Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier: 84a7MJFigbgJiTipwlmP7403M0qe/I94hhN2CHL9o9I=
Subject key identifier: BD:1E:4B:86:8C:31:55:DF:BD:FA:79:29:AC:07:B0:F4:50:6F:EE:88
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial: 01A178F15C4D27F8C53C54BA128252CDA03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number: 0C96
Signing time: Mon 26 Oct 2026 16:00:45 +0000
Manifest this update: Mon 26 Oct 2026 16:00:45 +0000
Manifest next update: Tue 27 Oct 2026 16:00:45 +0000
Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: 6ygRRnt9SzwaqrfKKzk3dq8yDB0RnSxjtz77iRVctck=)
2: rTTUeShcOXNB_38gPBfANBYb9Rg.roa (hash: SNHTIMM1yFWrTxfEjv177J1xrcwVvQjJHLgNi04rw5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:5c:4d:27:f8:c5:3c:54:ba:12:82:52:cd:a0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Validity
Not Before: Oct 26 16:00:45 2026 GMT
Not After : Oct 27 16:00:45 2026 GMT
Subject: CN=bd1e4b868c3155dfbdfa7929ac07b0f4506fee88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:37:18:56:4e:da:d2:92:78:50:62:4f:58:
84:be:df:ac:4a:6c:cf:6a:05:1e:ea:fe:7e:7d:83:
24:6b:5a:2c:1d:e2:ee:d6:99:ce:37:96:26:9d:79:
91:27:2e:2d:46:bd:9b:d5:29:59:dc:dd:48:a8:6a:
01:70:db:0f:57:94:66:12:db:78:8f:ac:b5:75:46:
3d:f4:f4:0d:04:c8:ea:89:f1:45:54:72:bf:dc:93:
a2:da:6d:90:c6:c5:1e:a1:5a:ee:ad:1c:d2:ef:da:
96:3b:ea:6f:0f:e2:f7:f9:bd:8e:29:97:b4:7f:08:
86:ab:1b:e0:e9:fe:67:70:46:32:77:e7:ac:76:05:
76:cc:0a:39:43:5e:1d:c8:ef:00:b4:2a:56:23:40:
6f:ef:94:c2:8a:3a:b2:07:e5:80:7f:73:fa:2b:6c:
46:b2:9c:06:df:c8:67:d6:ef:1c:1d:35:c9:dd:c4:
89:35:2b:a0:c2:d9:3d:03:15:ed:b8:28:db:a7:04:
42:38:d6:cd:f1:e3:44:4d:9f:7d:f7:9a:2f:11:4f:
ff:08:00:be:5c:ae:3a:e5:f7:56:31:7e:18:1c:04:
7d:5c:d8:c6:23:da:fa:ee:4e:ed:9b:31:26:f1:f1:
16:65:46:e9:23:6f:da:93:7f:89:a7:4f:e8:5b:05:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1E:4B:86:8C:31:55:DF:BD:FA:79:29:AC:07:B0:F4:50:6F:EE:88
X509v3 Authority Key Identifier:
keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:10:53:11:40:54:d3:e4:2a:5a:f8:4d:d3:38:6f:bf:4e:16:
67:4b:a8:b6:00:07:4c:05:1f:13:fc:77:60:ce:3a:48:fe:b9:
48:50:8d:b9:fc:7c:90:d3:1e:6c:5d:4f:f1:91:41:e9:45:95:
c8:45:dd:6b:8a:71:ba:2b:e2:ca:b5:a2:93:e5:e0:ac:ed:47:
2a:68:94:e5:cd:4d:e9:80:15:31:73:65:ae:21:c8:21:13:a0:
db:91:7d:be:39:3a:69:9e:f9:96:fc:50:67:fd:5f:ae:0f:bf:
bd:32:8b:51:5c:23:da:fd:92:70:ff:3c:a1:39:a3:70:c9:ff:
82:4b:b4:b6:fb:20:17:95:57:5b:04:47:03:3b:7d:a6:e3:f1:
63:ab:e5:c2:9a:ec:95:5e:99:33:5b:f2:8d:e5:a7:83:72:c9:
2e:21:51:76:e4:6f:f5:68:24:b6:e9:46:21:c5:4d:89:78:2f:
6c:8a:4c:00:59:d2:ec:b3:c7:ba:40:ad:5d:fd:0f:75:0c:e9:
13:d8:be:d6:eb:c7:2f:9a:ff:83:96:4c:e9:d2:52:0d:d1:93:
fc:1d:a5:bb:7a:31:bf:ca:c0:fc:dd:74:d1:56:93:e1:4d:fe:
20:9a:33:9a:1e:1d:96:a6:4e:76:2f:1f:97:1b:d1:ed:73:ed:
ef:d0:b0:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF48VxNJ/jFPFS6EoJSzaA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMmU2MWIxZGRjODFkYzRmMzM4YTY4OWZlYmQ4ZGZkZGI0
NGJmNDQwHhcNMjYxMDI2MTYwMDQ1WhcNMjYxMDI3MTYwMDQ1WjAzMTEwLwYDVQQD
EyhiZDFlNGI4NjhjMzE1NWRmYmRmYTc5MjlhYzA3YjBmNDUwNmZlZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKY3GFZO2tKSeFBiT1iEvt+sSmzP
agUe6v5+fYMka1osHeLu1pnON5YmnXmRJy4tRr2b1SlZ3N1IqGoBcNsPV5RmEtt4
j6y1dUY99PQNBMjqifFFVHK/3JOi2m2QxsUeoVrurRzS79qWO+pvD+L3+b2OKZe0
fwiGqxvg6f5ncEYyd+esdgV2zAo5Q14dyO8AtCpWI0Bv75TCijqyB+WAf3P6K2xG
spwG38hn1u8cHTXJ3cSJNSugwtk9AxXtuCjbpwRCONbN8eNETZ9995ovEU//CAC+
XK465fdWMX4YHAR9XNjGI9r67k7tmzEm8fEWZUbpI2/ak3+Jp0/oWwXW4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0eS4aMMVXfvfp5KawHsPRQb+6IMB8GA1UdIwQY
MBaAFKIuYbHdyB3E8zimif69jf3bRL9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTNlZGQtYTgwNy00NWE1LTg3MTkt
N2JhYmEyOTczNzQ2LzEvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kOTNlZGQtYTgwNy00NWE1LTg3MTktN2JhYmEyOTczNzQ2
LzEvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRBTEUBU
0+QqWvhN0zhvv04WZ0uotgAHTAUfE/x3YM46SP65SFCNufx8kNMebF1P8ZFB6UWV
yEXda4pxuiviyrWik+XgrO1HKmiU5c1N6YAVMXNlriHIIROg25F9vjk6aZ75lvxQ
Z/1frg+/vTKLUVwj2v2ScP88oTmjcMn/gku0tvsgF5VXWwRHAzt9puPxY6vlwprs
lV6ZM1vyjeWng3LJLiFRduRv9WgktulGIcVNiXgvbIpMAFnS7LPHukCtXf0PdQzp
E9i+1uvHL5r/g5ZM6dJSDdGT/B2lu3oxv8rA/N100VaT4U3+IJozmh4dlqZOdi8f
lxvR7XPt79Cwiw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:09:34 2026 by rpki-client