Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: ARuWX399HmCmzmGr3K2Ns55PjkSxyHYJABrrTBP8uKw=
Subject key identifier: 62:4D:68:72:1C:01:67:EC:37:5B:B2:27:D7:C3:3D:5D:39:AF:5D:8D
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 01A1032471DB2828AFFA4514A015857E428E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 055F
Signing time: Sat 03 Oct 2026 19:01:22 +0000
Manifest this update: Sat 03 Oct 2026 19:01:22 +0000
Manifest next update: Sun 04 Oct 2026 19:01:22 +0000
Files and hashes: 1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: /OTMZsSeItldX9dskU2qRLflHXD6PWP068SX5KjegbQ=)
3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:71:db:28:28:af:fa:45:14:a0:15:85:7e:42:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Oct 3 19:01:22 2026 GMT
Not After : Oct 4 19:01:22 2026 GMT
Subject: CN=624d68721c0167ec375bb227d7c33d5d39af5d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:2d:97:58:26:39:0e:51:00:1d:78:c0:15:
6c:de:95:24:1a:84:11:3f:d4:d4:41:6f:71:25:01:
04:36:3e:49:86:fb:80:c6:00:a2:44:1e:88:66:8b:
fb:01:1c:c6:17:ec:10:59:f8:83:16:bb:df:60:87:
32:49:5e:80:4e:4d:68:41:14:68:8b:67:31:84:4b:
5c:10:91:90:d8:11:96:2c:0a:f3:a4:5d:b0:54:8a:
93:c7:1d:33:40:43:0b:86:5a:6c:29:f8:8e:d5:e6:
b2:b5:f4:ed:f9:d3:5c:4a:ca:20:75:13:53:07:87:
69:d8:0f:98:97:ab:49:c9:41:47:a4:c1:74:45:d0:
5e:fc:f4:64:e2:4e:0f:39:62:2b:f8:3b:ed:8f:77:
0a:26:b9:e7:8b:e3:2b:b6:71:81:43:f3:80:9b:49:
aa:40:e0:14:ab:c2:35:24:b8:2c:ef:f7:59:b3:45:
be:d7:73:c5:f4:90:6a:77:6e:23:84:dd:d8:df:6a:
ee:fd:f7:d6:8b:41:f5:2c:ce:22:09:46:d6:aa:eb:
b0:0e:ee:cd:f2:68:b5:21:74:8f:76:1c:c1:e4:af:
0f:4e:ca:0a:63:6c:39:ad:60:7c:48:ac:cc:cc:59:
96:ae:18:98:8e:c6:6f:40:5c:62:3c:43:15:3c:09:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4D:68:72:1C:01:67:EC:37:5B:B2:27:D7:C3:3D:5D:39:AF:5D:8D
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ce:93:d2:d8:af:43:8b:45:cb:43:ae:8b:c2:dd:14:03:42:
fc:96:aa:65:e3:8e:77:08:5f:c7:5b:80:b6:20:70:f1:5e:89:
10:fa:7f:47:6a:55:7a:91:11:05:cb:80:b7:ab:b0:46:73:18:
9d:5a:47:99:1f:12:9c:47:82:43:fc:da:3d:cd:1e:8e:e4:5b:
30:c7:57:bb:ac:cf:bd:40:22:cf:c6:a8:d3:b0:cc:13:c0:79:
1d:a1:83:5e:1a:e7:66:5e:f8:73:a9:a6:0d:55:07:dd:e0:7e:
e5:31:e7:06:03:2b:ad:37:c6:59:52:f4:6b:6c:9b:eb:87:ca:
f0:c3:b4:2f:61:9b:76:d8:c2:23:2d:c7:e5:27:0e:a7:45:31:
d6:5c:d7:5e:ad:e3:d1:a6:f3:f0:f0:f0:1d:08:9d:0b:a3:a6:
ab:06:51:26:24:e6:15:4e:0d:bd:23:ca:85:08:52:22:97:9c:
06:ae:3c:f0:09:ca:d0:03:c0:35:91:4a:0e:f9:d9:c2:8e:c0:
b4:e8:fd:51:45:e0:0a:6b:b9:33:e1:00:0a:2b:bb:9f:43:2c:
8b:f0:fc:03:11:b6:8b:82:d5:4f:4d:f8:22:b8:ab:2a:17:63:
92:a6:f5:67:60:fb:e6:09:61:a8:4f:65:09:a7:0d:ca:3b:d0:
f2:ce:2b:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDJHHbKCiv+kUUoBWFfkKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOGYwMmQ1ZWJjOWU4Yjk1MjFhZjcxMzJiMTJjYjZiYjY1
NjkzYzYwHhcNMjYxMDAzMTkwMTIyWhcNMjYxMDA0MTkwMTIyWjAzMTEwLwYDVQQD
Eyg2MjRkNjg3MjFjMDE2N2VjMzc1YmIyMjdkN2MzM2Q1ZDM5YWY1ZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt8tl1gmOQ5RAB14wBVs3pUkGoQR
P9TUQW9xJQEENj5JhvuAxgCiRB6IZov7ARzGF+wQWfiDFrvfYIcySV6ATk1oQRRo
i2cxhEtcEJGQ2BGWLArzpF2wVIqTxx0zQEMLhlpsKfiO1eaytfTt+dNcSsogdRNT
B4dp2A+Yl6tJyUFHpMF0RdBe/PRk4k4POWIr+Dvtj3cKJrnni+MrtnGBQ/OAm0mq
QOAUq8I1JLgs7/dZs0W+13PF9JBqd24jhN3Y32ru/ffWi0H1LM4iCUbWquuwDu7N
8mi1IXSPdhzB5K8PTsoKY2w5rWB8SKzMzFmWrhiYjsZvQFxiPEMVPAnHQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJNaHIcAWfsN1uyJ9fDPV05r12NMB8GA1UdIwQY
MBaAFKGPAtXryei5Uhr3EysSy2u2VpPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2Et
NzM5NmU0MmIxODMwLzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2EtNzM5NmU0MmIxODMw
LzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOc6T0tiv
Q4tFy0Oui8LdFANC/JaqZeOOdwhfx1uAtiBw8V6JEPp/R2pVepERBcuAt6uwRnMY
nVpHmR8SnEeCQ/zaPc0ejuRbMMdXu6zPvUAiz8ao07DME8B5HaGDXhrnZl74c6mm
DVUH3eB+5THnBgMrrTfGWVL0a2yb64fK8MO0L2GbdtjCIy3H5ScOp0Ux1lzXXq3j
0abz8PDwHQidC6OmqwZRJiTmFU4NvSPKhQhSIpecBq488AnK0APANZFKDvnZwo7A
tOj9UUXgCmu5M+EACiu7n0Msi/D8AxG2i4LVT034IrirKhdjkqb1Z2D75glhqE9l
CacNyjvQ8s4rVA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:52:14 2026 by rpki-client