Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
File: u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft (raw, json)
Hash identifier: 3qHCqpKiTaudcHirlKZa7a/3krqX18bSgBzJgMuIvhc=
Subject key identifier: 95:6E:FE:7E:31:49:4A:B4:7D:66:E1:03:3D:78:93:2A:D1:2F:A0:6E
Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
Certificate issuer: /CN=bbf3a257f99528c3a924d269d1af438185c2006d
Certificate serial: 01A15BC294A51F0E4D720F16DD0B956A5A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
Manifest number: 071B
Signing time: Wed 21 Oct 2026 00:00:41 +0000
Manifest this update: Wed 21 Oct 2026 00:00:41 +0000
Manifest next update: Thu 22 Oct 2026 00:00:41 +0000
Files and hashes: 1: GBunbPk2URQkgaxpt1o-Uh4SYwg.roa (hash: kPRMfRkw+Lm6R/mPdE/dCzGyLBiV02Yx27KySSDXIPw=)
2: jh1q0Khz-_M-_NrljnyRN8ykZos.roa (hash: YxHKopg2fOCwZT68HBOpYKRGQJXtUa8z+eYm7fqEP9M=)
3: u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl (hash: twIgJjZ68Kl4tUNWblqu8Mp3Qn9SkwDG60Qijsj/ZdU=)
4: vuuk7Bw0qNuOFi3i_WnG1bmfFIk.roa (hash: ApgLzh88e1nVK1T+pmvKzZNPx17TlVOhS603xJ5WCsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:c2:94:a5:1f:0e:4d:72:0f:16:dd:0b:95:6a:5a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d
Validity
Not Before: Oct 21 00:00:41 2026 GMT
Not After : Oct 22 00:00:41 2026 GMT
Subject: CN=956efe7e31494ab47d66e1033d78932ad12fa06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:f9:f4:ec:37:f7:2a:ef:d5:9b:10:89:15:
19:ef:2f:2d:a4:64:ef:38:ea:c1:dc:f9:30:b0:5e:
76:fb:56:d6:bb:bd:d4:a8:f0:ca:65:dd:fe:6b:fa:
24:0a:01:87:43:93:2b:27:d5:e9:f8:eb:cb:27:93:
86:de:1c:44:d8:0b:23:3f:67:d0:39:e2:68:95:fa:
85:cb:2d:bc:51:d0:f3:8f:b1:db:7d:13:88:ad:66:
34:f7:cd:e8:31:6c:1f:c2:25:a1:32:cf:01:a8:1f:
7f:75:75:84:8f:d4:fd:d1:66:30:5b:06:f9:0b:1f:
0a:d3:7e:50:42:89:67:cf:49:a4:53:ca:43:80:ec:
1b:ea:b4:36:c8:7c:a4:9f:4e:bb:16:be:fe:4a:51:
e9:be:b8:32:56:a4:5e:15:6f:e8:ee:c2:89:c3:81:
5c:6c:98:23:4e:96:d8:9b:8a:4a:59:5b:76:66:1c:
0d:ed:d0:1f:00:c6:cc:d6:a3:dd:2c:99:b1:2c:6f:
7a:22:fc:7d:b0:7b:15:45:08:6f:bb:9b:6d:fd:e3:
9b:95:cd:68:5d:e9:59:cb:74:d0:cb:47:b6:b3:68:
cb:ff:ea:68:cf:7a:24:0e:78:ca:65:96:fc:06:03:
7b:20:bf:6c:5c:00:aa:d6:3e:e2:55:0b:cd:14:6e:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6E:FE:7E:31:49:4A:B4:7D:66:E1:03:3D:78:93:2A:D1:2F:A0:6E
X509v3 Authority Key Identifier:
keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:05:ae:0b:d5:82:6b:fa:e2:cd:f5:dc:a3:b5:1a:7c:0e:1d:
f0:42:a7:21:ac:37:27:32:94:e1:19:73:d7:b5:d8:56:13:bd:
34:78:2e:81:a0:e6:21:6e:43:99:e1:27:6e:14:a9:81:f7:77:
84:93:a2:5c:4a:90:dd:b9:ee:1a:86:44:43:01:df:ac:f2:17:
8e:1b:a0:eb:31:c9:ab:bf:98:33:48:24:a5:aa:73:2c:68:6c:
ea:7a:dc:44:f0:5f:a5:60:41:a0:7a:64:3b:c6:0f:37:eb:16:
f7:33:f3:7d:0b:97:de:9f:06:01:be:bc:e1:e4:ea:92:ad:78:
4e:57:ff:a1:30:67:85:e5:b3:11:7f:ef:c7:d8:28:f2:46:c8:
72:55:ab:f9:df:4e:1f:de:c9:c3:fa:f4:eb:0a:16:b0:93:22:
fb:af:4b:cb:0e:81:65:4c:61:66:fb:3b:e5:a2:f7:91:ba:ee:
38:35:35:9b:1f:bf:44:a7:2d:81:82:25:d1:ef:1a:cb:37:45:
e7:1c:7e:cf:ba:1c:64:72:c9:17:4f:c1:85:ba:09:4b:e7:8e:
58:6f:12:bf:2b:c5:6c:3b:4c:7e:6c:fe:3d:3e:88:53:5e:2a:
9a:58:83:cd:48:ed:99:94:82:92:87:d7:06:2f:1e:6e:a7:34:
62:ee:f7:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFbwpSlHw5Ncg8W3QuValpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjNhMjU3Zjk5NTI4YzNhOTI0ZDI2OWQxYWY0MzgxODVj
MjAwNmQwHhcNMjYxMDIxMDAwMDQxWhcNMjYxMDIyMDAwMDQxWjAzMTEwLwYDVQQD
Eyg5NTZlZmU3ZTMxNDk0YWI0N2Q2NmUxMDMzZDc4OTMyYWQxMmZhMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPz59Ow39yrv1ZsQiRUZ7y8tpGTv
OOrB3PkwsF52+1bWu73UqPDKZd3+a/okCgGHQ5MrJ9Xp+OvLJ5OG3hxE2AsjP2fQ
OeJolfqFyy28UdDzj7HbfROIrWY0983oMWwfwiWhMs8BqB9/dXWEj9T90WYwWwb5
Cx8K035QQolnz0mkU8pDgOwb6rQ2yHykn067Fr7+SlHpvrgyVqReFW/o7sKJw4Fc
bJgjTpbYm4pKWVt2ZhwN7dAfAMbM1qPdLJmxLG96Ivx9sHsVRQhvu5tt/eOblc1o
XelZy3TQy0e2s2jL/+poz3okDnjKZZb8BgN7IL9sXACq1j7iVQvNFG6I0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVu/n4xSUq0fWbhAz14kyrRL6BuMB8GA1UdIwQY
MBaAFLvzolf5lSjDqSTSadGvQ4GFwgBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80ZmFhZmYtMzg0Zi00MDJlLThiOGMt
NDVmNzdkZmEyNjM2LzEvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80ZmFhZmYtMzg0Zi00MDJlLThiOGMtNDVmNzdkZmEyNjM2
LzEvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewWuC9WC
a/rizfXco7UafA4d8EKnIaw3JzKU4Rlz17XYVhO9NHgugaDmIW5DmeEnbhSpgfd3
hJOiXEqQ3bnuGoZEQwHfrPIXjhug6zHJq7+YM0gkpapzLGhs6nrcRPBfpWBBoHpk
O8YPN+sW9zPzfQuX3p8GAb684eTqkq14Tlf/oTBnheWzEX/vx9go8kbIclWr+d9O
H97Jw/r06woWsJMi+69Lyw6BZUxhZvs75aL3kbruODU1mx+/RKctgYIl0e8ayzdF
5xx+z7ocZHLJF0/BhboJS+eOWG8SvyvFbDtMfmz+PT6IU14qmliDzUjtmZSCkofX
Bi8ebqc0Yu73Qw==
-----END CERTIFICATE-----
Generated at Wed Oct 21 10:34:49 2026 by rpki-client