Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: zwX+RooF2qPK4FyVqyl5zop5XuhVKD65yMcQuJ4pzaM=
Subject key identifier: E6:75:A5:34:11:88:F2:83:CF:8A:89:E3:80:FB:3A:98:6F:46:9F:F3
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 01A08C0DA8B8601E78E6E0A905A1C2F6A9C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 1791
Signing time: Thu 10 Sep 2026 16:01:40 +0000
Manifest this update: Thu 10 Sep 2026 16:01:40 +0000
Manifest next update: Fri 11 Sep 2026 16:01:40 +0000
Files and hashes: 1: P8plIkyK6-WuYhWZxeWDqVB7a_c.roa (hash: gqqEmeyJKHVYzAhKUFpmuQoKv1vSqMH75dr97tljCyo=)
2: ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa (hash: /95XUisimBxRniA8xsATdtoTuinBvyYV4aukwLkPKtI=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: l/MsA+xmNdbqir5CahlUVyAhlHfwLv1rpHVFp4g5etk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:a8:b8:60:1e:78:e6:e0:a9:05:a1:c2:f6:a9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Sep 10 16:01:40 2026 GMT
Not After : Sep 11 16:01:40 2026 GMT
Subject: CN=e675a5341188f283cf8a89e380fb3a986f469ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:cc:5f:7a:d9:a3:eb:19:74:db:24:15:ed:
7f:9f:6e:f3:4d:13:fc:2c:69:af:a4:ce:a0:69:d6:
d1:d8:ec:67:20:5b:11:b2:6f:f1:fd:b4:d7:33:18:
cc:24:84:ca:9d:ce:44:9f:73:1a:bb:55:bb:73:b8:
55:c0:f1:22:df:07:72:1c:be:55:34:db:5d:90:14:
99:71:a1:da:34:db:2a:de:ad:22:1c:80:50:e9:c1:
44:20:e3:81:55:d0:12:26:5a:51:19:09:7a:c6:ae:
28:6c:c4:e9:fd:63:79:34:7a:98:98:c7:aa:78:54:
bf:0d:d2:07:0e:c1:45:47:bc:38:cc:e1:1b:83:62:
ae:78:6b:d9:f3:cd:32:5c:db:65:26:59:2f:80:d3:
69:ba:a0:29:6d:f1:e9:87:f1:6c:32:8c:dd:e2:28:
9c:9e:dc:32:71:7d:55:ea:11:d1:a0:cb:83:bb:f7:
22:56:df:46:0f:97:ec:c3:54:8d:a8:28:42:22:cf:
01:54:a5:25:d0:f6:ce:b1:5a:dc:21:30:66:2e:1e:
79:ba:ba:b1:fb:a8:88:24:2b:95:ed:69:14:cc:6d:
9d:bd:4e:fa:91:78:a8:16:aa:22:39:09:4e:09:9d:
5a:ef:ad:c6:d4:61:05:00:33:df:58:6f:a1:13:07:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:75:A5:34:11:88:F2:83:CF:8A:89:E3:80:FB:3A:98:6F:46:9F:F3
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a7:a3:4f:21:3d:bb:53:63:9f:80:76:bf:64:ab:34:e2:fe:
8d:c8:62:aa:b2:8c:5d:b8:19:e7:a2:ed:01:a7:e5:02:46:d7:
28:5f:52:f1:57:d5:6e:68:f2:ee:57:8e:a1:7c:57:bc:20:48:
57:e8:3a:43:6d:c3:4d:b8:5c:77:1a:63:fb:60:e5:8b:9a:90:
1c:38:9c:39:2e:2d:ff:7b:e9:6d:4d:bc:e8:e1:eb:24:e5:49:
b4:38:90:36:7c:3a:b8:c3:f2:48:eb:79:05:c1:fe:26:a5:c1:
98:ef:14:cc:44:54:b4:31:1c:9a:76:5a:d4:c6:e5:7a:45:24:
1b:87:0c:10:b9:84:09:91:c8:20:97:ae:de:31:de:b6:b2:27:
d6:33:7a:54:ae:32:42:ad:df:f3:70:cb:86:e5:f6:6c:7f:14:
00:46:0c:12:70:b7:f1:c2:4d:cd:5e:90:dc:74:d9:a5:02:34:
62:aa:18:49:3c:7f:67:86:ba:a8:60:54:75:fb:66:3c:8c:be:
32:9a:56:40:0f:8a:39:b2:92:e3:b7:45:64:66:6b:37:92:a6:
eb:b6:89:89:85:29:23:9b:62:ef:01:5a:0d:21:25:a1:b2:11:
08:e3:ef:57:65:69:7b:9d:3b:8c:3a:d6:ec:82:1f:6d:86:ed:
07:b3:63:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDai4YB545uCpBaHC9qnEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1
ZGY1MTQwHhcNMjYwOTEwMTYwMTQwWhcNMjYwOTExMTYwMTQwWjAzMTEwLwYDVQQD
EyhlNjc1YTUzNDExODhmMjgzY2Y4YTg5ZTM4MGZiM2E5ODZmNDY5ZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR/MX3rZo+sZdNskFe1/n27zTRP8
LGmvpM6gadbR2OxnIFsRsm/x/bTXMxjMJITKnc5En3Mau1W7c7hVwPEi3wdyHL5V
NNtdkBSZcaHaNNsq3q0iHIBQ6cFEIOOBVdASJlpRGQl6xq4obMTp/WN5NHqYmMeq
eFS/DdIHDsFFR7w4zOEbg2KueGvZ880yXNtlJlkvgNNpuqApbfHph/FsMozd4iic
ntwycX1V6hHRoMuDu/ciVt9GD5fsw1SNqChCIs8BVKUl0PbOsVrcITBmLh55urqx
+6iIJCuV7WkUzG2dvU76kXioFqoiOQlOCZ1a763G1GEFADPfWG+hEwcC6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZ1pTQRiPKDz4qJ44D7OphvRp/zMB8GA1UdIwQY
MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt
MTRjNTkwZmVjN2UzLzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz
LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqejTyE9
u1Njn4B2v2SrNOL+jchiqrKMXbgZ56LtAaflAkbXKF9S8VfVbmjy7leOoXxXvCBI
V+g6Q23DTbhcdxpj+2Dli5qQHDicOS4t/3vpbU286OHrJOVJtDiQNnw6uMPySOt5
BcH+JqXBmO8UzERUtDEcmnZa1MblekUkG4cMELmECZHIIJeu3jHetrIn1jN6VK4y
Qq3f83DLhuX2bH8UAEYMEnC38cJNzV6Q3HTZpQI0YqoYSTx/Z4a6qGBUdftmPIy+
MppWQA+KObKS47dFZGZrN5Km67aJiYUpI5ti7wFaDSElobIRCOPvV2Vpe507jDrW
7IIfbYbtB7NjOg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:15:25 2026 by rpki-client