Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
File: oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft (raw, json)
Hash identifier: ZCLotKfCToLv5wzsCzSO/XkWqaSNY4esJEiLEJ6AeBM=
Subject key identifier: D8:54:FD:5A:3E:1E:FB:0C:45:6F:C2:16:D9:02:73:7F:AF:7A:A3:60
Authority key identifier: A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
Certificate issuer: /CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Certificate serial: 01A17BBB8040C4E49B20007216C453474B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
Manifest number: 0293
Signing time: Tue 27 Oct 2026 05:00:47 +0000
Manifest this update: Tue 27 Oct 2026 05:00:47 +0000
Manifest next update: Wed 28 Oct 2026 05:00:47 +0000
Files and hashes: 1: Bl_J51ealE87PBDrcx3y2abYz_M.roa (hash: skpARlMkvLIJ9aXgoSnFArnzouHAgMx1Cjvtifcnmuo=)
2: oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl (hash: 9ukzp0Xij+ro5JLs1dYejZ8DWEc5pWOc/NnFnOoElT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:80:40:c4:e4:9b:20:00:72:16:c4:53:47:4b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Validity
Not Before: Oct 27 05:00:47 2026 GMT
Not After : Oct 28 05:00:47 2026 GMT
Subject: CN=d854fd5a3e1efb0c456fc216d902737faf7aa360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:89:97:b7:64:d9:7d:40:47:c2:7b:99:81:
5c:73:a6:f4:18:97:51:74:c8:74:ea:99:0e:42:05:
06:54:3c:63:8a:eb:86:b0:c1:18:2f:a6:04:07:85:
e6:4e:f6:85:85:6f:eb:ae:8f:de:37:3a:8b:a7:a5:
ca:f2:9b:24:90:14:cb:b2:4c:3e:e8:54:37:e2:71:
87:bd:a2:70:35:bf:20:4a:21:94:0f:0a:63:b9:3b:
e2:b9:77:a4:89:45:1d:15:66:66:b3:d9:dd:a9:de:
ff:2f:a4:62:56:67:6d:49:7e:c1:a4:6b:17:53:4c:
5b:cb:d1:76:99:01:94:18:fe:79:40:a5:7b:44:e7:
a6:8a:f9:94:20:76:5e:55:ad:fc:6f:db:6a:9a:8b:
2b:4a:81:ea:a4:6c:de:6c:a2:41:da:dc:ad:ac:eb:
58:bb:5c:60:03:29:54:ce:d9:51:e6:e9:46:21:26:
ef:c8:94:75:7d:f6:e5:0d:00:ec:62:9b:f9:a1:1e:
e4:cb:ba:bc:2e:4b:03:73:3d:ca:2a:e4:15:d9:f6:
f8:e8:6d:56:65:32:2f:69:eb:c5:28:5d:e0:55:c6:
9d:32:14:83:f4:c3:24:2f:8c:c7:33:7b:bc:8c:93:
3c:7e:89:a7:c5:70:13:4f:67:b0:90:cd:b9:9b:f0:
c1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:54:FD:5A:3E:1E:FB:0C:45:6F:C2:16:D9:02:73:7F:AF:7A:A3:60
X509v3 Authority Key Identifier:
keyid:A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:09:96:b9:a8:82:1f:03:05:c5:59:5c:8c:3c:b2:d1:f5:61:
ad:18:bb:23:e4:ee:59:bc:5b:28:70:e4:ff:52:98:d1:cd:3f:
