Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: 5DdRoNnseBlhvoF+X/4l8YjI0kfeR0lCjfJR6kYcz3k=
Subject key identifier: 10:0C:9F:78:B9:F7:2A:57:44:01:28:EA:09:6C:D4:21:DC:5E:63:B4
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 01A16A90CC268FDECE7580EB3C4C06DE47DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 1299
Signing time: Fri 23 Oct 2026 21:00:36 +0000
Manifest this update: Fri 23 Oct 2026 21:00:36 +0000
Manifest next update: Sat 24 Oct 2026 21:00:36 +0000
Files and hashes: 1: DWNbWLKsKUbayknrkxZPm_ru1rE.roa (hash: 0OEC7qPtd3MHFAia/7IsrfByY6Mlpa/bnminYQcTx14=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: XXm3zzw/lRpBXlBrWSV7RaZ3XR+4mSM0apIoz18BG6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:90:cc:26:8f:de:ce:75:80:eb:3c:4c:06:de:47:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Oct 23 21:00:36 2026 GMT
Not After : Oct 24 21:00:36 2026 GMT
Subject: CN=100c9f78b9f72a57440128ea096cd421dc5e63b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b2:2c:20:14:13:a3:49:24:aa:47:3b:c4:dd:
6e:0f:49:af:c8:a8:ee:4a:00:2c:ac:fb:c2:77:6d:
ab:28:ab:17:13:83:13:67:82:37:99:dc:06:3f:55:
42:78:80:1c:d6:60:4b:1e:b3:e3:8d:55:de:b2:e2:
3f:9f:29:db:93:39:87:32:35:39:a8:12:8b:60:dd:
ea:99:fb:e1:ce:6e:f0:29:21:48:ca:76:b0:c8:a7:
26:68:0d:bc:55:d3:c7:dd:b7:79:0e:af:64:c2:fa:
da:86:c2:a0:6d:d0:02:1e:e8:33:8e:91:b9:5e:f8:
26:29:f9:34:54:ad:cc:6c:6b:0e:3e:2d:e4:8a:df:
e5:fa:6e:5e:7c:ae:ba:a2:7f:e3:1d:bb:e3:8f:96:
c1:1e:dd:98:4d:06:2c:32:e0:77:ea:e0:b8:5f:f0:
08:fc:a5:e4:c1:4f:c8:62:af:b9:fb:66:1e:e5:28:
15:5d:a2:44:10:c3:56:64:02:11:ec:e3:38:a2:64:
b2:73:54:69:8e:89:90:e0:1e:72:98:ec:13:30:61:
c4:89:a1:ea:a1:08:17:bd:41:ff:0a:54:37:69:f9:
d9:c4:f4:5c:10:c7:56:0c:d0:2c:2f:b6:91:6d:f4:
a9:49:a7:84:14:ff:3d:6d:80:18:2b:94:a5:49:88:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0C:9F:78:B9:F7:2A:57:44:01:28:EA:09:6C:D4:21:DC:5E:63:B4
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8e:fe:7b:68:6a:db:02:31:25:f1:65:75:c4:88:ce:11:38:
d0:4e:67:0e:2e:83:1d:c0:22:2c:0b:5a:e5:fb:84:bb:13:1e:
bf:ee:fe:44:64:b8:fb:6d:6f:0d:ae:c4:3f:b8:49:0d:44:32:
6e:8f:1d:44:17:0d:c0:3c:6d:ed:58:bf:8c:2c:a3:0e:17:09:
40:54:f6:a3:67:a8:a5:42:c2:ee:eb:f6:29:a7:d3:0b:21:69:
c0:f4:f6:49:31:66:0a:84:2b:67:e1:f8:77:4c:78:5c:d0:c6:
8e:db:f7:7b:ec:cd:f2:80:87:82:cd:6f:53:9b:82:cf:0b:0f:
b8:9c:ba:03:d6:97:0c:2e:f5:6e:75:25:35:e7:9b:7c:41:ee:
01:79:de:6b:e0:c7:95:55:74:19:f2:7c:06:05:ac:0c:fc:8b:
26:ad:58:36:58:0a:03:31:2c:82:af:80:60:25:85:79:d1:62:
9b:30:95:63:82:05:a7:d6:23:cd:ee:a1:74:19:b7:03:a0:c3:
92:0a:d5:61:94:7f:60:b0:ef:ba:2a:46:a4:2d:2c:3c:c2:ee:
6b:d0:ac:ba:61:49:fd:0c:6d:bb:4f:f5:15:04:13:11:39:e6:
c8:8b:5e:7a:db:bd:c7:bb:f1:e3:80:22:13:25:92:65:ca:4a:
2f:be:2c:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFqkMwmj97OdYDrPEwG3kfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYWUzNTY5Njg5ZmY1NDJhOTExZDcwOThiODI0NjZlNmVh
OWZjODUwHhcNMjYxMDIzMjEwMDM2WhcNMjYxMDI0MjEwMDM2WjAzMTEwLwYDVQQD
EygxMDBjOWY3OGI5ZjcyYTU3NDQwMTI4ZWEwOTZjZDQyMWRjNWU2M2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LIsIBQTo0kkqkc7xN1uD0mvyKju
SgAsrPvCd22rKKsXE4MTZ4I3mdwGP1VCeIAc1mBLHrPjjVXesuI/nynbkzmHMjU5
qBKLYN3qmfvhzm7wKSFIynawyKcmaA28VdPH3bd5Dq9kwvrahsKgbdACHugzjpG5
XvgmKfk0VK3MbGsOPi3kit/l+m5efK66on/jHbvjj5bBHt2YTQYsMuB36uC4X/AI
/KXkwU/IYq+5+2Ye5SgVXaJEEMNWZAIR7OM4omSyc1RpjomQ4B5ymOwTMGHEiaHq
oQgXvUH/ClQ3afnZxPRcEMdWDNAsL7aRbfSpSaeEFP89bYAYK5SlSYjX7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAMn3i59ypXRAEo6gls1CHcXmO0MB8GA1UdIwQY
MBaAFKKuNWlon/VCqRHXCYuCRm5uqfyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUt
NmVhNWQ4Yjc1NDExLzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUtNmVhNWQ4Yjc1NDEx
LzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMY7+e2hq
2wIxJfFldcSIzhE40E5nDi6DHcAiLAta5fuEuxMev+7+RGS4+21vDa7EP7hJDUQy
bo8dRBcNwDxt7Vi/jCyjDhcJQFT2o2eopULC7uv2KafTCyFpwPT2STFmCoQrZ+H4
d0x4XNDGjtv3e+zN8oCHgs1vU5uCzwsPuJy6A9aXDC71bnUlNeebfEHuAXnea+DH
lVV0GfJ8BgWsDPyLJq1YNlgKAzEsgq+AYCWFedFimzCVY4IFp9Yjze6hdBm3A6DD
kgrVYZR/YLDvuipGpC0sPMLua9CsumFJ/Qxtu0/1FQQTETnmyIteetu9x7vx44Ai
EyWSZcpKL74sEQ==
-----END CERTIFICATE-----
Generated at Sat Oct 24 00:00:34 2026 by rpki-client