Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: uIu7oBCX3p72eYqcYvM4E1jvD3cfpaj67tdIA7HQMDk=
Subject key identifier: D8:14:28:CC:92:9C:77:8B:B9:03:E6:54:FD:0D:EF:B8:96:81:84:BF
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 01A1987C7917D1F060F289DC9085FB64E4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 0976
Signing time: Sun 01 Nov 2026 19:00:56 +0000
Manifest this update: Sun 01 Nov 2026 19:00:56 +0000
Manifest next update: Mon 02 Nov 2026 19:00:56 +0000
Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=)
2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=)
3: eecvom8n4JLtgexNM8fcFH7TdJ4.roa (hash: pycagWbNBnfHXrjwvzl2WdAFZyA61FbnnF3qHunocW4=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: Mx4dJQt6hAzFw0I37XkVhTp6hDnKeSNe5fRZFcAjHOs=)
5: qwOBehyl2ArKlDcUqnuz15D2V3o.roa (hash: IFFBPiiclpVpD4hJlfKSsFobwa+8GBAw1bD0iO0znDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:7c:79:17:d1:f0:60:f2:89:dc:90:85:fb:64:e4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Nov 1 19:00:56 2026 GMT
Not After : Nov 2 19:00:56 2026 GMT
Subject: CN=d81428cc929c778bb903e654fd0defb8968184bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:8d:93:72:9f:f7:55:c9:52:37:32:7f:2e:
08:13:8f:59:d5:60:78:fb:e8:fd:5e:f4:ac:bb:53:
0b:ba:2e:76:a5:72:7a:61:8a:13:b3:99:03:d6:f4:
c4:e5:96:36:a4:49:59:79:03:8e:56:fd:7b:be:cc:
f7:37:44:65:09:98:a3:55:e9:60:b8:b1:5d:53:21:
fd:d6:15:e5:2d:c2:c8:2c:54:17:c8:81:58:39:88:
26:e6:dc:00:59:19:91:8b:9d:46:28:40:6f:a3:6b:
1b:c8:68:fe:14:95:f2:c2:f1:04:cc:33:51:9b:38:
d6:cf:49:ce:41:eb:ce:0e:31:8b:f5:83:d1:4d:42:
e5:ee:99:30:3f:d5:12:0b:c3:ca:89:b4:c8:c4:e1:
5f:64:78:e7:9b:4f:ec:06:6d:60:be:7e:7d:07:0b:
11:3c:f5:47:90:bc:4c:ad:6e:07:48:1b:00:9d:d9:
a5:1a:a8:2c:f5:c3:23:e4:7d:fc:37:ec:ec:c2:15:
03:12:3b:83:aa:12:60:75:d2:63:0d:6b:a2:ba:54:
bb:1b:9f:9a:8a:c8:64:dd:40:aa:73:32:3b:5d:a3:
fc:a1:ba:23:fe:5d:35:e1:e7:51:04:be:fc:8a:2c:
9b:10:6a:b9:e3:3a:7e:1c:31:4d:d8:64:57:44:47:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:14:28:CC:92:9C:77:8B:B9:03:E6:54:FD:0D:EF:B8:96:81:84:BF
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b3:59:44:6e:06:7f:d8:0b:cf:40:cb:18:2e:d8:db:77:30:
2f:77:c2:7f:a1:7a:86:08:1a:de:8a:43:5d:f7:e1:14:ab:fc:
4a:4a:05:c3:e3:ab:b8:da:77:27:38:cf:13:ac:98:bc:f2:8a:
4f:24:00:bf:1a:97:cf:be:50:86:f5:d1:c3:8f:ad:3e:f1:38:
df:2c:b7:83:0e:90:90:e6:21:b4:41:df:58:76:79:8a:6b:39:
61:42:64:d6:b8:b3:84:05:97:c3:0b:75:18:d9:2e:b6:3b:0a:
59:22:70:a7:2b:57:40:79:c1:2b:c2:56:47:4a:7c:2c:2e:30:
d7:37:c6:b2:1f:3c:3f:01:f1:f8:ac:8b:dd:1f:7e:94:25:e2:
57:d0:02:2e:73:2e:1e:09:4d:f1:b1:ae:be:3a:c6:13:c8:66:
bd:55:7b:88:99:3f:aa:fa:09:b4:aa:2c:c3:d1:42:de:54:dc:
b8:1c:00:80:22:01:2f:94:7c:f5:0f:7d:93:ae:3f:83:8e:0d:
9a:9f:cb:79:8c:3f:3c:f0:d3:ca:c1:6c:c6:0f:93:34:e8:b2:
89:3d:a5:41:79:20:fe:68:20:45:f3:08:57:49:2f:f0:1d:6a:
3c:33:7b:e3:54:4e:6f:3b:c5:3b:bf:5a:eb:6a:c0:f7:9d:a1:
41:cf:7f:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGYfHkX0fBg8onckIX7ZOT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOWIyZDcwMjMzZTBlNWJkZWY2ZGJmYmRhOTE4ODZkMjdi
NmE1YWUwHhcNMjYxMTAxMTkwMDU2WhcNMjYxMTAyMTkwMDU2WjAzMTEwLwYDVQQD
EyhkODE0MjhjYzkyOWM3NzhiYjkwM2U2NTRmZDBkZWZiODk2ODE4NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4yNk3Kf91XJUjcyfy4IE49Z1WB4
++j9XvSsu1MLui52pXJ6YYoTs5kD1vTE5ZY2pElZeQOOVv17vsz3N0RlCZijVelg
uLFdUyH91hXlLcLILFQXyIFYOYgm5twAWRmRi51GKEBvo2sbyGj+FJXywvEEzDNR
mzjWz0nOQevODjGL9YPRTULl7pkwP9USC8PKibTIxOFfZHjnm0/sBm1gvn59BwsR
PPVHkLxMrW4HSBsAndmlGqgs9cMj5H38N+zswhUDEjuDqhJgddJjDWuiulS7G5+a
ishk3UCqczI7XaP8oboj/l014edRBL78iiybEGq54zp+HDFN2GRXREfVjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgUKMySnHeLuQPmVP0N77iWgYS/MB8GA1UdIwQY
MBaAFKGbLXAjPg5b3vbb+9qRiG0ntqWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUt
M2YxYTdjNGY1MWI1LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUtM2YxYTdjNGY1MWI1
LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibNZRG4G
f9gLz0DLGC7Y23cwL3fCf6F6hgga3opDXffhFKv8SkoFw+OruNp3JzjPE6yYvPKK
TyQAvxqXz75QhvXRw4+tPvE43yy3gw6QkOYhtEHfWHZ5ims5YUJk1rizhAWXwwt1
GNkutjsKWSJwpytXQHnBK8JWR0p8LC4w1zfGsh88PwHx+KyL3R9+lCXiV9ACLnMu
HglN8bGuvjrGE8hmvVV7iJk/qvoJtKosw9FC3lTcuBwAgCIBL5R89Q99k64/g44N
mp/LeYw/PPDTysFsxg+TNOiyiT2lQXkg/mggRfMIV0kv8B1qPDN741RObzvFO79a
62rA952hQc9/RQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 00:27:31 2026 by rpki-client