Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: aijxfUK/586y//tgLJEMNGaKjhxMMey0yy/ONjSwRpE=
Subject key identifier: 33:C7:A5:34:D7:FD:C4:AE:DC:74:8B:F8:8D:AC:B3:1D:5C:49:7C:37
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 01A1A97099548F4A4109BDD33A72E4DE234E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 13A2
Signing time: Thu 05 Nov 2026 02:01:31 +0000
Manifest this update: Thu 05 Nov 2026 02:01:31 +0000
Manifest next update: Fri 06 Nov 2026 02:01:31 +0000
Files and hashes: 1: E1QbVJAayOHXybvvykh2_z_eoYk.roa (hash: Ne00sRp1K+wq4QIkqT2qcjKHyHlHGzP3FNyY8RockCE=)
2: JYQlbQJEy0sPqACuaQ0ZNKP0_kA.roa (hash: 9Mf/IBP/vEnvOsH8GvnEXV1QapAzMWJM6lph3xsak/E=)
3: Ov83ySv3sFV7M88SSWflw9--a-0.roa (hash: SVhdkcQVattKFVMXSZeL1xJo615LAy5BBiDbcYL9ck8=)
4: We9JlhRC7AnuKdXNeDiRVJR3cSQ.roa (hash: aCm3hVdiPu8wrcYehfXy6dGkmo0BNiZb3dnL5cg7bd0=)
5: dNqWn8LLbtUjse_iEIk0LyE_w9U.roa (hash: pyT41frLnr8b4Y4mOhVh340WexYxDekl72v7q/1e+g4=)
6: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: VfX4UB2jgbP4PqqiCm2CNIdAZ8UDWJKq3NeQrLLL/LU=)
7: pzkAsevaRgjEYyiE9vP5vLFmiuQ.roa (hash: nO/grxvmKZkvhDphy8GQW/Icm/R4FkLHljLabsv3llQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:70:99:54:8f:4a:41:09:bd:d3:3a:72:e4:de:23:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Nov 5 02:01:31 2026 GMT
Not After : Nov 6 02:01:31 2026 GMT
Subject: CN=33c7a534d7fdc4aedc748bf88dacb31d5c497c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:55:97:5a:7e:65:3b:06:38:e5:43:f1:00:ae:
a2:e5:9c:4e:37:8e:5b:c1:96:85:ab:7a:cf:6b:56:
b5:2c:e3:37:98:3a:b2:8c:24:cc:25:45:ae:d8:4e:
37:47:03:15:55:a0:6c:1c:ec:b7:a2:e9:fb:4f:e2:
70:90:b3:fe:99:86:9b:cf:ff:0e:99:ab:b8:12:bb:
77:19:28:5c:67:69:af:85:4f:f7:29:8f:52:fc:e1:
07:4b:41:03:c4:6e:aa:1c:01:9b:93:c3:61:1d:3e:
2a:fd:c5:d8:a2:7c:4c:01:5f:85:57:49:f7:2d:b2:
98:9d:7b:3c:95:e9:09:b1:86:32:e6:58:f6:47:bb:
34:4d:f5:3b:57:fd:97:b6:60:42:57:77:14:77:96:
b5:04:31:96:2a:b4:d5:f8:ce:9f:8e:ad:1f:09:ff:
fa:97:e3:5d:7d:b5:af:86:38:39:da:e0:cd:78:fb:
15:dd:70:c8:1c:f7:4a:16:f0:28:b8:b4:88:08:6b:
64:7a:ce:52:84:0c:e6:0c:98:f9:1a:bf:e4:ce:cf:
ce:88:45:8e:a7:4a:65:73:d9:6d:19:08:79:82:e4:
57:04:11:26:80:dd:a7:2a:97:7b:d9:86:e0:55:fd:
5a:74:1d:2c:95:e6:33:57:ed:54:6c:e1:0c:05:c7:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:A5:34:D7:FD:C4:AE:DC:74:8B:F8:8D:AC:B3:1D:5C:49:7C:37
