Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: oPxKsELNONWq5z4PACnCMMhESvSXQlvMkgK8KjSmJPU=
Subject key identifier: A2:2F:08:35:68:FE:C7:DB:CB:94:C6:EF:14:26:40:08:47:25:7F:FF
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 01A08CE914B8E9FDB3E6BD7BF4AC952DC6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 20:01:20 +0000
Manifest this update: Thu 10 Sep 2026 20:01:20 +0000
Manifest next update: Fri 11 Sep 2026 20:01:20 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: ULB1h035v4qqI+IVueab5xIPsw4cN71UFqeQeX2XNjo=)
2: mKOuhDb0lNg_dJ83TTrmFYMNIeA.roa (hash: Om4b1zrUyorfRjmzpKplEidWPKteQvqXZcg+Z0i4g3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:14:b8:e9:fd:b3:e6:bd:7b:f4:ac:95:2d:c6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Sep 10 20:01:20 2026 GMT
Not After : Sep 11 20:01:20 2026 GMT
Subject: CN=a22f083568fec7dbcb94c6ef1426400847257fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:06:fe:ab:26:ba:0c:bb:af:8a:a9:63:8e:
99:95:48:4a:ac:c2:b2:0e:d9:6e:e9:f2:5b:c7:c4:
6f:e5:06:93:7e:be:7c:51:63:44:73:e8:93:87:de:
6a:c4:b6:49:1f:8b:a9:4a:02:e5:03:ff:d7:08:4f:
85:dd:cd:ba:ee:a3:df:18:74:2a:03:af:80:5a:99:
4f:b1:33:46:a8:d4:c5:5c:ad:42:b4:a7:8d:e6:04:
e6:5e:1f:47:cd:60:08:2a:5c:97:db:2a:55:1a:62:
82:45:0b:86:dc:da:71:d6:ae:c4:56:e4:f7:0b:d9:
2d:95:5f:34:c1:62:b8:ce:7d:77:65:28:85:48:98:
2c:02:7f:f2:cb:04:6a:12:0b:42:7e:aa:e5:b6:cf:
bb:29:85:da:ec:08:83:2a:4e:ac:5c:c8:5a:16:62:
48:dd:11:a2:ed:cf:83:a3:d6:3b:95:39:65:8c:99:
85:17:f9:09:0d:31:4f:64:c0:e3:0b:aa:0d:f7:ec:
f0:f0:45:09:d1:3d:30:c0:d0:b1:d0:a2:98:87:5a:
81:6a:00:d5:d7:56:87:07:f7:65:7c:64:00:88:86:
34:14:13:90:d0:ea:c6:c9:68:c6:b5:55:17:e2:bb:
09:b9:ff:83:8d:e6:54:11:09:fc:4b:85:6a:34:46:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2F:08:35:68:FE:C7:DB:CB:94:C6:EF:14:26:40:08:47:25:7F:FF
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:47:43:49:5d:94:ac:60:de:ca:93:36:6b:3c:c6:9f:cf:26:
89:16:d3:99:7d:eb:0e:e5:9e:3f:07:a3:7a:a9:3d:6b:95:04:
74:23:22:b9:8f:78:b0:9a:6b:43:d2:a8:5e:c2:0f:13:eb:4c:
5f:bb:28:89:4a:7a:d4:90:7d:12:3d:86:1d:62:76:70:d3:62:
7a:45:80:61:f3:ca:f9:75:af:7b:fe:14:23:89:2d:ed:31:d9:
05:89:3f:f4:49:d8:c9:84:24:de:0a:cf:71:ef:e5:ba:a0:34:
8f:7c:8a:d8:08:47:28:c8:8b:8b:f2:32:df:d6:62:10:48:cb:
26:94:f8:2f:2f:a5:9b:81:b2:02:de:7d:f5:90:87:66:a1:ed:
03:6e:10:a2:7a:54:6d:79:33:8a:d8:28:0c:11:18:fb:78:e4:
8c:c0:7f:cc:30:09:2a:aa:e5:30:7b:86:a5:67:af:a6:d9:be:
70:24:d1:85:4f:51:dd:8c:c1:39:8e:9c:45:a7:1c:63:f5:e0:
d1:a6:0d:99:60:c6:d7:2b:ef:0d:cf:88:27:9c:ce:51:4b:26:
d0:a7:6a:13:c4:2a:bc:58:6a:f6:0a:27:a1:86:4e:d5:18:b8:
f4:88:9c:33:98:9d:83:48:2d:1f:21:28:3b:c3:88:6d:21:3f:
57:1f:8a:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCM6RS46f2z5r179KyVLcazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWIzMzZkNTYwNGQ0N2JhZTgxNzIzOGIwZGJiNDk3NzFl
MjQ3MjkwHhcNMjYwOTEwMjAwMTIwWhcNMjYwOTExMjAwMTIwWjAzMTEwLwYDVQQD
EyhhMjJmMDgzNTY4ZmVjN2RiY2I5NGM2ZWYxNDI2NDAwODQ3MjU3ZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQsG/qsmugy7r4qpY46ZlUhKrMKy
Dtlu6fJbx8Rv5QaTfr58UWNEc+iTh95qxLZJH4upSgLlA//XCE+F3c267qPfGHQq
A6+AWplPsTNGqNTFXK1CtKeN5gTmXh9HzWAIKlyX2ypVGmKCRQuG3Npx1q7EVuT3
C9ktlV80wWK4zn13ZSiFSJgsAn/yywRqEgtCfqrlts+7KYXa7AiDKk6sXMhaFmJI
3RGi7c+Do9Y7lTlljJmFF/kJDTFPZMDjC6oN9+zw8EUJ0T0wwNCx0KKYh1qBagDV
11aHB/dlfGQAiIY0FBOQ0OrGyWjGtVUX4rsJuf+DjeZUEQn8S4VqNEaaGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIvCDVo/sfby5TG7xQmQAhHJX//MB8GA1UdIwQY
MBaAFJDrM21WBNR7roFyOLDbtJdx4kcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWIt
YjExOTI3NGFkNjU0LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWItYjExOTI3NGFkNjU0
LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUdDSV2U
rGDeypM2azzGn88miRbTmX3rDuWePwejeqk9a5UEdCMiuY94sJprQ9KoXsIPE+tM
X7soiUp61JB9Ej2GHWJ2cNNiekWAYfPK+XWve/4UI4kt7THZBYk/9EnYyYQk3grP
ce/luqA0j3yK2AhHKMiLi/Iy39ZiEEjLJpT4Ly+lm4GyAt599ZCHZqHtA24QonpU
bXkzitgoDBEY+3jkjMB/zDAJKqrlMHuGpWevptm+cCTRhU9R3YzBOY6cRaccY/Xg
0aYNmWDG1yvvDc+IJ5zOUUsm0KdqE8QqvFhq9gonoYZO1Ri49IicM5idg0gtHyEo
O8OIbSE/Vx+K+Q==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:19:52 2026 by rpki-client