Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
File: oikngd9NLEc3PD_fY_u8mSdL2ds.mft (raw, json)
Hash identifier: ZxM3YsdOjPd1JP4qCz+Zus1tWM253JadzrQcl+0W2MQ=
Subject key identifier: C3:D6:EC:AD:4C:50:35:DE:9B:F8:D5:D2:AF:55:53:BE:04:01:63:97
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 01A06DCC0B690CED29A830C63C44FCACEFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
Manifest number: 01FD
Signing time: Fri 04 Sep 2026 19:01:23 +0000
Manifest this update: Fri 04 Sep 2026 19:01:23 +0000
Manifest next update: Sat 05 Sep 2026 19:01:23 +0000
Files and hashes: 1: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (hash: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=)
2: gD1shI7_ncKmAHHzuQDRToVphgs.roa (hash: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=)
3: oikngd9NLEc3PD_fY_u8mSdL2ds.crl (hash: rcSPiKUj7RVPyGRtTbQbsgAC9ANB6ZYNKeppVJZ/+Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cc:0b:69:0c:ed:29:a8:30:c6:3c:44:fc:ac:ef:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Sep 4 19:01:23 2026 GMT
Not After : Sep 5 19:01:23 2026 GMT
Subject: CN=c3d6ecad4c5035de9bf8d5d2af5553be04016397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:68:8e:0d:97:a5:4e:5d:53:ab:05:fb:b4:
77:81:e4:15:19:a6:40:c6:f6:83:b4:be:50:be:8b:
4c:fe:89:4f:30:be:49:40:23:0e:ab:c9:6e:b5:c8:
b7:d6:21:c7:d7:f5:a5:5f:e6:62:68:55:62:0a:cf:
07:f7:35:c1:94:40:15:9c:4c:33:e0:46:c9:95:36:
d4:cf:29:68:af:b2:57:70:39:80:a3:54:5b:9e:01:
49:c1:ef:1e:f6:66:13:6e:ec:15:a8:a3:97:72:29:
c3:0c:8c:f0:ae:ef:8e:ec:81:56:fb:2e:3f:82:0f:
76:9b:5e:94:f8:bb:ad:2f:c7:2b:f2:06:ab:ef:50:
93:d4:4d:ed:3c:db:5e:31:1a:fa:0d:12:62:b1:b7:
b9:db:76:2a:5a:a9:b3:7d:31:5d:5b:4c:bb:42:4e:
2e:8f:76:2e:e8:12:65:cc:65:37:7f:ac:e7:f9:0a:
13:be:ce:b8:cc:d2:15:64:de:46:c7:e9:b4:f3:c8:
51:e2:39:19:23:0d:2e:89:d9:1f:4b:b2:d4:75:eb:
a1:33:35:de:eb:9f:98:7d:1d:45:b4:6a:63:40:70:
b0:e9:6c:d2:27:3a:4d:6a:60:e9:c0:df:cb:5a:7d:
ae:b7:fa:bd:45:75:f2:03:9a:cc:16:a9:f7:94:85:
5a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:EC:AD:4C:50:35:DE:9B:F8:D5:D2:AF:55:53:BE:04:01:63:97
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:23:95:0d:26:b9:dd:36:4d:2e:56:90:df:b9:61:13:83:25:
81:5f:b9:54:2b:57:51:52:0b:e9:a0:ab:fb:24:c5:0e:d9:f8:
5c:5d:39:52:aa:99:be:b2:98:97:9c:c4:94:1a:db:55:c5:be:
d1:6c:18:2c:55:40:73:f9:c4:af:1b:aa:7e:bb:d8:de:45:28:
37:54:fa:a2:e8:fa:e7:50:75:e6:86:41:4d:a5:b1:22:0a:0b:
3c:90:f9:ea:88:53:f3:9b:dc:cf:6c:b5:41:27:dd:6a:c4:e2:
f9:44:9a:18:ac:e9:63:99:c1:98:71:0c:62:7a:69:1d:a7:7b:
0f:32:39:25:2a:ef:77:ec:b1:1b:ba:24:5e:55:98:52:b0:56:
b4:4e:e2:08:6a:2a:33:e3:14:46:39:8f:ff:88:4b:8a:67:6c:
ee:50:21:0b:3c:f2:fb:0c:fa:ca:60:de:39:43:2b:35:6a:68:
59:e6:75:e6:1e:d5:fb:a2:cb:48:e0:06:2d:49:36:f7:e7:7a:
c8:e2:e9:0b:86:b7:41:3a:df:86:20:4d:7f:67:d2:8f:c7:1f:
1d:7f:2e:f2:43:da:59:c1:98:0c:97:74:8f:ca:af:a4:3c:54:
cc:6d:37:80:58:cc:93:7d:ef:d2:db:a7:12:2d:9a:29:62:47:
d6:c7:98:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtzAtpDO0pqDDGPET8rO+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMjkyNzgxZGY0ZDJjNDczNzNjM2ZkZjYzZmJiYzk5Mjc0
YmQ5ZGIwHhcNMjYwOTA0MTkwMTIzWhcNMjYwOTA1MTkwMTIzWjAzMTEwLwYDVQQD
EyhjM2Q2ZWNhZDRjNTAzNWRlOWJmOGQ1ZDJhZjU1NTNiZTA0MDE2Mzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Jojg2XpU5dU6sF+7R3geQVGaZA
xvaDtL5QvotM/olPML5JQCMOq8lutci31iHH1/WlX+ZiaFViCs8H9zXBlEAVnEwz
4EbJlTbUzylor7JXcDmAo1RbngFJwe8e9mYTbuwVqKOXcinDDIzwru+O7IFW+y4/
gg92m16U+LutL8cr8gar71CT1E3tPNteMRr6DRJisbe523YqWqmzfTFdW0y7Qk4u
j3Yu6BJlzGU3f6zn+QoTvs64zNIVZN5Gx+m088hR4jkZIw0uidkfS7LUdeuhMzXe
65+YfR1FtGpjQHCw6WzSJzpNamDpwN/LWn2ut/q9RXXyA5rMFqn3lIVaUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPW7K1MUDXem/jV0q9VU74EAWOXMB8GA1UdIwQY
MBaAFKIpJ4HfTSxHNzw/32P7vJknS9nbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NjY1N2YtMGQxNS00MjExLWEzMjgt
NjllYTgxNDU5NThiLzEvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS83NjY1N2YtMGQxNS00MjExLWEzMjgtNjllYTgxNDU5NThi
LzEvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCOVDSa5
3TZNLlaQ37lhE4MlgV+5VCtXUVIL6aCr+yTFDtn4XF05UqqZvrKYl5zElBrbVcW+
0WwYLFVAc/nErxuqfrvY3kUoN1T6ouj651B15oZBTaWxIgoLPJD56ohT85vcz2y1
QSfdasTi+USaGKzpY5nBmHEMYnppHad7DzI5JSrvd+yxG7okXlWYUrBWtE7iCGoq
M+MURjmP/4hLimds7lAhCzzy+wz6ymDeOUMrNWpoWeZ15h7V+6LLSOAGLUk29+d6
yOLpC4a3QTrfhiBNf2fSj8cfHX8u8kPaWcGYDJd0j8qvpDxUzG03gFjMk33v0tun
Ei2aKWJH1seY+A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:25:37 2026 by rpki-client