
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier: w87yu2mpLZbKCBrR3vfdzMEsk3+R67hr844jIeBPDRw=
Subject key identifier: D9:8A:B4:71:63:58:B8:29:81:5D:12:54:83:A5:23:8E:FD:66:8D:2D
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial: 01A17438D8275B13EEC4F1720B46B6F6848F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number: 1464
Signing time: Sun 25 Oct 2026 18:00:44 +0000
Manifest this update: Sun 25 Oct 2026 18:00:44 +0000
Manifest next update: Mon 26 Oct 2026 18:00:44 +0000
Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: TtewepbWC1zDB43KhiE7JjFkxNQv0LSWfLeb1CsnQuk=)
2: opgto3lf-uASZpY1UQFHGbhOzeU.roa (hash: 3TR6BeZ5ansPG9ZOYBmWYTVEtFBiV31qgxyOFhIhE/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:38:d8:27:5b:13:ee:c4:f1:72:0b:46:b6:f6:84:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Validity
Not Before: Oct 25 18:00:44 2026 GMT
Not After : Oct 26 18:00:44 2026 GMT
Subject: CN=d98ab4716358b829815d125483a5238efd668d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:da:6e:dc:b1:e6:4f:71:40:ef:3b:57:3b:
2e:46:18:8b:d3:e0:6c:75:30:cb:60:22:b1:98:a5:
ec:b4:8e:8f:c1:94:e8:21:c9:6e:70:75:7c:07:38:
39:13:44:c0:03:98:c0:58:ad:6c:96:1e:54:02:7a:
d5:73:46:4b:13:9c:d2:27:3c:c1:2c:32:57:cb:c7:
ef:1f:12:5e:4f:4e:1c:dd:27:ba:1b:7f:e2:af:6e:
1f:79:85:de:2f:43:af:de:e9:67:ea:16:c2:e6:09:
fa:3d:3f:78:c1:2b:28:76:a5:ec:a5:3c:58:36:2f:
43:28:e5:ad:3c:01:f2:68:09:05:97:d9:27:f0:21:
62:1b:b3:5c:d1:b1:e2:97:dd:18:85:62:55:59:1a:
0a:b1:ee:21:81:82:a3:d5:f0:d0:b8:99:54:4f:be:
d1:4d:59:4c:5c:34:1b:09:7c:d4:fb:5e:b5:9e:89:
87:a7:ec:71:6c:5c:90:4b:31:ee:05:8a:67:e1:6d:
1e:53:19:2a:56:2b:13:37:1b:69:82:86:ef:f2:13:
f6:74:48:5d:d1:aa:24:cc:4e:12:b2:66:76:c0:0c:
08:5a:0b:03:40:a2:5d:b4:24:0d:51:34:8a:43:4b:
aa:26:91:5f:27:f7:ca:0d:40:c8:21:8c:e2:e9:cc:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8A:B4:71:63:58:B8:29:81:5D:12:54:83:A5:23:8E:FD:66:8D:2D
X509v3 Authority Key Identifier:
keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:14:59:98:3d:29:a2:98:1d:44:2e:6c:fa:a4:76:03:e7:dd:
92:85:39:38:a1:d8:51:e7:a8:11:05:7d:33:8a:92:a4:6a:f2:
74:cf:37:49:2e:58:80:f1:7f:79:e2:62:1b:15:de:5c:cf:68:
f3:d0:93:ca:32:5d:3e:5f:76:f1:51:40:60:55:fb:46:d4:bd:
43:2b:e5:95:7e:69:fd:30:00:0b:ca:d7:ef:b0:e3:f4:72:78:
82:26:ee:3d:d7:67:c5:0d:c0:1a:e6:b9:55:64:18:4c:e4:93:
65:7a:70:4a:88:65:fa:5c:93:04:6d:e4:1d:e2:65:3e:85:50:
5a:12:87:45:62:f3:77:df:6d:9a:86:86:70:0b:e1:fb:84:a7:
69:c9:da:5e:15:40:8e:27:fd:06:f6:f4:f4:b2:38:b8:63:d4:
8e:f3:fa:e5:2a:22:5c:cf:a7:85:71:3c:b6:ed:8b:08:d4:77:
9d:86:51:05:b0:89:d0:24:db:23:00:67:ce:1d:62:c3:1e:a3:
d7:72:d7:80:b9:4b:f3:f1:26:96:26:d7:eb:79:c3:3e:4c:51:
bf:ba:1b:b9:07:58:9e:5a:d7:7a:12:c7:14:da:45:5f:85:1e:
04:49:8b:6f:79:70:a3:b1:34:9e:c6:ed:17:be:7b:de:35:31:
7e:70:a3:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF0ONgnWxPuxPFyC0a29oSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMTRmYWJmZWYyMDNhOGVlMDhjY2I0N2RkNjQ3M2ZjZTc5
OWEyOGYwHhcNMjYxMDI1MTgwMDQ0WhcNMjYxMDI2MTgwMDQ0WjAzMTEwLwYDVQQD
EyhkOThhYjQ3MTYzNThiODI5ODE1ZDEyNTQ4M2E1MjM4ZWZkNjY4ZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeLabtyx5k9xQO87VzsuRhiL0+Bs
dTDLYCKxmKXstI6PwZToIclucHV8Bzg5E0TAA5jAWK1slh5UAnrVc0ZLE5zSJzzB
LDJXy8fvHxJeT04c3Se6G3/ir24feYXeL0Ov3uln6hbC5gn6PT94wSsodqXspTxY
Ni9DKOWtPAHyaAkFl9kn8CFiG7Nc0bHil90YhWJVWRoKse4hgYKj1fDQuJlUT77R
TVlMXDQbCXzU+161nomHp+xxbFyQSzHuBYpn4W0eUxkqVisTNxtpgobv8hP2dEhd
0aokzE4SsmZ2wAwIWgsDQKJdtCQNUTSKQ0uqJpFfJ/fKDUDIIYzi6czEiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmKtHFjWLgpgV0SVIOlI479Zo0tMB8GA1UdIwQY
MBaAFKIU+r/vIDqO4IzLR91kc/znmaKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYt
MjVjNWY3MTIzZTM1LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYtMjVjNWY3MTIzZTM1
LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhRZmD0p
opgdRC5s+qR2A+fdkoU5OKHYUeeoEQV9M4qSpGrydM83SS5YgPF/eeJiGxXeXM9o
89CTyjJdPl928VFAYFX7RtS9QyvllX5p/TAAC8rX77Dj9HJ4gibuPddnxQ3AGua5
VWQYTOSTZXpwSohl+lyTBG3kHeJlPoVQWhKHRWLzd99tmoaGcAvh+4SnacnaXhVA
jif9Bvb09LI4uGPUjvP65SoiXM+nhXE8tu2LCNR3nYZRBbCJ0CTbIwBnzh1iwx6j
13LXgLlL8/EmlibX63nDPkxRv7obuQdYnlrXehLHFNpFX4UeBEmLb3lwo7E0nsbt
F7573jUxfnCj5g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 04:05:00 2026 by rpki-client