Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json)
Hash identifier: hYr0jK6r6nBihko55n3BjTRlacVrkLDiZZUE+LGpezw=
Subject key identifier: 74:F2:70:46:25:7C:7F:EE:3D:98:16:E2:03:D1:4A:7A:FA:EA:C4:DD
Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Certificate issuer: /CN=a1655282be419d21222b506fb7a368c3fe5db23d
Certificate serial: 01A142A80404C36E0CC3ED6BBB9016A66F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
Manifest number: 1AA7
Signing time: Fri 16 Oct 2026 03:01:09 +0000
Manifest this update: Fri 16 Oct 2026 03:01:09 +0000
Manifest next update: Sat 17 Oct 2026 03:01:09 +0000
Files and hashes: 1: OU2kt5pP9LNwwlGwfRZGFyH5hzI.roa (hash: 6flWuRYE3Zk0uPFYWYiQzcnSra7IhOrzHZC3EVLgp5s=)
2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: hTG5b2rWT344uLXJk2t1gN7n0WgXvhcIq4pLlcz4YzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:a8:04:04:c3:6e:0c:c3:ed:6b:bb:90:16:a6:6f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d
Validity
Not Before: Oct 16 03:01:09 2026 GMT
Not After : Oct 17 03:01:09 2026 GMT
Subject: CN=74f27046257c7fee3d9816e203d14a7afaeac4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:c9:af:9f:c4:d3:3c:00:77:24:2d:6a:4c:
a9:c4:d1:0f:8d:31:31:a3:a4:76:6b:08:b8:ec:7d:
9a:0b:61:72:aa:a5:53:b4:67:59:4b:a9:57:f6:2f:
1e:d7:14:67:40:e5:70:04:30:09:ff:f6:cb:68:cf:
60:eb:12:d2:08:b6:3d:c6:77:e5:b6:0d:f9:8a:38:
8d:3a:98:d5:32:6a:9b:f9:c0:f2:2b:63:64:c3:3c:
7f:05:c9:92:ae:12:51:18:d6:e9:f7:5f:cf:ca:74:
53:b7:9d:88:03:5c:b3:a7:35:94:d8:63:1d:ab:1a:
0e:93:66:40:5b:02:69:46:61:0c:58:67:3f:53:cd:
f0:59:43:17:61:6b:97:b5:21:3f:67:c7:d7:ed:9d:
00:24:e4:3c:8e:58:f7:f5:06:7a:b7:18:df:dc:45:
94:2a:42:ce:e9:27:13:4a:6f:1d:60:6f:d4:20:52:
af:29:9a:eb:62:f7:df:85:92:ac:7c:0b:32:dc:8a:
af:44:c9:45:b7:44:c2:95:8c:c0:22:7b:6c:e3:81:
85:89:ab:e8:4c:11:96:b3:99:3b:e4:12:2a:b6:1e:
63:1a:03:e6:83:bd:31:53:9a:87:4f:b9:b7:12:b1:
71:68:cd:aa:92:1b:b5:09:cc:19:ce:9d:98:7e:d3:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F2:70:46:25:7C:7F:EE:3D:98:16:E2:03:D1:4A:7A:FA:EA:C4:DD
X509v3 Authority Key Identifier:
keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0d:00:2e:17:af:7b:cb:2e:76:1c:41:be:fa:26:ee:cd:d5:
a4:4c:73:84:02:56:27:51:b6:3d:76:ef:98:0a:3d:25:bc:9a:
aa:db:ad:a2:bd:1c:f6:9a:7f:d8:b6:0a:02:6d:66:1e:10:2a:
