Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: HQF0e3k299v0BReWnApQfN+FKVEOG/TO2Y9Zqr3XXJ4=
Subject key identifier: 98:39:47:89:8D:29:D2:EC:AC:49:DA:B3:58:03:AA:3A:1A:E4:04:4C
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 01A18DF8B1347B6CF19D9674F23362C19EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 0A15
Signing time: Fri 30 Oct 2026 18:00:48 +0000
Manifest this update: Fri 30 Oct 2026 18:00:48 +0000
Manifest next update: Sat 31 Oct 2026 18:00:48 +0000
Files and hashes: 1: AhYsuHNUbK8a0XunNi5rUoZZd74.roa (hash: +Iz4KrzXh/10Mx5yBgfEhonyL6CqUOw7mbJ6px2LQGs=)
2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=)
3: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: irc5HdVBZ1ColB+MKqAXE6lgAzQexxAkl5oJOdslE0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:f8:b1:34:7b:6c:f1:9d:96:74:f2:33:62:c1:9e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Oct 30 18:00:48 2026 GMT
Not After : Oct 31 18:00:48 2026 GMT
Subject: CN=983947898d29d2ecac49dab35803aa3a1ae4044c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:bd:6b:ca:c0:fe:9f:ce:9c:39:b1:45:ab:
bd:32:7c:86:a6:d5:66:92:44:06:78:38:83:10:95:
a2:7d:0b:44:bf:e8:c1:02:91:59:9f:33:f8:2e:01:
00:a7:7f:94:56:bb:a7:74:f3:76:4f:5f:98:1f:01:
01:c1:21:82:5c:04:22:08:55:75:2d:c5:7a:e5:17:
8c:c0:88:22:9a:71:a8:4a:72:26:5b:a0:bb:fc:3b:
29:8e:90:61:b7:79:9d:8a:9f:e4:82:1a:95:99:9e:
ec:1c:c5:5e:31:d3:eb:18:02:d9:d9:ac:d4:8c:17:
5c:aa:28:57:ae:4e:39:05:61:26:3b:ca:86:7c:61:
50:29:3c:fa:ef:a7:ad:39:7a:14:ef:21:c7:73:d5:
92:27:1f:bb:a0:5f:3b:05:7a:7d:2f:75:aa:64:8e:
12:32:33:0f:2b:92:a7:72:74:33:51:67:bf:22:d9:
11:94:1e:ea:fa:1b:75:4c:be:45:60:3d:61:67:48:
19:b2:6c:84:88:e7:d5:93:bc:86:b6:d1:cd:3f:70:
13:77:db:d2:c7:39:92:be:b8:6c:87:42:85:5a:72:
4f:a8:f2:ec:1e:d1:c3:e7:9a:18:2d:66:b7:83:38:
69:cd:78:54:e4:a1:de:69:a0:2e:d5:47:45:1d:59:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:39:47:89:8D:29:D2:EC:AC:49:DA:B3:58:03:AA:3A:1A:E4:04:4C
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bf:66:75:ce:dd:88:b5:2c:5e:b1:a4:fc:e1:3e:3e:dd:be:
26:17:13:83:de:d9:0f:e2:a4:62:9c:bb:6e:77:ee:e4:27:8c:
5d:76:91:2f:50:b8:73:21:2d:35:01:94:98:9d:67:66:38:bd:
57:44:81:7c:7a:89:01:f1:b9:9d:8c:ac:5a:05:e4:a4:2d:b9:
2a:27:8c:19:6c:b4:00:03:c6:82:3b:3a:2f:48:6b:a1:b9:a9:
76:bb:d6:0e:91:b0:c9:e4:b9:7b:f7:0f:01:8b:3d:93:0e:ac:
9b:88:25:d1:79:ec:e4:80:23:c5:28:b6:5b:a8:2e:d4:28:58:
3b:8b:30:65:ed:e7:46:8f:1e:35:cd:7e:85:b9:cf:fe:0d:ce:
c1:52:09:27:9f:d5:f6:89:21:8d:b3:43:26:b7:ae:4c:c1:42:
93:88:16:a7:a1:16:22:99:63:35:cb:3b:28:20:f7:06:40:c4:
2f:94:c4:3e:db:66:dd:b6:4f:bd:c7:69:ef:0a:8d:25:b7:ab:
5c:46:22:d8:60:71:cf:6a:b5:ac:de:95:0f:bd:0c:f2:71:78:
bc:48:2f:55:39:bf:68:fb:ae:e9:43:32:7c:97:25:b3:7d:f9:
f8:23:7c:d1:ed:ea:17:c3:5e:3a:48:4d:f3:a5:de:c2:9b:e5:
80:7d:5f:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGN+LE0e2zxnZZ08jNiwZ60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTU1YmYyODg4NzUzZTQ0Njc1YjYxZGRhMzAzOTRkOTAx
NTZjMGEwHhcNMjYxMDMwMTgwMDQ4WhcNMjYxMDMxMTgwMDQ4WjAzMTEwLwYDVQQD
Eyg5ODM5NDc4OThkMjlkMmVjYWM0OWRhYjM1ODAzYWEzYTFhZTQwNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosC9a8rA/p/OnDmxRau9MnyGptVm
kkQGeDiDEJWifQtEv+jBApFZnzP4LgEAp3+UVrundPN2T1+YHwEBwSGCXAQiCFV1
LcV65ReMwIgimnGoSnImW6C7/DspjpBht3mdip/kghqVmZ7sHMVeMdPrGALZ2azU
jBdcqihXrk45BWEmO8qGfGFQKTz676etOXoU7yHHc9WSJx+7oF87BXp9L3WqZI4S
MjMPK5KncnQzUWe/ItkRlB7q+ht1TL5FYD1hZ0gZsmyEiOfVk7yGttHNP3ATd9vS
xzmSvrhsh0KFWnJPqPLsHtHD55oYLWa3gzhpzXhU5KHeaaAu1UdFHVnUkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg5R4mNKdLsrEnas1gDqjoa5ARMMB8GA1UdIwQY
MBaAFKGlW/KIh1PkRnW2HdowOU2QFWwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQt
MjdjOWQ5MTE0MjM4LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQtMjdjOWQ5MTE0MjM4
LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ79mdc7d
iLUsXrGk/OE+Pt2+JhcTg97ZD+KkYpy7bnfu5CeMXXaRL1C4cyEtNQGUmJ1nZji9
V0SBfHqJAfG5nYysWgXkpC25KieMGWy0AAPGgjs6L0hrobmpdrvWDpGwyeS5e/cP
AYs9kw6sm4gl0Xns5IAjxSi2W6gu1ChYO4swZe3nRo8eNc1+hbnP/g3OwVIJJ5/V
9okhjbNDJreuTMFCk4gWp6EWIpljNcs7KCD3BkDEL5TEPttm3bZPvcdp7wqNJber
XEYi2GBxz2q1rN6VD70M8nF4vEgvVTm/aPuu6UMyfJcls335+CN80e3qF8NeOkhN
86XewpvlgH1f/g==
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:18:03 2026 by rpki-client