Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: l6oFIyNUnNLVDX1ljYpctZqnFYltifQrL2Ja8YzpTf0=
Subject key identifier: 31:18:43:06:BF:7E:AC:98:4F:7F:EE:DC:07:E6:52:46:A9:4A:9B:D7
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 01A117BD51CD6EE74EA22BDD407BC39A429F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 17CB
Signing time: Wed 07 Oct 2026 19:00:45 +0000
Manifest this update: Wed 07 Oct 2026 19:00:45 +0000
Manifest next update: Thu 08 Oct 2026 19:00:45 +0000
Files and hashes: 1: lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa (hash: JhDyY/3KKD4NQI4A4Yynp5xK7eSjDNrmxGYBJDA+6gE=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: dRvh8ZMkFR7EpUibtOTO/hFePevrqky/QeTa7SlTnfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:bd:51:cd:6e:e7:4e:a2:2b:dd:40:7b:c3:9a:42:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Oct 7 19:00:45 2026 GMT
Not After : Oct 8 19:00:45 2026 GMT
Subject: CN=31184306bf7eac984f7feedc07e65246a94a9bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:c1:31:37:f1:f8:13:3d:b9:1d:78:b7:0b:
e7:48:1a:6b:ba:89:27:d9:b0:51:e4:28:c1:66:a4:
ad:be:b0:8a:11:6a:a4:47:23:df:2d:ae:d3:36:37:
3c:35:b0:d5:84:e3:e2:39:8c:88:7b:fc:c1:a0:25:
57:9a:42:c0:bb:64:82:20:da:83:33:c9:66:ca:54:
64:9f:5c:b9:42:b7:cc:74:ca:39:28:9b:14:f4:9e:
ac:7c:51:ee:dc:8e:ed:ac:e0:83:27:55:bc:8b:f1:
ed:93:f2:f4:9f:c4:b4:65:c8:17:6d:fd:87:db:57:
25:8e:e1:4a:77:5a:87:39:ee:04:3b:03:8c:2a:ae:
92:aa:d6:d3:65:68:5d:4b:ec:b7:94:05:2f:6e:a9:
4c:46:0d:67:d9:b6:09:1a:70:47:9b:1a:e8:73:2a:
7b:3e:77:9a:35:f0:ed:2a:2a:bd:fa:c1:b1:7e:ea:
a9:1d:7d:b3:6e:90:aa:ec:c6:3d:a4:fc:97:dd:87:
4d:c5:ef:71:7f:20:d5:55:8d:16:7f:f4:b3:39:a7:
72:4c:ee:f8:c3:81:4f:37:13:03:73:de:03:4f:48:
b1:b0:91:25:0d:49:1e:dd:ad:c2:1a:8a:39:33:86:
92:2f:d2:78:12:d0:70:a9:60:63:c3:e8:3c:23:ec:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:43:06:BF:7E:AC:98:4F:7F:EE:DC:07:E6:52:46:A9:4A:9B:D7
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f0:48:be:96:2f:fa:21:82:f2:37:fc:f6:6c:58:19:bf:67:
09:5d:60:60:9b:65:25:69:cb:e5:13:48:d8:86:f5:7f:26:bc:
12:fd:c7:50:51:50:9f:a7:63:66:4a:72:26:d4:4f:be:fa:a9:
e1:fe:7c:ba:fd:10:f8:7c:34:6a:ea:c7:9f:81:ec:96:87:65:
50:9e:a4:40:de:c3:97:e1:de:42:52:f6:03:16:44:e6:d8:87:
a7:a3:1e:ab:84:ea:09:99:fa:50:3b:24:49:c3:61:63:1b:3b:
fa:70:d0:c9:29:ad:6f:ff:1f:6e:a8:02:b9:11:a3:a5:6b:81:
eb:03:c7:59:3f:16:9c:aa:39:c8:13:79:de:82:4e:6e:c5:b9:
bb:12:d4:57:2b:8d:75:7c:dc:3c:27:27:5a:ec:b5:c0:cd:1c:
0d:35:2c:17:69:4b:91:4e:2b:35:32:a4:06:1a:d7:ef:25:f9:
e6:67:7e:a5:be:a7:d7:1a:ab:ff:d4:9d:8b:80:fa:e0:dd:27:
3f:72:f1:48:b1:2a:c6:5f:49:52:93:5c:7c:7d:52:37:f7:ac:
1e:5b:4a:a5:54:f3:3a:86:49:f1:85:5c:b4:c4:30:54:4b:eb:
93:af:a6:f1:a6:22:ed:15:61:cb:ab:22:aa:3d:49:98:01:37:
dc:b5:23:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEXvVHNbudOoivdQHvDmkKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTYwOGYxNWIzNjdhZWU0ODZiODU2ZDllNDA0YzNkMWUw
YTVmZDQwHhcNMjYxMDA3MTkwMDQ1WhcNMjYxMDA4MTkwMDQ1WjAzMTEwLwYDVQQD
EygzMTE4NDMwNmJmN2VhYzk4NGY3ZmVlZGMwN2U2NTI0NmE5NGE5YmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+7BMTfx+BM9uR14twvnSBpruokn
2bBR5CjBZqStvrCKEWqkRyPfLa7TNjc8NbDVhOPiOYyIe/zBoCVXmkLAu2SCINqD
M8lmylRkn1y5QrfMdMo5KJsU9J6sfFHu3I7trOCDJ1W8i/Htk/L0n8S0ZcgXbf2H
21cljuFKd1qHOe4EOwOMKq6SqtbTZWhdS+y3lAUvbqlMRg1n2bYJGnBHmxrocyp7
PneaNfDtKiq9+sGxfuqpHX2zbpCq7MY9pPyX3YdNxe9xfyDVVY0Wf/SzOadyTO74
w4FPNxMDc94DT0ixsJElDUke3a3CGoo5M4aSL9J4EtBwqWBjw+g8I+wKOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEYQwa/fqyYT3/u3AfmUkapSpvXMB8GA1UdIwQY
MBaAFKCWCPFbNnruSGuFbZ5ATD0eCl/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2Yt
YjhlZDY2ZDQyNzgyLzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2YtYjhlZDY2ZDQyNzgy
LzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPBIvpYv
+iGC8jf89mxYGb9nCV1gYJtlJWnL5RNI2Ib1fya8Ev3HUFFQn6djZkpyJtRPvvqp
4f58uv0Q+Hw0aurHn4HslodlUJ6kQN7Dl+HeQlL2AxZE5tiHp6Meq4TqCZn6UDsk
ScNhYxs7+nDQySmtb/8fbqgCuRGjpWuB6wPHWT8WnKo5yBN53oJObsW5uxLUVyuN
dXzcPCcnWuy1wM0cDTUsF2lLkU4rNTKkBhrX7yX55md+pb6n1xqr/9Sdi4D64N0n
P3LxSLEqxl9JUpNcfH1SN/esHltKpVTzOoZJ8YVctMQwVEvrk6+m8aYi7RVhy6si
qj1JmAE33LUj4Q==
-----END CERTIFICATE-----
Generated at Thu Oct 8 03:56:17 2026 by rpki-client