24:5a:0a:2e:16:c8:3d:45:0f:6d:04:91:ba:c4:c9:92:d1:5a:
c1:7c:23:2f:18:e9:31:21:75:35:99:34:f2:9b:91:25:33:fa:
b6:a0:84:18:53:16:99:b2:43:1a:8e:50:b7:bd:47:bd:a6:6c:
d8:7b:f7:31:58:49:c3:96:c7:d8:a1:75:26:e7:d3:28:a6:11:
c7:92:e6:19:a5:02:3d:a4:d0:fb:7d:3c:d4:a3:1b:42:64:d7:
30:8f:37:4a:1e:10:42:02:6f:d8:a7:a6:1f:fe:ed:29:65:f8:
64:1a:16:9a:1f:e0:35:6a:6d:92:60:ca:7f:69:e9:bf:cb:e7:
18:a0:08:a9:96:53:24:10:87:3e:9a:ac:45:c0:f4:3b:c0:9c:
41:60:c8:de:e5:0e:c2:c5:a3:8f:95:ac:44:25:1c:b0:b7:2f:
b3:33:af:74:69:23:40:0b:15:33:97:3b:3a:01:f9:e2:d7:59:
39:2f:65:de:73:f6:c0:62:4e:b9:b6:e9:cb:d0:f0:6e:13:8b:
a7:72:06:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFCqAQEw24Mw+1ru5AWpm98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjU1MjgyYmU0MTlkMjEyMjJiNTA2ZmI3YTM2OGMzZmU1
ZGIyM2QwHhcNMjYxMDE2MDMwMTA5WhcNMjYxMDE3MDMwMTA5WjAzMTEwLwYDVQQD
Eyg3NGYyNzA0NjI1N2M3ZmVlM2Q5ODE2ZTIwM2QxNGE3YWZhZWFjNGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEHJr5/E0zwAdyQtakypxNEPjTEx
o6R2awi47H2aC2FyqqVTtGdZS6lX9i8e1xRnQOVwBDAJ//bLaM9g6xLSCLY9xnfl
tg35ijiNOpjVMmqb+cDyK2Nkwzx/BcmSrhJRGNbp91/PynRTt52IA1yzpzWU2GMd
qxoOk2ZAWwJpRmEMWGc/U83wWUMXYWuXtSE/Z8fX7Z0AJOQ8jlj39QZ6txjf3EWU
KkLO6ScTSm8dYG/UIFKvKZrrYvffhZKsfAsy3IqvRMlFt0TClYzAInts44GFiavo
TBGWs5k75BIqth5jGgPmg70xU5qHT7m3ErFxaM2qkhu1CcwZzp2YftMyMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTycEYlfH/uPZgW4gPRSnr66sTdMB8GA1UdIwQY
MBaAFKFlUoK+QZ0hIitQb7ejaMP+XbI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dWU2dyNUJuU0VpSzFCdnQ2Tm93XzVkc2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84MDYyYTktN2Y0Ny00NGVhLWFiYjct
OTFkYmM5ZjBlOGRiLzEvb1dWU2dyNUJuU0VpSzFCdnQ2Tm93XzVkc2owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS84MDYyYTktN2Y0Ny00NGVhLWFiYjctOTFkYmM5ZjBlOGRi
LzEvb1dWU2dyNUJuU0VpSzFCdnQ2Tm93XzVkc2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmg0ALhev
e8sudhxBvvom7s3VpExzhAJWJ1G2PXbvmAo9Jbyaqtutor0c9pp/2LYKAm1mHhAq
JFoKLhbIPUUPbQSRusTJktFawXwjLxjpMSF1NZk08puRJTP6tqCEGFMWmbJDGo5Q
t71HvaZs2Hv3MVhJw5bH2KF1JufTKKYRx5LmGaUCPaTQ+3081KMbQmTXMI83Sh4Q
QgJv2KemH/7tKWX4ZBoWmh/gNWptkmDKf2npv8vnGKAIqZZTJBCHPpqsRcD0O8Cc
QWDI3uUOwsWjj5WsRCUcsLcvszOvdGkjQAsVM5c7OgH54tdZOS9l3nP2wGJOubbp
y9DwbhOLp3IG2A==
-----END CERTIFICATE-----
Generated at Fri Oct 16 12:41:13 2026 by rpki-client