Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: ajzNkqkW2Ec9SxZKGTFRSI/CDvJUDiKxe2hdS440c3M=
Subject key identifier: 26:15:EE:96:65:95:0A:29:45:E6:32:68:43:87:32:6C:6F:CA:DC:25
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 01A17BF1E06AE55E308112A66809F2E90BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 0653
Signing time: Tue 27 Oct 2026 06:00:11 +0000
Manifest this update: Tue 27 Oct 2026 06:00:11 +0000
Manifest next update: Wed 28 Oct 2026 06:00:11 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: n4jE316CRehcXvx9sFXFq+CwqvtJ0PlrhqkqJ7OVeyY=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f1:e0:6a:e5:5e:30:81:12:a6:68:09:f2:e9:0b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Oct 27 06:00:11 2026 GMT
Not After : Oct 28 06:00:11 2026 GMT
Subject: CN=2615ee9665950a2945e632684387326c6fcadc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:d6:c5:b9:c6:36:3a:3d:07:2b:cc:80:86:
8d:5e:1c:c9:47:1a:49:a2:20:0f:3a:3a:d1:86:a2:
9e:f8:cb:87:51:28:c4:7e:d8:0e:54:e4:d3:9e:e0:
bc:db:83:1c:9d:ce:ba:2a:86:1f:92:b5:fd:54:eb:
8b:d3:ef:49:d0:3b:bf:5d:9b:73:5d:86:3f:62:29:
eb:d7:9e:85:50:5e:06:3f:9a:62:12:40:b7:19:92:
ab:fc:df:d7:51:d8:d0:33:ca:e1:33:45:59:89:9e:
48:e6:c7:2b:ad:13:9f:4f:cb:ee:11:62:03:b9:37:
75:ac:cb:c0:e4:c2:0c:8d:97:34:ac:b5:41:1a:00:
fa:ee:96:21:04:89:90:81:25:96:fd:7c:b2:4d:c3:
de:27:41:df:0a:25:dd:3f:92:a1:b0:f1:0d:2f:1c:
58:5d:fb:fb:73:38:8d:fa:37:7b:e7:91:10:aa:b8:
4e:d5:ea:b5:0d:e3:c6:39:0f:e0:46:44:1f:73:c6:
8a:49:5c:55:9b:31:db:6c:be:ef:c9:ce:21:44:8d:
87:d3:73:d3:46:c2:e2:98:66:e6:a2:dd:1d:85:a9:
6b:8f:a8:9b:32:98:de:45:5c:be:be:d7:b0:ac:ee:
8a:ff:4b:3b:d7:84:a7:36:83:1a:81:4d:cb:f0:3f:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:15:EE:96:65:95:0A:29:45:E6:32:68:43:87:32:6C:6F:CA:DC:25
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4e:62:f4:f8:a6:03:15:12:5e:a9:87:5b:2f:22:05:f1:c3:
8d:c6:bb:9f:af:b5:40:98:e7:7c:59:f3:7d:ae:4c:0d:55:25:
d7:3e:7d:f8:8f:59:6d:b9:40:6f:64:9d:67:e7:f4:d5:54:6a:
3a:c5:c4:0f:65:f2:52:18:3f:a1:c9:46:4e:5a:f0:31:a4:eb:
26:c4:4c:b1:b5:54:bd:61:03:94:b8:e1:a5:fe:e0:84:46:2b:
f2:84:75:46:57:7d:2b:3b:fd:2d:78:03:12:29:d4:9d:ef:9c:
08:44:60:ac:17:b6:6a:39:e9:41:85:0c:a0:dd:10:81:e2:24:
0c:48:d3:dd:a7:25:13:3e:f1:24:ff:f2:84:62:be:dd:f2:ff:
18:27:2f:28:0f:02:07:a0:16:59:45:1e:02:66:20:81:a1:8f:
36:49:65:b8:34:d0:62:90:c9:5e:37:cc:4e:d5:dc:6a:0e:d1:
79:32:fe:c3:45:93:1e:55:81:3e:ad:35:50:df:ba:b2:aa:e2:
b5:9d:36:3e:fc:1d:f5:79:ad:d4:10:b7:e3:22:33:6e:46:f4:
34:7a:51:e1:ac:9d:ae:66:2e:5b:5a:bd:65:93:3c:ec:dc:87:
c6:84:1d:01:0d:aa:58:8e:bd:83:2f:6b:f0:de:47:66:b3:07:
cf:40:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:34:23 2026 by rpki-client