Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File: oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier: YU9whAXGFkGsOYbsRH25ehHavsRj8iIdO5rOQ9e8OmA=
Subject key identifier: A3:14:07:E8:AC:52:71:DD:8E:61:87:D5:F8:6B:1B:BA:56:7B:92:C8
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 019FA2609578FC78E0B671957DD88ACAC7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number: 169B
Signing time: Mon 27 Jul 2026 07:01:06 +0000
Manifest this update: Mon 27 Jul 2026 07:01:06 +0000
Manifest next update: Tue 28 Jul 2026 07:01:06 +0000
Files and hashes: 1: 0BJKSsJW7qiVAHXCjZXJq3R-Kpk.roa (hash: r7csimlTjHrK6Lrz57cYuylUp8cy5+rV8BLjohqs/qU=)
2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: qPuX84y2Mld2DIwVZyZcVZVlyzd8hTw4gmeNOeHNWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:95:78:fc:78:e0:b6:71:95:7d:d8:8a:ca:c7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Jul 27 07:01:06 2026 GMT
Not After : Jul 28 07:01:06 2026 GMT
Subject: CN=a31407e8ac5271dd8e6187d5f86b1bba567b92c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:ad:4f:a7:0b:d1:10:95:50:f7:8a:91:05:
16:0a:93:36:8d:73:cb:f3:52:b8:83:4e:5d:91:dc:
dc:c9:7f:ec:d3:3c:e8:6d:2d:32:52:d2:f3:f9:7d:
e5:d1:07:87:7c:d7:45:f7:5a:03:11:5e:2f:c6:54:
c4:bf:3b:80:f1:ba:2e:20:aa:57:68:01:21:a7:ec:
8d:59:c3:14:15:0e:34:d1:f8:c5:87:28:50:63:2a:
ac:ba:3d:0e:f0:50:a6:0d:d0:ec:7e:65:ef:eb:d0:
40:7e:d4:c1:a1:89:8b:24:53:56:9e:1a:ca:f6:25:
a8:23:33:27:84:8f:49:ad:07:11:07:bd:98:37:68:
12:8f:03:de:20:70:5a:cf:31:11:a3:94:fc:e2:fb:
0f:ee:11:34:3e:96:42:66:60:06:6f:f6:e0:93:4a:
bd:be:7b:79:12:00:96:6f:6d:52:af:f9:d2:b7:d7:
03:e1:bb:37:2b:8a:6f:d8:94:84:5f:84:07:7d:22:
71:49:02:5b:aa:26:b6:55:c1:03:45:54:23:d9:ee:
ef:26:a7:1e:51:88:7b:11:6c:d1:12:a7:43:15:e6:
6d:32:78:06:b9:53:3b:91:c0:95:ca:0d:41:32:18:
77:d0:62:e5:4b:1d:23:a7:e9:5b:69:16:e8:b7:37:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:14:07:E8:AC:52:71:DD:8E:61:87:D5:F8:6B:1B:BA:56:7B:92:C8
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ac:92:83:b2:f7:0e:08:ca:92:af:19:94:67:af:59:7e:93:
ed:79:4f:c9:13:7a:12:30:04:3c:4a:35:ab:03:b9:47:c1:9f:
35:40:8c:cc:2f:bc:3b:b1:96:f5:cd:f0:40:60:43:06:fd:21:
50:d3:9b:07:04:69:b8:b7:0f:34:25:e1:1a:1d:aa:97:c5:dc:
f7:11:ef:4b:76:b8:2b:49:79:d8:08:79:73:8b:a8:6c:2e:f5:
66:1e:cc:52:f1:67:14:6b:3f:69:23:cb:f6:c8:d1:f5:6b:f8:
03:f5:4c:2a:be:77:c4:24:9f:e7:a1:2d:b5:74:7c:4c:d7:0c:
c5:a6:01:2a:b8:62:27:14:f4:1b:68:1c:8a:3d:98:0a:9e:f2:
ef:98:a3:34:01:73:25:6a:e0:fa:45:8c:de:6e:e3:69:73:67:
a3:e3:c5:bc:a3:53:9a:ae:3f:bd:de:8e:12:97:99:e2:d0:5f:
f4:17:e0:17:7d:4f:a6:bd:ee:dd:62:47:64:bf:a5:c3:e9:4c:
6b:52:45:fc:8d:d2:2c:74:35:10:79:4c:0a:f5:50:f8:fa:c1:
e4:92:f7:40:ec:1b:af:58:f6:71:39:e0:e3:d4:8c:a2:e7:e4:
90:61:02:c6:22:aa:61:77:3b:b8:66:a0:93:8f:74:bb:33:4e:
42:c2:27:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYJV4/HjgtnGVfdiKysfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZWE4ZGUzMWNlY2E1NTgwM2NmM2FmMTRkNGE3Mjc5YWU4
NDQ2ZDAwHhcNMjYwNzI3MDcwMTA2WhcNMjYwNzI4MDcwMTA2WjAzMTEwLwYDVQQD
EyhhMzE0MDdlOGFjNTI3MWRkOGU2MTg3ZDVmODZiMWJiYTU2N2I5MmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswCtT6cL0RCVUPeKkQUWCpM2jXPL
81K4g05dkdzcyX/s0zzobS0yUtLz+X3l0QeHfNdF91oDEV4vxlTEvzuA8bouIKpX
aAEhp+yNWcMUFQ400fjFhyhQYyqsuj0O8FCmDdDsfmXv69BAftTBoYmLJFNWnhrK
9iWoIzMnhI9JrQcRB72YN2gSjwPeIHBazzERo5T84vsP7hE0PpZCZmAGb/bgk0q9
vnt5EgCWb21Sr/nSt9cD4bs3K4pv2JSEX4QHfSJxSQJbqia2VcEDRVQj2e7vJqce
UYh7EWzREqdDFeZtMngGuVM7kcCVyg1BMhh30GLlSx0jp+lbaRbotzdjxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMUB+isUnHdjmGH1fhrG7pWe5LIMB8GA1UdIwQY
MBaAFKHqjeMc7KVYA8868U1KcnmuhEbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEt
NzY1MjYyZjI5ZWFmLzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEtNzY1MjYyZjI5ZWFm
LzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqySg7L3
DgjKkq8ZlGevWX6T7XlPyRN6EjAEPEo1qwO5R8GfNUCMzC+8O7GW9c3wQGBDBv0h
UNObBwRpuLcPNCXhGh2ql8Xc9xHvS3a4K0l52Ah5c4uobC71Zh7MUvFnFGs/aSPL
9sjR9Wv4A/VMKr53xCSf56EttXR8TNcMxaYBKrhiJxT0G2gcij2YCp7y75ijNAFz
JWrg+kWM3m7jaXNno+PFvKNTmq4/vd6OEpeZ4tBf9BfgF31Ppr3u3WJHZL+lw+lM
a1JF/I3SLHQ1EHlMCvVQ+PrB5JL3QOwbr1j2cTng49SMoufkkGECxiKqYXc7uGag
k490uzNOQsInOQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:05:37 2026 by rpki-client