Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier: UP8TsFTsR/nm/V5Nl+TipCIzbbXXCgJKfmVz3Yac4q0=
Subject key identifier: 0D:DC:BE:7F:AC:30:BB:A0:27:CA:A3:57:B2:A4:01:04:1A:CB:79:65
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01A17B4DC1AB9B34AA1B92A837A164B2E2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number: 199D
Signing time: Tue 27 Oct 2026 03:00:55 +0000
Manifest this update: Tue 27 Oct 2026 03:00:55 +0000
Manifest next update: Wed 28 Oct 2026 03:00:55 +0000
Files and hashes: 1: 0XVL1DRx75lawy_xFW5mJsQGHSU.roa (hash: BELOWMUZ3k/HbcEYsajsYqC3iV1ihvP6qfT8um9x+wM=)
2: GpsXVdWfTVrTw1I71qKjHAi-OwY.roa (hash: 37jMyQ9qnFLk9VNqPb2W6JdCqnsDuBdiD0ur3v/oEEw=)
3: NGPMuWiFeknKXkwM3nxouEoeXyk.roa (hash: /tIDGmKeCM03QTIplLTQuWQW/TuDx6K9okVMkl68do8=)
4: XwluJi7gd_3bLnOhsXiaCK78UGQ.roa (hash: Vg2POX67iN2CB7gqcNW3j2zG6gzZxQs5uZV1T7iRkdU=)
5: hl3Yd95fQNxwoRIo3-4kn7W_Dcs.roa (hash: bf3A6eur16fDQenvn2mn0EiiLqdDCmb0v7sPr8NzgvI=)
6: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: vMY09elBK8UTXHD+XzhMvCQc7oAXhK77MLZnjXq+qes=)
7: sgQIBkFFp9Zlr_0nrRPVgJN0CEQ.roa (hash: S9CdDbT1ld2vusmvuJyBIT32yXTScPbapiKiAqKYB1k=)
8: tBE2DXCg9mo6HQNSmwQwa4AaEKw.roa (hash: /Uu7Wfq1cKcIhIObzC72sU7ALGmExyntY4syvrkFG/U=)
9: vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa (hash: /W94YDKehwEOG4IGpuPHROQ+73Ocm3mWSD9qbK70W14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:c1:ab:9b:34:aa:1b:92:a8:37:a1:64:b2:e2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Oct 27 03:00:55 2026 GMT
Not After : Oct 28 03:00:55 2026 GMT
Subject: CN=0ddcbe7fac30bba027caa357b2a401041acb7965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:35:46:40:71:5a:4c:a0:85:3d:b5:02:b0:
65:5f:bd:68:f7:22:a3:71:dd:55:fb:e7:a1:6b:a5:
6a:41:d6:0f:0b:3f:40:60:c0:56:26:2b:b9:af:a3:
f1:e0:0b:22:ac:39:1d:9c:54:07:33:30:0d:93:e4:
2b:f5:9c:fd:00:12:9c:7c:1e:22:8b:26:04:0c:fa:
44:55:ac:13:6e:76:a4:c6:8f:01:80:c5:0d:e0:6f:
be:73:a5:55:a8:34:82:63:6e:ef:d6:f3:e4:5e:8a:
d5:e8:d8:c5:56:2d:b1:f4:28:6e:1d:e3:79:d1:a2:
ba:a5:a0:b8:d3:36:27:39:15:17:67:74:50:e6:0d:
c5:9b:28:b9:72:0b:d9:d6:ff:9e:48:b3:25:9b:55:
28:1c:0e:57:df:33:96:53:2a:c0:3d:dc:98:ff:a6:
31:93:59:47:c6:4d:51:08:bb:0d:55:5f:78:27:08:
69:db:48:d1:e8:54:30:99:12:e8:f1:82:3d:07:8d:
44:28:59:97:b8:e1:80:a7:c4:be:c3:91:5a:a9:24:
f2:f0:4f:35:33:26:10:29:8d:b2:de:a5:d3:f3:67:
