Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: c5MfhvUueIAHrtjYBqQc6E+9+0l4FRrciFCXvturyE8=
Subject key identifier: B3:FC:82:D7:EA:0F:D9:92:C7:20:70:E8:B2:41:51:CC:B3:4C:70:91
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 01A03D8439BB3622DAF277C5BE93707F25ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 1A23
Signing time: Wed 26 Aug 2026 10:01:10 +0000
Manifest this update: Wed 26 Aug 2026 10:01:10 +0000
Manifest next update: Thu 27 Aug 2026 10:01:10 +0000
Files and hashes: 1: 1-A4EU1ApAufBvEjd-muSLr7ANu8.roa (hash: RnoopnV8A6AgkKLGp6MuOa3nwgjKcYP0z+JNGgWdgZU=)
2: 9ahtSN9XLjXuAR5XQRQMSvAfggs.asa (hash: wf77PGlmiZZODXFzLO6ccUs8zaq7f7VnJ0py4/asRek=)
3: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: C8s5ixwE2noiqrXYc2Hqiw/EYMGvXcp366V8gmG7qYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:84:39:bb:36:22:da:f2:77:c5:be:93:70:7f:25:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Aug 26 10:01:10 2026 GMT
Not After : Aug 27 10:01:10 2026 GMT
Subject: CN=b3fc82d7ea0fd992c72070e8b24151ccb34c7091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:84:ae:52:9f:a6:25:d7:75:62:af:bd:63:
e9:4f:76:24:54:47:b6:7a:5c:29:32:23:36:3b:d2:
33:00:c1:75:3b:2b:5b:71:c2:93:a6:9e:2a:cf:b9:
3d:93:6b:0b:09:92:ac:66:4f:af:ad:bb:3c:f4:91:
8e:39:30:6a:5c:4b:23:98:79:04:97:63:1e:2b:aa:
26:55:ab:fa:ef:71:2c:08:8c:80:11:e9:a5:46:f5:
35:92:68:1b:f9:dd:de:1f:35:cd:27:f0:86:50:71:
6e:31:c9:1b:6d:36:57:03:30:cd:7d:b3:5f:74:22:
30:78:74:2a:32:06:94:1d:1b:a0:29:27:a9:93:1e:
a2:05:23:09:db:38:be:24:58:f6:80:e9:4e:1b:58:
b5:bd:75:3d:f1:fd:f1:42:c4:c8:16:c5:03:ff:3c:
eb:62:c1:87:5e:91:84:d3:f6:35:ec:2e:b8:59:63:
a3:8d:73:e5:be:31:20:bf:6f:94:45:5f:92:43:c7:
5e:9e:88:b0:01:1f:4a:d1:2d:fd:fb:ea:50:10:99:
87:98:e3:a9:95:e7:be:80:68:9e:42:b6:d9:94:d3:
5d:ba:78:59:93:a9:01:06:09:f7:f9:3f:b7:1c:a3:
bc:04:77:f6:bf:58:f6:90:b5:f5:d1:b9:44:b4:60:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FC:82:D7:EA:0F:D9:92:C7:20:70:E8:B2:41:51:CC:B3:4C:70:91
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:66:3a:a6:86:d3:52:94:a5:6f:ed:16:ec:da:7b:cc:05:98:
41:21:66:73:33:22:4a:5c:8d:95:1c:d5:33:35:76:8b:6d:54:
25:a0:b2:f6:b7:51:e1:8a:ec:49:35:b3:f8:8d:de:98:a1:82:
97:6a:b7:f2:3c:65:2b:f1:11:13:94:4f:31:a1:85:97:7d:0b:
21:6d:0c:b1:0d:4e:6b:39:60:14:f7:c7:d0:4a:7e:82:f1:da:
c5:3f:8e:91:6e:64:09:32:72:02:79:67:d3:a7:ab:4b:a1:d0:
a6:9a:92:8f:c7:1f:bb:ec:bf:47:ef:bd:d0:17:b0:a0:f4:b7:
7a:23:b5:7d:9d:d3:0d:a4:a8:22:58:c1:ae:1c:c5:e4:0d:63:
b9:20:92:b2:17:69:53:fa:13:fd:02:60:09:ca:3b:44:2b:b6:
bc:41:a7:63:9c:6b:f0:d7:4b:e6:50:c5:73:e6:68:38:b9:e5:
de:46:bd:b0:02:0c:f9:90:18:96:88:66:2a:06:4b:49:78:81:
b7:cf:12:0d:cf:35:36:d2:0f:02:8e:ef:89:69:61:cf:a4:59:
ed:e5:1b:20:79:a2:29:91:16:3b:62:e0:28:fc:3f:df:f5:87:
d3:61:da:f5:a7:f5:c8:c0:1b:3e:95:69:f3:4d:57:20:e6:54:
0a:77:36:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA9hDm7NiLa8nfFvpNwfyXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ODc5YTc4YTU4YTQ4NWNjZDg5NzBmMDQzMmRiOGYzZDc3
MTcyNWIwHhcNMjYwODI2MTAwMTEwWhcNMjYwODI3MTAwMTEwWjAzMTEwLwYDVQQD
EyhiM2ZjODJkN2VhMGZkOTkyYzcyMDcwZThiMjQxNTFjY2IzNGM3MDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwheErlKfpiXXdWKvvWPpT3YkVEe2
elwpMiM2O9IzAMF1OytbccKTpp4qz7k9k2sLCZKsZk+vrbs89JGOOTBqXEsjmHkE
l2MeK6omVav673EsCIyAEemlRvU1kmgb+d3eHzXNJ/CGUHFuMckbbTZXAzDNfbNf
dCIweHQqMgaUHRugKSepkx6iBSMJ2zi+JFj2gOlOG1i1vXU98f3xQsTIFsUD/zzr
YsGHXpGE0/Y17C64WWOjjXPlvjEgv2+URV+SQ8denoiwAR9K0S39++pQEJmHmOOp
lee+gGieQrbZlNNdunhZk6kBBgn3+T+3HKO8BHf2v1j2kLX10blEtGDKrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLP8gtfqD9mSxyBw6LJBUcyzTHCRMB8GA1UdIwQY
MBaAFDiHmnilikhczYlw8EMtuPPXcXJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMt
YTE2YTM0YzQ2ZjMwLzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMtYTE2YTM0YzQ2ZjMw
LzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2Y6pobT
UpSlb+0W7Np7zAWYQSFmczMiSlyNlRzVMzV2i21UJaCy9rdR4YrsSTWz+I3emKGC
l2q38jxlK/ERE5RPMaGFl30LIW0MsQ1OazlgFPfH0Ep+gvHaxT+OkW5kCTJyAnln
06erS6HQppqSj8cfu+y/R++90BewoPS3eiO1fZ3TDaSoIljBrhzF5A1juSCSshdp
U/oT/QJgCco7RCu2vEGnY5xr8NdL5lDFc+ZoOLnl3ka9sAIM+ZAYlohmKgZLSXiB
t88SDc81NtIPAo7viWlhz6RZ7eUbIHmiKZEWO2LgKPw/3/WH02Ha9af1yMAbPpVp
801XIOZUCnc2iQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 19:32:31 2026 by rpki-client