99:cb:67:2c:b2:70:c7:48:d0:04:ad:fa:95:11:27:10:03:34:
0b:02:4c:02:01:e4:d4:ae:23:61:47:17:53:2d:43:82:e6:5c:
34:a2:6a:da:0b:45:40:5d:3e:2f:1d:5b:a0:bb:9f:a8:d8:4e:
00:ca:fe:0a:6e:69:b2:3e:f6:89:6e:65:81:9b:0f:7e:46:ae:
86:4d:4e:0c:8e:b3:11:a3:4a:30:52:de:9b:e6:27:37:fb:ab:
b7:00:5e:d8:35:cd:87:da:bc:14:e4:3f:48:ee:a3:4e:2c:a6:
cf:52:c1:16:f0:da:25:ce:1d:62:32:d9:07:b8:84:e1:60:81:
ae:55:b4:ea:03:62:ea:8b:07:3d:a1:88:92:e2:7d:19:a0:3f:
6b:b0:b8:dd:63:a6:c9:1e:ae:e9:26:fb:64:06:1c:d4:19:33:
98:54:6d:00:81:5d:ce:5e:31:0f:1b:9d:5b:3e:85:c2:2e:7d:
d1:ac:5d:29:50:de:3c:09:1f:ae:95:f2:f5:3f:e3:a4:3c:c1:
f3:f5:a5:23:76:ce:1e:92:91:3b:e9:61:70:22:dd:92:4b:bc:
de:21:00:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7u4BAxOSbIAByFsRTR0sjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMmUyNDE0M2NjYWM2ZmU3NTkzNWNjMTE3NDIyNTllN2Zm
ODU5OGIwHhcNMjYxMDI3MDUwMDQ3WhcNMjYxMDI4MDUwMDQ3WjAzMTEwLwYDVQQD
EyhkODU0ZmQ1YTNlMWVmYjBjNDU2ZmMyMTZkOTAyNzM3ZmFmN2FhMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzeJl7dk2X1AR8J7mYFcc6b0GJdR
dMh06pkOQgUGVDxjiuuGsMEYL6YEB4XmTvaFhW/rro/eNzqLp6XK8pskkBTLskw+
6FQ34nGHvaJwNb8gSiGUDwpjuTviuXekiUUdFWZms9ndqd7/L6RiVmdtSX7BpGsX
U0xby9F2mQGUGP55QKV7ROemivmUIHZeVa38b9tqmosrSoHqpGzebKJB2tytrOtY
u1xgAylUztlR5ulGISbvyJR1ffblDQDsYpv5oR7ky7q8LksDcz3KKuQV2fb46G1W
ZTIvaevFKF3gVcadMhSD9MMkL4zHM3u8jJM8fomnxXATT2ewkM25m/DBrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhU/Vo+HvsMRW/CFtkCc3+veqNgMB8GA1UdIwQY
MBaAFKEuJBQ8ysb+dZNcwRdCJZ5/+FmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1M0a0ZEekt4djUxazF6QkYwSWxubl80V1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hN2Q5ODEtYzYyZC00MWY5LTg5ODYt
ZjQ2ZDI0MzY0M2Y0LzEvb1M0a0ZEekt4djUxazF6QkYwSWxubl80V1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hN2Q5ODEtYzYyZC00MWY5LTg5ODYtZjQ2ZDI0MzY0M2Y0
LzEvb1M0a0ZEekt4djUxazF6QkYwSWxubl80V1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQmWuaiC
HwMFxVlcjDyy0fVhrRi7I+TuWbxbKHDk/1KY0c0/mctnLLJwx0jQBK36lREnEAM0
CwJMAgHk1K4jYUcXUy1DguZcNKJq2gtFQF0+Lx1boLufqNhOAMr+Cm5psj72iW5l
gZsPfkauhk1ODI6zEaNKMFLem+YnN/urtwBe2DXNh9q8FOQ/SO6jTiymz1LBFvDa
Jc4dYjLZB7iE4WCBrlW06gNi6osHPaGIkuJ9GaA/a7C43WOmyR6u6Sb7ZAYc1Bkz
mFRtAIFdzl4xDxudWz6Fwi590axdKVDePAkfrpXy9T/jpDzB8/WlI3bOHpKRO+lh
cCLdkku83iEAvA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 11:07:10 2026 by rpki-client