9d:8c:93:ac:3c:93:ac:b4:e5:89:15:54:e5:d5:5d:
ed:91:c0:04:0e:ad:3d:2c:5b:42:42:7d:12:0e:03:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DC:BE:7F:AC:30:BB:A0:27:CA:A3:57:B2:A4:01:04:1A:CB:79:65
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c6:58:18:20:c0:7c:79:bc:22:aa:f9:66:dc:79:f5:dd:2b:
19:cb:11:c8:7b:aa:94:6e:2b:ba:20:a0:7f:d3:34:6f:ad:8c:
a8:d4:87:81:ca:da:e8:4a:0c:2d:a7:eb:0d:09:18:8f:69:54:
09:8d:44:1b:d2:33:5a:ff:57:79:6a:25:1e:48:85:f3:87:48:
3d:78:d5:b1:27:a6:6a:54:38:32:05:bc:4c:9a:30:dc:7b:72:
e8:86:82:f8:3c:3a:46:ff:e3:03:a1:03:b4:bc:c2:3e:46:3c:
fd:52:af:04:33:28:67:f0:cd:cd:a5:68:6a:16:6e:b4:80:01:
ac:5f:44:41:71:c2:57:47:e4:4f:7f:14:1b:de:6b:f7:f9:c6:
cb:64:74:c9:62:06:54:f9:bd:a0:5b:25:49:2e:c2:6a:93:2c:
79:cd:e6:c0:8d:2d:23:82:69:b6:17:d4:d4:ed:44:15:bc:e9:
67:b3:62:bb:35:05:0d:76:37:ca:d2:52:99:34:71:6d:2e:79:
41:7b:78:66:66:3e:42:09:18:02:79:ac:de:79:18:ab:3d:7f:
29:1a:eb:5e:1d:84:31:6b:90:07:84:ad:6e:65:48:52:ef:aa:
b2:cc:a2:75:f5:22:cc:f6:11:07:6b:99:31:c1:3a:4c:70:ed:
93:03:48:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7TcGrmzSqG5KoN6FksuKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi
ZDNlYTgwHhcNMjYxMDI3MDMwMDU1WhcNMjYxMDI4MDMwMDU1WjAzMTEwLwYDVQQD
EygwZGRjYmU3ZmFjMzBiYmEwMjdjYWEzNTdiMmE0MDEwNDFhY2I3OTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjg1RkBxWkyghT21ArBlX71o9yKj
cd1V++eha6VqQdYPCz9AYMBWJiu5r6Px4AsirDkdnFQHMzANk+Qr9Zz9ABKcfB4i
iyYEDPpEVawTbnakxo8BgMUN4G++c6VVqDSCY27v1vPkXorV6NjFVi2x9ChuHeN5
0aK6paC40zYnORUXZ3RQ5g3Fmyi5cgvZ1v+eSLMlm1UoHA5X3zOWUyrAPdyY/6Yx
k1lHxk1RCLsNVV94Jwhp20jR6FQwmRLo8YI9B41EKFmXuOGAp8S+w5FaqSTy8E81
MyYQKY2y3qXT82edjJOsPJOstOWJFVTl1V3tkcAEDq09LFtCQn0SDgOv/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3cvn+sMLugJ8qjV7KkAQQay3llMB8GA1UdIwQY
MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt
NDc4YzJjOGNiMmEwLzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw
LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxcZYGCDA
fHm8Iqr5Ztx59d0rGcsRyHuqlG4ruiCgf9M0b62MqNSHgcra6EoMLafrDQkYj2lU
CY1EG9IzWv9XeWolHkiF84dIPXjVsSemalQ4MgW8TJow3Hty6IaC+Dw6Rv/jA6ED
tLzCPkY8/VKvBDMoZ/DNzaVoahZutIABrF9EQXHCV0fkT38UG95r9/nGy2R0yWIG
VPm9oFslSS7CapMsec3mwI0tI4JpthfU1O1EFbzpZ7NiuzUFDXY3ytJSmTRxbS55
QXt4ZmY+QgkYAnms3nkYqz1/KRrrXh2EMWuQB4StbmVIUu+qssyidfUizPYRB2uZ
McE6THDtkwNIdQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:48:46 2026 by rpki-client