Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: HiIdkJ0vdEcSibstz//0OXB5ZaQgPpUewKHgqq2DfwY=
Subject key identifier: 56:FD:F3:CB:AD:1E:03:F0:1B:7C:04:5B:16:D2:D6:FF:49:1C:C2:14
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 01A1784C2605BB0C82FF935D2798CC2D5CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 1AD2
Signing time: Mon 26 Oct 2026 13:00:18 +0000
Manifest this update: Mon 26 Oct 2026 13:00:18 +0000
Manifest next update: Tue 27 Oct 2026 13:00:18 +0000
Files and hashes: 1: 4F0qq7jfLgA4RD6gA7xmoqFDdAQ.roa (hash: 9eu4ch/L8yFJeyFrLuDangAXcD7SJ7FBYBZ7Pt6AAHE=)
2: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
3: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
4: IcJ3NkApy3ZuH6zT14y3NRctQTs.roa (hash: YF8uwCi6VEOuzkntI7vmvok4914x30Fr6OxRnIaMfhE=)
5: JPCCmHU8ahX1DiUwh62NrS-GovE.roa (hash: DSN9B+i7KCMrZdm0LMRFnAUtEcKLHOT2ja1tLaLHNkQ=)
6: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: R5tKKbv8vQHJ82WRWOcvcSP24tPFTEiz43qjj2L0dXM=)
7: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
8: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
9: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:26:05:bb:0c:82:ff:93:5d:27:98:cc:2d:5c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Oct 26 13:00:18 2026 GMT
Not After : Oct 27 13:00:18 2026 GMT
Subject: CN=56fdf3cbad1e03f01b7c045b16d2d6ff491cc214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:53:5d:3a:6f:a1:13:1a:9c:9f:3a:86:1e:
93:6b:96:c4:7a:83:eb:73:c0:d2:36:d7:7f:80:87:
93:3f:ff:ad:09:68:d1:52:6f:76:32:15:d3:a8:a8:
dc:54:66:90:72:6b:70:53:d8:d7:b0:f3:30:61:7c:
73:b6:0d:ed:e0:ea:ad:e4:f4:7c:87:f5:e5:90:4a:
ee:74:65:08:c1:f8:8e:a7:ea:dc:c0:df:cd:dc:c1:
e8:84:f4:99:6e:80:20:1e:db:0e:e1:66:d9:bc:7e:
71:cc:c0:ca:f1:dd:bc:0b:29:eb:89:8e:37:77:cb:
35:80:00:09:d1:3a:34:5a:30:ea:ee:84:ce:51:84:
4a:18:d4:b2:af:e5:73:a8:cb:19:f6:47:a4:d0:ff:
ef:30:eb:bd:62:b9:45:b8:a8:47:0d:81:87:73:39:
fa:03:19:fa:39:bd:b6:78:f9:d1:60:39:f9:57:c4:
ba:6a:2d:07:94:6e:ae:d0:d7:11:f1:0f:58:0b:ed:
33:fe:7c:f1:50:f6:1a:43:2a:a3:c5:ce:60:d5:88:
60:1f:36:47:d5:8b:6d:6f:81:84:ac:9a:2a:2d:77:
31:35:88:74:75:ad:7c:f1:90:4f:f5:af:8f:f0:1f:
cb:dc:7e:79:d3:67:77:46:69:a8:ed:ac:0e:7d:1b:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FD:F3:CB:AD:1E:03:F0:1B:7C:04:5B:16:D2:D6:FF:49:1C:C2:14
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6b:36:9d:af:45:b2:c3:e3:7e:61:6d:01:52:43:60:07:e1:
71:72:c8:cb:a6:80:dd:20:55:c9:e8:6a:6a:cf:75:f7:c2:5b:
7e:0a:c1:49:57:b6:44:0e:6f:e1:24:48:15:94:f4:ab:aa:c1:
eb:d2:95:c8:74:98:30:dc:14:04:6b:9d:46:c9:60:af:6b:80:
d5:d4:96:04:15:42:52:9a:3f:4f:60:8f:84:a1:23:68:c2:a0:
de:05:24:c2:73:77:5b:25:2d:58:e7:19:48:87:3e:d4:c8:bb:
77:76:87:aa:1b:2c:2c:f7:9d:64:7c:b4:43:bd:4d:b3:0e:c0:
18:d0:47:78:67:13:0e:b7:a3:f9:2a:a6:5b:ec:67:dc:0e:0f:
c6:65:0a:ea:28:81:08:7f:3f:63:d2:fb:90:76:e2:48:f7:29:
7b:72:ff:dc:3d:36:ad:2a:65:f7:3f:7c:3b:dd:2e:e0:dd:b4:
d1:7a:bd:d3:3a:be:2e:dd:bb:ca:dc:24:20:ac:2a:75:38:6f:
5a:6a:69:02:c7:8c:1b:5c:9a:45:04:50:bb:28:f2:bc:36:a8:
bf:0c:e1:65:57:12:31:50:38:ad:81:1d:8d:1b:4e:f3:bf:a0:
eb:15:0a:fb:c0:ed:41:ce:7b:ea:34:06:28:0d:51:f4:c4:25:
0d:1c:73:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4TCYFuwyC/5NdJ5jMLVz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2
Nzc3MGQwHhcNMjYxMDI2MTMwMDE4WhcNMjYxMDI3MTMwMDE4WjAzMTEwLwYDVQQD
Eyg1NmZkZjNjYmFkMWUwM2YwMWI3YzA0NWIxNmQyZDZmZjQ5MWNjMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e1TXTpvoRManJ86hh6Ta5bEeoPr
c8DSNtd/gIeTP/+tCWjRUm92MhXTqKjcVGaQcmtwU9jXsPMwYXxztg3t4Oqt5PR8
h/XlkErudGUIwfiOp+rcwN/N3MHohPSZboAgHtsO4WbZvH5xzMDK8d28CynriY43
d8s1gAAJ0To0WjDq7oTOUYRKGNSyr+VzqMsZ9kek0P/vMOu9YrlFuKhHDYGHczn6
Axn6Ob22ePnRYDn5V8S6ai0HlG6u0NcR8Q9YC+0z/nzxUPYaQyqjxc5g1YhgHzZH
1Yttb4GErJoqLXcxNYh0da188ZBP9a+P8B/L3H5502d3Rmmo7awOfRtuVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFb988utHgPwG3wEWxbS1v9JHMIUMB8GA1UdIwQY
MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt
Y2NmNjQ1NGJiMjRjLzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj
LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWs2na9F
ssPjfmFtAVJDYAfhcXLIy6aA3SBVyehqas9198JbfgrBSVe2RA5v4SRIFZT0q6rB
69KVyHSYMNwUBGudRslgr2uA1dSWBBVCUpo/T2CPhKEjaMKg3gUkwnN3WyUtWOcZ
SIc+1Mi7d3aHqhssLPedZHy0Q71Nsw7AGNBHeGcTDrej+SqmW+xn3A4PxmUK6iiB
CH8/Y9L7kHbiSPcpe3L/3D02rSpl9z98O90u4N200Xq90zq+Lt27ytwkIKwqdThv
WmppAseMG1yaRQRQuyjyvDaovwzhZVcSMVA4rYEdjRtO87+g6xUK+8DtQc576jQG
KA1R9MQlDRxzfA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:48 2026 by rpki-client