTEwLwYDVQQD
Eyg3ZTc3NmU3ZWI2YTgxYjQ5NjFhY2ZiNzBlZDU1MmFkNWM2MmQ1Y2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobuKJEj5hTzb4Y7Ef4HEI6f927ZX
yb+/icQ/W+JiRnDMSii5ODVZqsaIE6XeUmYqx93e/S1jDGOjBURjO5+HEmIwtkuF
xgh5ZGRiYdUraFzvizJYJHze7Rghm40WBPzLfulBO5pxzyoC6qibuqFqtH+sSKNj
moUgidMrgmFICLZRdytuqpy94kDsI7anCKXxNiJg8IfddfMNF6Im6SuMI+pFe9w0
+5hWCIat8wnmn6kiwU52C3533TEI0HMRXVkQ8wWjnb7Cp6bn/fsZWGZL/L+ml5Mt
269wC9NU50SplzYaOafDeiSLmWE6ERKI1y2o+9rMXxX884WFxd83LQIgnwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFH53bn62qBtJYaz7cO1VKtXGLVzOMB8GA1UdIwQY
MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw
LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw
NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMzH
M9qdk8zBqVvILRoF5FMZdKrgNH/6QA73Uq/9yRhxWdsJNhPpp5DTQcCY4egHLc+L
DjVcoitY++TwhO3QqEByXsdlabhbSI3MVlSN4ORA6Fw4QCsAkbC4SaMNiuC/DQ+j
XxxvqNFdkWKWplQzUfN6fE4R8/PjNG+8FlBOZsdBm5Nxp8cBDMae8+jjs3VDAKu7
MFFfsc/mipkvtfQZGm2ZPtopkoqLjtT1GaBCwLQ6wZytEH112OICYjnqWBLlyJ8+
nkJSgzQn1E3+cQnKyCob54tRUkcAHMm7AY+/r4SMrho48NJewYpTO2+kcs6HmXAp
gRGwirC/U1bVkUV62g==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:48:53 2026 by rpki-client