Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File: oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier: SXK9QAu3dyuS+5YVJgD8GLtHpaA/m9kXCgXUVhrUFXk=
Subject key identifier: 20:C8:F2:77:78:DB:80:7D:68:69:6B:9E:2F:08:26:31:7A:89:A0:E0
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 01A091D7E0597069B6B357F8026863A256AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number: 1A59
Signing time: Fri 11 Sep 2026 19:00:38 +0000
Manifest this update: Fri 11 Sep 2026 19:00:38 +0000
Manifest next update: Sat 12 Sep 2026 19:00:38 +0000
Files and hashes: 1: eH9pN3T8uZtfjzNIHm2QIWz86JU.roa (hash: 6WTiCPJHOrzizrSNq8riDUFegfS58h7BM9hToFWx7eQ=)
2: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: yrSdOXOPdFhZzUCuKeTuLQ3MPjTD9jsnieLjcB939kc=)
3: rrDoPtBcmYrtFsSBQoQOi4LhCEs.roa (hash: 6GGMw5jhv2E0iY7GXeItoH474mvVadIlFXmHfEnSu/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:d7:e0:59:70:69:b6:b3:57:f8:02:68:63:a2:56:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Sep 11 19:00:38 2026 GMT
Not After : Sep 12 19:00:38 2026 GMT
Subject: CN=20c8f27778db807d68696b9e2f0826317a89a0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:fc:ee:be:5c:5d:12:d2:d8:47:19:e7:55:
5e:c3:98:2e:2a:a9:7a:33:8e:f1:ef:8d:f2:c4:a9:
a3:9f:47:1b:d7:d6:44:ab:a3:f8:c4:5f:49:44:11:
17:e7:01:24:46:b2:da:64:92:cf:0e:50:af:07:a3:
b3:f8:29:a1:56:68:89:e3:3a:94:e4:1d:6e:b6:c0:
f4:ec:3b:a8:92:30:ad:63:87:68:20:6c:9e:e8:e7:
1c:7f:a4:a2:25:e8:03:da:8f:72:0c:9f:bc:74:95:
c9:0e:a0:cb:e6:89:b0:46:20:a3:e8:9c:43:6c:7c:
8e:01:90:70:91:19:83:51:c5:89:f2:a6:1a:fb:c2:
12:f5:16:0b:dc:15:be:58:9b:b5:e2:0b:99:1f:13:
e4:7a:67:8b:52:f5:71:3c:d9:ef:e1:e7:c7:b9:31:
87:72:16:aa:df:45:22:b8:94:f3:82:72:74:3b:88:
df:ff:9b:6d:23:a3:98:13:bf:2e:8c:21:f5:fe:1f:
77:f5:b4:13:30:cc:4a:5e:aa:01:47:a9:43:3d:58:
a6:75:02:c5:e3:8c:4c:e8:83:59:b7:43:5b:53:c2:
b0:92:c7:65:b1:91:8f:a9:39:05:15:70:aa:0c:b3:
e4:d7:85:26:fe:f2:3e:ef:31:32:b6:30:e6:15:db:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C8:F2:77:78:DB:80:7D:68:69:6B:9E:2F:08:26:31:7A:89:A0:E0
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9d:fa:8e:70:18:0d:ac:b7:af:d8:7e:87:1c:85:8e:54:3d:
77:9c:e7:38:4b:da:7c:e7:03:e2:2b:60:e5:ef:83:20:05:39:
1d:66:dd:3b:e6:00:54:e7:91:1e:20:ab:99:55:bf:ca:b8:dd:
9d:43:15:2d:b2:45:10:34:7c:ee:ac:cc:17:d1:cc:db:a4:f3:
05:b1:8f:01:82:1d:b2:50:af:e2:1d:a7:01:70:ca:a4:45:34:
f5:42:26:63:b0:ac:96:9e:1a:5c:00:5d:e6:e0:68:6d:ac:da:
d7:69:04:e6:25:29:f6:73:6b:2e:e7:31:f5:c1:41:d8:05:67:
af:f9:f8:42:70:a4:1f:5e:e8:35:45:78:9d:19:ff:f6:ad:19:
8a:13:04:90:54:17:8f:c6:7f:96:e9:42:a0:5e:22:e5:47:03:
ca:f8:d7:68:93:d1:4a:e1:f4:72:7e:70:90:97:4b:06:e5:e0:
ec:d0:ea:58:b6:0d:ff:e6:5c:91:11:8a:05:aa:d7:d8:11:98:
a3:77:9b:d3:54:49:28:9e:ec:99:b5:03:4f:2f:de:da:db:f8:
66:df:f7:1e:c4:b5:ea:dc:f9:9c:7b:54:0f:f0:ff:2f:e4:c9:
2e:d5:3e:a2:d9:aa:b4:7d:c9:25:cf:f6:e7:41:25:0a:22:cc:
df:df:92:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCR1+BZcGm2s1f4AmhjolatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNmIwZDhhYjQ5NDM2NTUwYjZhYmY0NWI3OTAzNWFlYzZh
ZmYyM2MwHhcNMjYwOTExMTkwMDM4WhcNMjYwOTEyMTkwMDM4WjAzMTEwLwYDVQQD
EygyMGM4ZjI3Nzc4ZGI4MDdkNjg2OTZiOWUyZjA4MjYzMTdhODlhMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtob87r5cXRLS2EcZ51Vew5guKql6
M47x743yxKmjn0cb19ZEq6P4xF9JRBEX5wEkRrLaZJLPDlCvB6Oz+CmhVmiJ4zqU
5B1utsD07DuokjCtY4doIGye6Occf6SiJegD2o9yDJ+8dJXJDqDL5omwRiCj6JxD
bHyOAZBwkRmDUcWJ8qYa+8IS9RYL3BW+WJu14guZHxPkemeLUvVxPNnv4efHuTGH
chaq30UiuJTzgnJ0O4jf/5ttI6OYE78ujCH1/h939bQTMMxKXqoBR6lDPVimdQLF
44xM6INZt0NbU8KwksdlsZGPqTkFFXCqDLPk14Um/vI+7zEytjDmFdvoOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDI8nd424B9aGlrni8IJjF6iaDgMB8GA1UdIwQY
MBaAFKFrDYq0lDZVC2q/RbeQNa7Gr/I8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81ZjQ1MTgtODJlOS00MjkyLWE1NGUt
MTVjYzlkYzdiZDg3LzEvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81ZjQ1MTgtODJlOS00MjkyLWE1NGUtMTVjYzlkYzdiZDg3
LzEvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR536jnAY
Day3r9h+hxyFjlQ9d5znOEvafOcD4itg5e+DIAU5HWbdO+YAVOeRHiCrmVW/yrjd
nUMVLbJFEDR87qzMF9HM26TzBbGPAYIdslCv4h2nAXDKpEU09UImY7Cslp4aXABd
5uBobaza12kE5iUp9nNrLucx9cFB2AVnr/n4QnCkH17oNUV4nRn/9q0ZihMEkFQX
j8Z/lulCoF4i5UcDyvjXaJPRSuH0cn5wkJdLBuXg7NDqWLYN/+ZckRGKBarX2BGY
o3eb01RJKJ7smbUDTy/e2tv4Zt/3HsS16tz5nHtUD/D/L+TJLtU+otmqtH3JJc/2
50ElCiLM39+SkQ==
-----END CERTIFICATE-----
Generated at Sat Sep 12 00:54:28 2026 by rpki-client