Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
File: oL_QbOhVti2baIzYxTXV9JTNOTI.mft (raw, json)
Hash identifier: iGy4J3g7Y6LHbJeVDYM1ScpalhLE6HFrQINV8WEio14=
Subject key identifier: E1:85:CB:DA:CF:67:C2:7C:1D:39:4C:BF:0F:E1:13:EA:CB:BC:95:94
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 01A17E85BCD25BFA937A1465A086916F678B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
Manifest number: 1ACD
Signing time: Tue 27 Oct 2026 18:00:56 +0000
Manifest this update: Tue 27 Oct 2026 18:00:56 +0000
Manifest next update: Wed 28 Oct 2026 18:00:56 +0000
Files and hashes: 1: LKfnJFP3stLPWkjsWhakvnaxplg.roa (hash: 3FNKamFL0cuW1/UK40gTZTnTQ2szlVWiH3Kqp5bB2Jc=)
2: oL_QbOhVti2baIzYxTXV9JTNOTI.crl (hash: qQ/RIABR1Ie29BhLiUNadlMbOWzvypCLAYTKh75X8so=)
3: vvVsYWWoAOYdpjYQrdRCqadNLp0.roa (hash: 7wSWVSVEK2tx71oit1iR5MZZ41C88wL0lV1CJmf846k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:bc:d2:5b:fa:93:7a:14:65:a0:86:91:6f:67:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Oct 27 18:00:56 2026 GMT
Not After : Oct 28 18:00:56 2026 GMT
Subject: CN=e185cbdacf67c27c1d394cbf0fe113eacbbc9594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:fb:4f:f1:27:17:02:e9:e7:38:fe:b0:0e:
6b:58:d7:f3:57:e5:bf:ab:3f:51:b3:06:7a:e6:29:
da:37:25:b0:3c:cf:ec:2b:55:3e:2f:83:e3:ae:5f:
0f:a9:39:7a:ec:66:3e:ac:43:35:75:42:bd:5d:98:
79:40:0e:d3:89:e0:39:f4:4f:b6:1a:cf:a3:f8:a0:
20:e7:47:c1:3c:18:38:9d:54:34:48:07:26:d3:13:
0d:1b:4a:e7:07:7c:7d:78:2e:b5:6e:c7:62:85:20:
ee:0c:10:f7:a9:11:c0:e0:54:2f:b8:81:fb:25:69:
a9:94:5b:58:04:0f:b2:c7:56:7f:95:50:20:a3:fa:
d5:15:e9:fd:cd:8d:20:d6:0c:07:97:2c:c4:f4:45:
01:a8:03:d1:6d:dc:7b:9f:10:35:8f:16:6a:6a:12:
88:34:1e:96:48:05:3f:7c:6b:45:6e:27:c0:09:25:
32:3d:13:b7:91:9c:25:3d:0e:f5:07:d4:14:a6:ce:
b7:38:82:df:3a:bb:57:3e:b6:03:ed:d6:b8:53:51:
fc:70:69:59:0d:a5:c7:ff:46:39:ec:c6:6a:47:d4:
82:c4:87:94:65:3c:32:1d:79:8c:ee:84:c0:08:6e:
52:b5:54:e4:e0:5e:ff:b1:b5:ef:2c:44:66:60:ef:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:85:CB:DA:CF:67:C2:7C:1D:39:4C:BF:0F:E1:13:EA:CB:BC:95:94
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:03:79:cb:f5:d4:4e:67:78:30:6d:c4:cf:d7:a1:86:76:25:
f4:1c:02:f6:24:46:36:87:c4:62:ca:45:65:40:b3:67:91:9a:
bc:07:c8:dc:90:2d:89:c6:8e:09:50:cc:16:0f:9e:6b:d6:17:
d5:02:bf:d2:bf:61:be:e6:f3:25:ee:9b:ca:a3:d8:98:da:46:
35:01:91:67:45:ac:0e:5e:ce:b4:ef:b1:01:50:10:a3:ab:b6:
3d:c7:ff:28:0f:d1:d2:6b:46:5c:09:4e:14:e0:3d:bd:96:cb:
ab:c3:64:8b:ac:b7:b5:03:9c:e7:bd:22:1d:6e:af:97:8b:4a:
77:b5:f4:d5:1c:d7:a0:9c:9e:88:fe:b6:e2:87:ef:1e:89:40:
5e:ba:20:24:ae:11:81:b5:9b:dc:be:70:33:a8:b9:57:2c:2b:
80:c9:bb:20:d2:8a:3d:3a:9b:28:66:82:d1:69:f8:ab:6b:a7:
bb:28:dc:f8:13:77:ed:80:ea:c8:43:c4:d7:6b:85:8a:e7:18:
f3:ad:2b:e7:90:c0:ea:ac:be:93:a4:c6:5d:4a:81:e4:34:87:
cf:c1:19:b4:20:05:0d:57:fa:5a:08:74:d5:e0:40:73:d3:7d:
10:54:c8:5c:7a:79:9b:ac:e7:26:78:be:17:0e:23:71:1f:2d:
51:e2:65:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+hbzSW/qTehRloIaRb2eLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYmZkMDZjZTg1NWI2MmQ5YjY4OGNkOGM1MzVkNWY0OTRj
ZDM5MzIwHhcNMjYxMDI3MTgwMDU2WhcNMjYxMDI4MTgwMDU2WjAzMTEwLwYDVQQD
EyhlMTg1Y2JkYWNmNjdjMjdjMWQzOTRjYmYwZmUxMTNlYWNiYmM5NTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzz7T/EnFwLp5zj+sA5rWNfzV+W/
qz9RswZ65inaNyWwPM/sK1U+L4Pjrl8PqTl67GY+rEM1dUK9XZh5QA7TieA59E+2
Gs+j+KAg50fBPBg4nVQ0SAcm0xMNG0rnB3x9eC61bsdihSDuDBD3qRHA4FQvuIH7
JWmplFtYBA+yx1Z/lVAgo/rVFen9zY0g1gwHlyzE9EUBqAPRbdx7nxA1jxZqahKI
NB6WSAU/fGtFbifACSUyPRO3kZwlPQ71B9QUps63OILfOrtXPrYD7da4U1H8cGlZ
DaXH/0Y57MZqR9SCxIeUZTwyHXmM7oTACG5StVTk4F7/sbXvLERmYO87RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGFy9rPZ8J8HTlMvw/hE+rLvJWUMB8GA1UdIwQY
MBaAFKC/0GzoVbYtm2iM2MU11fSUzTkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2Ut
NjcxODM5MjAwNjA0LzEvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2UtNjcxODM5MjAwNjA0
LzEvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQN5y/XU
Tmd4MG3Ez9ehhnYl9BwC9iRGNofEYspFZUCzZ5GavAfI3JAticaOCVDMFg+ea9YX
1QK/0r9hvubzJe6byqPYmNpGNQGRZ0WsDl7OtO+xAVAQo6u2Pcf/KA/R0mtGXAlO
FOA9vZbLq8Nki6y3tQOc570iHW6vl4tKd7X01RzXoJyeiP624ofvHolAXrogJK4R
gbWb3L5wM6i5VywrgMm7INKKPTqbKGaC0Wn4q2unuyjc+BN37YDqyEPE12uFiucY
860r55DA6qy+k6TGXUqB5DSHz8EZtCAFDVf6Wgh01eBAc9N9EFTIXHp5m6znJni+
Fw4jcR8tUeJlfw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:35 2026 by rpki-client