Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
File: oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft (raw, json)
Hash identifier: YO0/BX/eiuNQsHSfYRpUcyWXFpTtezin4EgdF5Bnw8c=
Subject key identifier: 50:C9:D4:CB:76:01:CD:19:49:46:10:1E:13:86:51:83:26:3A:9E:46
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 01A06CEFF74E2958A24AF617BB4AE1C6EEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
Manifest number: 01A8
Signing time: Fri 04 Sep 2026 15:01:00 +0000
Manifest this update: Fri 04 Sep 2026 15:01:00 +0000
Manifest next update: Sat 05 Sep 2026 15:01:00 +0000
Files and hashes: 1: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (hash: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=)
2: oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl (hash: XQsOFNeAauubUDjgI0CWMvyv7MWd3fx5Ip2oKsa9puI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:ef:f7:4e:29:58:a2:4a:f6:17:bb:4a:e1:c6:ee:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: Sep 4 15:01:00 2026 GMT
Not After : Sep 5 15:01:00 2026 GMT
Subject: CN=50c9d4cb7601cd194946101e13865183263a9e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:7e:b4:a5:6b:25:f8:92:9f:27:59:3c:69:
78:ba:ad:57:b6:a9:8f:43:dd:a9:e9:12:3d:d5:e9:
cb:41:a1:da:b5:aa:0e:40:b1:80:61:72:56:a3:8c:
8c:8a:f6:fc:72:9d:8f:a1:58:83:24:6f:9b:0b:e5:
7b:a5:18:64:d7:aa:5c:94:86:7a:f1:02:37:30:28:
39:5a:d7:69:4a:d0:bb:4d:d8:67:04:d8:f3:ae:35:
86:d0:ae:04:09:54:43:91:cd:36:8b:26:ae:d5:27:
cf:02:7c:b1:d9:89:32:ca:26:21:64:90:d8:4f:00:
72:d1:52:c3:fe:58:71:a3:d6:0f:8b:97:9b:b2:c7:
f2:1e:a7:60:97:dd:cb:d9:b7:ec:a1:40:48:e7:f7:
1a:6a:cc:a8:dc:40:17:c3:8b:53:48:12:6b:44:e6:
d9:f0:12:ca:e7:df:e9:0c:b6:c3:ba:bd:8a:89:16:
31:0e:12:7f:bd:f0:7e:26:a0:d1:12:16:10:59:27:
58:ef:3d:cc:bc:69:28:05:ee:4d:72:b2:3d:01:ad:
73:02:6e:b9:59:8b:c8:d8:ed:73:c3:89:d3:61:17:
01:25:9c:e3:7a:6f:ee:50:79:ae:de:e5:96:cd:df:
12:bc:ca:14:49:9a:20:0d:a4:23:30:61:90:93:3b:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C9:D4:CB:76:01:CD:19:49:46:10:1E:13:86:51:83:26:3A:9E:46
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ed:4d:cc:77:6c:83:be:07:ae:b7:43:d3:d6:ed:d1:1c:76:
ae:2d:75:13:d5:05:82:f7:44:46:4d:3d:44:31:d8:ba:00:92:
aa:79:e6:71:7b:ee:f0:38:83:b3:5d:86:d6:9d:cf:23:57:a1:
1a:bc:23:2a:cb:34:c3:d6:45:15:4a:c5:68:15:a8:78:be:78:
21:aa:ee:5c:77:8d:66:c0:2b:ff:a6:e2:79:1d:84:96:da:d0:
8d:b5:dc:2d:a0:54:98:45:f9:e2:16:f5:a7:7c:92:7c:9f:ac:
3c:b8:d0:55:c5:5c:41:4e:f3:f8:86:12:7f:05:ce:92:89:4f:
1a:b5:ca:49:7d:d2:a4:72:11:45:d6:04:87:a9:24:4e:02:a0:
36:4a:d8:7d:bc:e8:a0:3f:3d:26:b1:4f:63:a0:9f:40:03:85:
80:18:de:c1:88:5f:b0:fb:53:14:86:7a:5a:4b:0f:41:99:01:
47:1a:13:b9:32:e4:a8:40:96:b8:9a:24:67:7c:f6:ec:27:ec:
e6:18:37:c2:3b:66:f7:86:1b:46:02:9b:f8:a1:06:01:63:71:
6f:03:89:3c:de:0d:7a:86:f2:26:ad:18:31:1f:e5:1e:2d:61:
cf:aa:49:04:79:d9:53:08:ea:04:70:0b:e8:d7:8b:f6:72:31:
a6:13:1b:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBs7/dOKViiSvYXu0rhxu7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNmJkMzA4Zjc0MzI4OGFmNGNjMjExOTk3M2VjOGRjMDI4
OTM3ZjAwHhcNMjYwOTA0MTUwMTAwWhcNMjYwOTA1MTUwMTAwWjAzMTEwLwYDVQQD
Eyg1MGM5ZDRjYjc2MDFjZDE5NDk0NjEwMWUxMzg2NTE4MzI2M2E5ZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/J+tKVrJfiSnydZPGl4uq1XtqmP
Q92p6RI91enLQaHataoOQLGAYXJWo4yMivb8cp2PoViDJG+bC+V7pRhk16pclIZ6
8QI3MCg5WtdpStC7TdhnBNjzrjWG0K4ECVRDkc02iyau1SfPAnyx2YkyyiYhZJDY
TwBy0VLD/lhxo9YPi5ebssfyHqdgl93L2bfsoUBI5/caasyo3EAXw4tTSBJrRObZ
8BLK59/pDLbDur2KiRYxDhJ/vfB+JqDREhYQWSdY7z3MvGkoBe5NcrI9Aa1zAm65
WYvI2O1zw4nTYRcBJZzjem/uUHmu3uWWzd8SvMoUSZogDaQjMGGQkzuRLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDJ1Mt2Ac0ZSUYQHhOGUYMmOp5GMB8GA1UdIwQY
MBaAFKBr0wj3QyiK9MwhGZc+yNwCiTfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0d2VENQZERLSXIwekNFWmx6N0kzQUtKTl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jMWY1MzAtMzk3Ny00OGI4LWFlOGQt
YmE0MWJjMTk2MGQ4LzEvb0d2VENQZERLSXIwekNFWmx6N0kzQUtKTl9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jMWY1MzAtMzk3Ny00OGI4LWFlOGQtYmE0MWJjMTk2MGQ4
LzEvb0d2VENQZERLSXIwekNFWmx6N0kzQUtKTl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqe1NzHds
g74HrrdD09bt0Rx2ri11E9UFgvdERk09RDHYugCSqnnmcXvu8DiDs12G1p3PI1eh
GrwjKss0w9ZFFUrFaBWoeL54IaruXHeNZsAr/6bieR2EltrQjbXcLaBUmEX54hb1
p3ySfJ+sPLjQVcVcQU7z+IYSfwXOkolPGrXKSX3SpHIRRdYEh6kkTgKgNkrYfbzo
oD89JrFPY6CfQAOFgBjewYhfsPtTFIZ6WksPQZkBRxoTuTLkqECWuJokZ3z27Cfs
5hg3wjtm94YbRgKb+KEGAWNxbwOJPN4NeobyJq0YMR/lHi1hz6pJBHnZUwjqBHAL
6NeL9nIxphMb6w==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:48:20 2026 by rpki-client