Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: tdK9OK6hY5TbFNMNOtljDuXZEhfb8zl/RiPKiFkHFbo=
Subject key identifier: 41:C9:D2:93:9E:52:FF:9A:27:06:2A:89:21:AE:AF:6E:FF:1E:2A:94
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 01A0024AD6C0E9740B7F1C4F90A058C56D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 132F
Signing time: Fri 14 Aug 2026 22:00:54 +0000
Manifest this update: Fri 14 Aug 2026 22:00:54 +0000
Manifest next update: Sat 15 Aug 2026 22:00:54 +0000
Files and hashes: 1: E_iRTXv34ZqZD3pIYO9UjKGuMZM.roa (hash: i1fiJO0e9H9m1mOdq45mO4/oIY+M6L6ueaw+taXDZdY=)
2: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: 4lWXwZn6il/3LjxumIGbLKp1Dgv4kJdHcE3yonCohlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:d6:c0:e9:74:0b:7f:1c:4f:90:a0:58:c5:6d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Aug 14 22:00:54 2026 GMT
Not After : Aug 15 22:00:54 2026 GMT
Subject: CN=41c9d2939e52ff9a27062a8921aeaf6eff1e2a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:ae:5f:d6:a6:ed:28:56:9b:c2:24:6d:cf:
84:91:31:ee:6e:e4:f3:51:d1:03:c4:c5:bc:5a:b4:
8f:40:3f:83:d9:eb:2f:88:c2:80:d0:ad:1b:96:ef:
18:24:cd:05:09:a4:43:08:13:22:f6:19:6f:a0:b6:
58:95:c1:5a:0f:f0:a9:22:da:99:11:dc:10:d3:4b:
42:68:01:00:9b:e3:cf:fe:a5:61:1a:96:60:66:0c:
b8:79:02:bf:2f:41:23:85:6f:52:45:25:fc:56:da:
cd:05:e8:cb:06:1e:18:1d:aa:d0:3b:c0:67:45:58:
29:0c:3e:2e:94:ed:c2:71:e6:6f:a7:90:17:2d:65:
cc:eb:8f:db:23:fd:db:20:e0:07:81:58:0f:2a:15:
89:be:92:29:b5:be:a8:1d:78:58:15:69:ad:41:51:
3b:9c:ec:f3:6c:5c:02:81:2b:48:44:08:65:70:d8:
c4:98:33:05:d1:65:58:ca:78:9d:da:b2:2c:f5:3b:
d4:7e:72:b3:d1:2c:34:64:96:39:ab:7f:c5:c7:88:
a6:72:45:90:de:99:6a:90:95:4c:69:0c:a2:82:da:
3e:b4:7f:91:24:28:a4:f0:17:36:a5:82:8a:a8:db:
df:8e:02:ee:af:90:d5:ec:2e:e5:33:7d:45:8f:76:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C9:D2:93:9E:52:FF:9A:27:06:2A:89:21:AE:AF:6E:FF:1E:2A:94
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d8:c0:8f:f4:29:16:6b:9d:01:ad:bc:73:49:3c:f4:75:bb:
f7:89:c2:c9:de:70:f8:87:c7:a6:44:b9:77:39:34:7a:3d:a5:
54:2e:b8:92:1b:c3:82:75:c4:04:ad:49:5e:61:c3:eb:81:6a:
5c:3a:11:96:88:5d:49:c1:0f:fd:4b:77:24:15:af:c6:b1:ce:
28:eb:13:fb:65:b8:b1:a3:94:b8:e0:2d:e8:80:06:d7:c4:68:
ec:6a:13:ac:af:94:02:aa:de:b0:aa:7d:5e:56:32:27:19:59:
6b:67:61:d0:d5:4e:c4:35:5f:08:eb:eb:ac:78:db:a8:aa:4e:
dc:18:05:fe:ee:f6:5c:1b:13:52:5e:d6:3c:3d:7d:7c:43:3b:
fd:29:0d:ab:6f:42:f6:81:81:8c:7e:d6:2d:db:4f:10:c7:74:
3b:c3:6e:89:37:9f:b9:7d:c2:f7:2f:3d:53:c0:3a:41:b8:23:
31:f5:5e:53:85:ca:fe:7c:67:61:4f:f5:1b:7b:99:0d:e2:d5:
c9:8c:a1:f8:58:9b:25:6e:55:02:dd:ce:e2:dc:43:7d:2d:f4:
42:f1:3b:27:bf:97:44:92:81:9e:0e:cd:33:fe:95:7c:61:39:
48:93:55:5e:99:5f:fd:26:5d:6b:71:8e:c7:cc:74:09:cc:7d:
a9:86:6c:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACStbA6XQLfxxPkKBYxW2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMDk5NWE4N2JmNjRkYzQ5NDliODE5ZGZlMDJmOGE1ODZh
YWE0ZGUwHhcNMjYwODE0MjIwMDU0WhcNMjYwODE1MjIwMDU0WjAzMTEwLwYDVQQD
Eyg0MWM5ZDI5MzllNTJmZjlhMjcwNjJhODkyMWFlYWY2ZWZmMWUyYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+SuX9am7ShWm8Ikbc+EkTHubuTz
UdEDxMW8WrSPQD+D2esviMKA0K0blu8YJM0FCaRDCBMi9hlvoLZYlcFaD/CpItqZ
EdwQ00tCaAEAm+PP/qVhGpZgZgy4eQK/L0EjhW9SRSX8VtrNBejLBh4YHarQO8Bn
RVgpDD4ulO3CceZvp5AXLWXM64/bI/3bIOAHgVgPKhWJvpIptb6oHXhYFWmtQVE7
nOzzbFwCgStIRAhlcNjEmDMF0WVYynid2rIs9TvUfnKz0Sw0ZJY5q3/Fx4imckWQ
3plqkJVMaQyigto+tH+RJCik8Bc2pYKKqNvfjgLur5DV7C7lM31Fj3ZdvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHJ0pOeUv+aJwYqiSGur27/HiqUMB8GA1UdIwQY
MBaAFKAJlah79k3ElJuBnf4C+KWGqqTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGIt
ODkzOGU5NTU2MzQyLzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGItODkzOGU5NTU2MzQy
LzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9jAj/Qp
FmudAa28c0k89HW794nCyd5w+IfHpkS5dzk0ej2lVC64khvDgnXEBK1JXmHD64Fq
XDoRlohdScEP/Ut3JBWvxrHOKOsT+2W4saOUuOAt6IAG18Ro7GoTrK+UAqresKp9
XlYyJxlZa2dh0NVOxDVfCOvrrHjbqKpO3BgF/u72XBsTUl7WPD19fEM7/SkNq29C
9oGBjH7WLdtPEMd0O8NuiTefuX3C9y89U8A6QbgjMfVeU4XK/nxnYU/1G3uZDeLV
yYyh+FibJW5VAt3O4txDfS30QvE7J7+XRJKBng7NM/6VfGE5SJNVXplf/SZda3GO
x8x0Ccx9qYZsug==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:44:19 2026 by rpki-client