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0a:19:bc:66:94:e4:db:8b:f2:e7:d4:27:cb:e8:ba:69:ac:
ab:2a:b8:37:e7:1e:84:93:de:1c:4f:f1:34:cc:60:1e:71:fc:
08:b7:88:e8:25:ea:8e:43:f2:85:57:13:fd:4c:9e:5b:61:a5:
49:85:9c:1e:f1:ef:86:fc:df:70:fc:a4:e1:00:72:d1:c8:13:
03:dd:ac:27:7e:82:35:10:bb:8d:38:7e:31:c4:70:b9:10:02:
96:30:6d:0c:7f:34:7a:f5:3d:5d:1b:ce:b9:4b:80:a1:ce:aa:
ca:53:fa:bf:6c:82:1c:1b:ef:9a:2b:f9:26:38:96:2a:6a:5d:
9e:f1:20:60:7b:38:c8:8c:af:53:2c:24:67:61:9b:d3:9d:94:
85:5b:fd:cc:8d:9c:11:1e:1a:9a:3c:85:42:0d:64:1e:a7:72:
9f:c7:4f:8a:34:2d:4e:99:72:78:3b:44:60:27:7e:b5:a0:a7:
cc:4a:2b:d3:64:44:8a:38:3e:46:c2:80:b5:f5:83:98:95:09:
76:56:c8:72:df:b4:66:f4:ed:5e:fb:c3:d1:a4:11:b5:9d:c3:
18:d1:14:5f:77:bf:85:82:0d:72:83:b6:4a:22:5a:0f:a6:1f:
d2:f5:af:b1:80:09:d1:9d:e4:56:6c:46:8f:5a:4f:66:e7:62:
02:ae:a3:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGpcJlUj0pBCb3TOnLk3iNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGY3ZjViNjYxOGJkYTIzYzgzYmVkMTFiNDQyMDQxZjFm
YjQ1NmQwHhcNMjYxMTA1MDIwMTMxWhcNMjYxMTA2MDIwMTMxWjAzMTEwLwYDVQQD
EygzM2M3YTUzNGQ3ZmRjNGFlZGM3NDhiZjg4ZGFjYjMxZDVjNDk3YzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1WXWn5lOwY45UPxAK6i5ZxON45b
wZaFq3rPa1a1LOM3mDqyjCTMJUWu2E43RwMVVaBsHOy3oun7T+JwkLP+mYabz/8O
mau4Ert3GShcZ2mvhU/3KY9S/OEHS0EDxG6qHAGbk8NhHT4q/cXYonxMAV+FV0n3
LbKYnXs8lekJsYYy5lj2R7s0TfU7V/2XtmBCV3cUd5a1BDGWKrTV+M6fjq0fCf/6
l+NdfbWvhjg52uDNePsV3XDIHPdKFvAouLSICGtkes5ShAzmDJj5Gr/kzs/OiEWO
p0plc9ltGQh5guRXBBEmgN2nKpd72YbgVf1adB0sleYzV+1UbOEMBccS5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPHpTTX/cSu3HSL+I2ssx1cSXw3MB8GA1UdIwQY
MBaAFKDff1tmGL2iPIO+0RtEIEHx+0VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNTcyOGItYTM2ZC00ZmJhLTkzYWEt
NWY0YmM5MDBjMDNkLzEvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hNTcyOGItYTM2ZC00ZmJhLTkzYWEtNWY0YmM5MDBjMDNk
LzEvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgoZvGaU
5NuL8ufUJ8voummsqyq4N+cehJPeHE/xNMxgHnH8CLeI6CXqjkPyhVcT/UyeW2Gl
SYWcHvHvhvzfcPyk4QBy0cgTA92sJ36CNRC7jTh+McRwuRACljBtDH80evU9XRvO
uUuAoc6qylP6v2yCHBvvmiv5JjiWKmpdnvEgYHs4yIyvUywkZ2Gb052UhVv9zI2c
ER4amjyFQg1kHqdyn8dPijQtTplyeDtEYCd+taCnzEor02REijg+RsKAtfWDmJUJ
dlbIct+0ZvTtXvvD0aQRtZ3DGNEUX3e/hYINcoO2SiJaD6Yf0vWvsYAJ0Z3kVmxG
j1pPZudiAq6j0A==
-----END CERTIFICATE-----
Generated at Thu Nov 5 12:08:37 2026 by rpki-client