Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: cqBvzLiRz7Ns0slFGZiGvSJT9ZVAJd/2bx2w+bV7zhU=
Subject key identifier: 85:56:66:81:80:DB:28:D2:52:D9:BF:D8:F0:FC:97:F9:6F:9C:B1:06
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 01A1829A010BC1A87321A6787A6479D361BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 063A
Signing time: Wed 28 Oct 2026 13:01:33 +0000
Manifest this update: Wed 28 Oct 2026 13:01:33 +0000
Manifest next update: Thu 29 Oct 2026 13:01:33 +0000
Files and hashes: 1: Krz6KcFKb_S-pinpl1x9zVxsbrg.roa (hash: tP+LpsElZ/mStZjBLNk0qf3JDfSiqb7wOaoXCtJpOOQ=)
2: UQQQAnMXMhAUnxCtm4H_SKzUiXQ.roa (hash: w436XA6bhzYAKb0YTHY/hgisvyWyabf0S3on+b0DcdY=)
3: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: 2uIkMbc5QzK/6MCjkvk6rQ9pAqfINKNIqYAqbJn5GW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:9a:01:0b:c1:a8:73:21:a6:78:7a:64:79:d3:61:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Oct 28 13:01:33 2026 GMT
Not After : Oct 29 13:01:33 2026 GMT
Subject: CN=8556668180db28d252d9bfd8f0fc97f96f9cb106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:3a:09:7c:97:9e:70:8b:c0:76:96:04:2d:
0d:cc:34:10:77:9b:71:6e:e4:a5:1f:a4:16:e0:d7:
b0:6d:8a:06:81:b6:a6:f4:5d:c3:c7:3c:05:eb:9c:
06:4f:31:e2:f9:72:94:94:19:d0:92:1b:68:ad:2f:
0b:ee:20:a2:64:23:f4:8a:11:ab:4f:64:77:20:16:
74:a0:6c:99:ae:39:0b:4b:9f:07:24:83:e5:a5:3d:
c0:65:b1:3c:59:0a:ec:c6:e5:e6:bd:06:c6:e3:76:
93:d5:30:55:37:bc:1e:80:a2:fc:37:9f:ae:b7:d3:
6c:08:32:da:63:ef:2b:b0:55:2f:2d:7e:53:76:18:
78:b0:b2:c7:a7:d5:fa:68:49:dd:0b:cd:37:6f:68:
6b:b2:3b:57:8f:0d:b9:cb:52:b6:b9:a2:b7:fb:92:
f1:ee:08:c9:b8:44:3d:c0:dc:7b:36:1d:90:47:f6:
7d:b7:bf:9e:f2:ca:7c:60:bb:c4:29:17:69:03:22:
1c:3c:2c:ca:38:ca:44:1c:a4:59:e7:0c:d8:54:92:
08:ad:9e:b4:77:1c:4b:4a:6b:75:d8:b2:bc:b8:41:
ba:43:dd:9c:d1:dc:8d:ce:1e:5f:51:0e:15:55:3a:
44:b8:be:e6:ee:ad:ef:e1:8d:98:99:9c:14:7d:b7:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:66:81:80:DB:28:D2:52:D9:BF:D8:F0:FC:97:F9:6F:9C:B1:06
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fc:19:0a:73:0a:09:f1:dd:af:4c:d2:1a:97:30:c3:2f:21:
87:9a:f2:33:65:f9:c7:0c:44:7b:64:76:f6:6d:9b:cf:8f:f8:
be:be:f7:9f:3c:bd:e4:50:5e:36:64:fa:2a:f3:c2:10:e7:3d:
90:cd:f6:9f:94:03:a3:dd:a5:8d:21:e3:cf:57:85:4a:f8:24:
4f:d8:07:0b:6e:6a:84:18:62:cf:ea:45:ad:b2:18:37:8a:39:
3b:3a:cd:8d:9c:78:6c:76:7a:0c:f7:95:0d:91:5b:7a:03:2c:
40:7c:d6:19:f1:60:9d:63:52:98:85:1d:df:22:bc:d9:00:8c:
e5:1e:97:68:9a:de:19:f2:86:e6:96:4f:fa:c5:62:fa:d1:c4:
60:e7:b7:27:7d:48:f4:cd:2b:50:65:3d:fd:0b:d1:a6:8b:a9:
70:e3:e0:80:85:f0:3f:e8:7c:81:15:a1:56:07:51:a7:92:f5:
28:52:d1:48:ad:24:05:d0:d2:76:85:45:09:09:d4:31:86:93:
bd:24:42:77:3a:a4:5a:1d:79:3d:66:40:bd:73:19:fc:99:c6:
2c:3a:b3:24:bf:4b:50:32:b1:6e:16:c9:e2:49:b1:a6:65:d3:
42:6c:c4:25:ea:cd:81:23:62:93:2a:c6:f8:3a:77:7e:05:42:
2a:c1:22:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCmgELwahzIaZ4emR502G7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZWEwOGI2OWY3YzMwY2Q3YTA4MTNhZWI5MTA5ZjdlNzVk
MmFhMzgwHhcNMjYxMDI4MTMwMTMzWhcNMjYxMDI5MTMwMTMzWjAzMTEwLwYDVQQD
Eyg4NTU2NjY4MTgwZGIyOGQyNTJkOWJmZDhmMGZjOTdmOTZmOWNiMTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdU6CXyXnnCLwHaWBC0NzDQQd5tx
buSlH6QW4NewbYoGgbam9F3DxzwF65wGTzHi+XKUlBnQkhtorS8L7iCiZCP0ihGr
T2R3IBZ0oGyZrjkLS58HJIPlpT3AZbE8WQrsxuXmvQbG43aT1TBVN7wegKL8N5+u
t9NsCDLaY+8rsFUvLX5Tdhh4sLLHp9X6aEndC803b2hrsjtXjw25y1K2uaK3+5Lx
7gjJuEQ9wNx7Nh2QR/Z9t7+e8sp8YLvEKRdpAyIcPCzKOMpEHKRZ5wzYVJIIrZ60
dxxLSmt12LK8uEG6Q92c0dyNzh5fUQ4VVTpEuL7m7q3v4Y2YmZwUfbeWXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVWZoGA2yjSUtm/2PD8l/lvnLEGMB8GA1UdIwQY
MBaAFMfqCLaffDDNeggTrrkQn3510qo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMt
Y2YzMDVjNTQzOTNlLzEveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMtY2YzMDVjNTQzOTNl
LzEveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPwZCnMK
CfHdr0zSGpcwwy8hh5ryM2X5xwxEe2R29m2bz4/4vr73nzy95FBeNmT6KvPCEOc9
kM32n5QDo92ljSHjz1eFSvgkT9gHC25qhBhiz+pFrbIYN4o5OzrNjZx4bHZ6DPeV
DZFbegMsQHzWGfFgnWNSmIUd3yK82QCM5R6XaJreGfKG5pZP+sVi+tHEYOe3J31I
9M0rUGU9/QvRpoupcOPggIXwP+h8gRWhVgdRp5L1KFLRSK0kBdDSdoVFCQnUMYaT
vSRCdzqkWh15PWZAvXMZ/JnGLDqzJL9LUDKxbhbJ4kmxpmXTQmzEJerNgSNikyrG
+Dp3fgVCKsEiOg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 17:24:31 2026 by rpki-client