Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: 5fGHD4Eyr/T2CGIkDFmZmXiUWZcKEUJzbUEWeWoLJcw=
Subject key identifier: F0:A0:F4:A9:5E:94:26:DB:05:29:30:D2:01:0D:49:0B:D8:51:74:5D
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 01A08AFB08E790B992CEC2DBB460B0C1E34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 05B7
Signing time: Thu 10 Sep 2026 11:01:42 +0000
Manifest this update: Thu 10 Sep 2026 11:01:42 +0000
Manifest next update: Fri 11 Sep 2026 11:01:42 +0000
Files and hashes: 1: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (hash: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: YwSU7oIyZmEMYjPnGhDphZesvXq3Dse0yMs4ABOuVgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fb:08:e7:90:b9:92:ce:c2:db:b4:60:b0:c1:e3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Sep 10 11:01:42 2026 GMT
Not After : Sep 11 11:01:42 2026 GMT
Subject: CN=f0a0f4a95e9426db052930d2010d490bd851745d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:9e:dd:57:ad:9b:6f:18:ee:7a:95:b3:cd:
a9:f5:42:b4:64:ff:7c:c9:4b:53:de:65:26:9d:77:
d5:b1:2e:4e:de:da:ce:92:23:ca:44:97:60:3d:23:
b8:45:a2:53:8d:7d:6b:4c:52:3d:7d:bb:0c:41:fa:
15:ad:41:98:3e:be:a0:1c:32:39:96:6b:9f:f3:cd:
92:31:ff:36:6d:67:94:cc:78:d9:c9:31:b7:8f:1d:
84:b6:00:9d:76:83:1a:c7:7b:60:96:54:60:36:69:
5a:d9:81:c9:7a:f4:60:d5:88:f1:3b:05:09:74:0f:
cf:3c:b5:66:1b:e9:0f:41:d4:aa:d6:0f:0d:69:73:
d5:d3:15:d4:27:6a:00:6c:37:0e:4e:be:18:c2:0d:
b7:1d:e5:54:db:cb:e5:f2:15:35:e1:0a:09:62:6f:
71:48:72:0e:c7:68:68:94:ff:3a:d8:b7:dd:b6:8b:
2a:0d:a1:58:cd:b7:70:60:2d:4a:76:d7:61:4a:17:
bf:f0:02:dd:34:9f:4c:0c:84:cd:f9:08:0f:7a:63:
75:ed:1f:6b:02:43:fe:14:55:bd:eb:b6:4e:36:39:
aa:8e:a4:e0:e8:4f:2b:60:80:1c:8a:9a:70:73:9f:
49:14:c3:00:41:85:62:5e:bc:b4:8d:07:30:c4:25:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A0:F4:A9:5E:94:26:DB:05:29:30:D2:01:0D:49:0B:D8:51:74:5D
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8d:dd:53:8c:28:d8:dc:f4:dd:16:0b:61:67:dd:d1:d7:15:
65:86:c8:5b:f4:5b:a9:32:e3:48:6f:ed:09:af:c2:7f:4b:58:
b9:68:2d:e7:45:86:75:a0:1e:26:ed:dd:46:92:3a:70:c7:a4:
56:8c:d8:eb:e1:13:50:1a:7e:a1:b4:a6:6d:f5:74:23:12:98:
2d:67:a1:45:ed:b7:57:fd:96:50:55:c7:c6:7f:e8:0b:21:cc:
ba:29:8c:bb:27:74:77:60:34:5c:eb:f0:37:2e:34:3d:fa:bb:
06:b3:21:15:ad:6d:4c:56:3e:24:61:e0:aa:86:ac:a3:cf:95:
4a:f5:38:cf:e8:4c:0a:db:28:26:b4:c7:ed:08:e8:de:c7:1a:
fc:f6:f0:c7:33:b8:0b:a7:2c:c0:d6:95:f3:dd:c3:eb:02:67:
69:82:53:30:68:b3:66:95:0b:6d:a4:19:e1:3b:9a:a7:5c:fa:
c2:25:e2:d4:1e:60:85:fd:96:90:6d:51:8d:73:cf:d4:37:3b:
dd:96:7b:b5:00:ce:50:c3:43:be:aa:cd:21:76:ee:e4:1e:68:
e5:05:38:46:64:27:88:15:3b:cf:14:91:be:d3:62:dd:8a:8e:
5f:94:71:aa:8e:ff:a8:7d:d2:0b:ad:7e:b9:ac:0a:e1:5d:3c:
32:0b:8d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+wjnkLmSzsLbtGCwweNKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZWEwOGI2OWY3YzMwY2Q3YTA4MTNhZWI5MTA5ZjdlNzVk
MmFhMzgwHhcNMjYwOTEwMTEwMTQyWhcNMjYwOTExMTEwMTQyWjAzMTEwLwYDVQQD
EyhmMGEwZjRhOTVlOTQyNmRiMDUyOTMwZDIwMTBkNDkwYmQ4NTE3NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNSe3Vetm28Y7nqVs82p9UK0ZP98
yUtT3mUmnXfVsS5O3trOkiPKRJdgPSO4RaJTjX1rTFI9fbsMQfoVrUGYPr6gHDI5
lmuf882SMf82bWeUzHjZyTG3jx2EtgCddoMax3tgllRgNmla2YHJevRg1YjxOwUJ
dA/PPLVmG+kPQdSq1g8NaXPV0xXUJ2oAbDcOTr4Ywg23HeVU28vl8hU14QoJYm9x
SHIOx2holP862LfdtosqDaFYzbdwYC1KdtdhShe/8ALdNJ9MDITN+QgPemN17R9r
AkP+FFW967ZONjmqjqTg6E8rYIAcippwc59JFMMAQYViXry0jQcwxCXy+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCg9KlelCbbBSkw0gENSQvYUXRdMB8GA1UdIwQY
MBaAFMfqCLaffDDNeggTrrkQn3510qo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMt
Y2YzMDVjNTQzOTNlLzEveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMtY2YzMDVjNTQzOTNl
LzEveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGo3dU4wo
2Nz03RYLYWfd0dcVZYbIW/RbqTLjSG/tCa/Cf0tYuWgt50WGdaAeJu3dRpI6cMek
VozY6+ETUBp+obSmbfV0IxKYLWehRe23V/2WUFXHxn/oCyHMuimMuyd0d2A0XOvw
Ny40Pfq7BrMhFa1tTFY+JGHgqoaso8+VSvU4z+hMCtsoJrTH7Qjo3sca/PbwxzO4
C6cswNaV893D6wJnaYJTMGizZpULbaQZ4Tuap1z6wiXi1B5ghf2WkG1RjXPP1Dc7
3ZZ7tQDOUMNDvqrNIXbu5B5o5QU4RmQniBU7zxSRvtNi3YqOX5Rxqo7/qH3SC61+
uawK4V08MguNkA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:54 2026 by rpki-client