Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
File: oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json)
Hash identifier: nStxtFDCioQE3+YoUQpa/izKMahPTDPsX5kJfXTghnw=
Subject key identifier: 06:A7:6F:1A:6C:6B:58:A8:DF:8B:1C:4B:7B:D8:EA:CF:3E:F9:7D:96
Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
Certificate issuer: /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Certificate serial: 019DD0F62B7752046D3531146B4E925D94BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
Manifest number: 0108
Signing time: Mon 27 Apr 2026 22:01:27 +0000
Manifest this update: Mon 27 Apr 2026 22:01:27 +0000
Manifest next update: Tue 28 Apr 2026 22:01:27 +0000
Files and hashes: 1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=)
2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: tTQTIeEEfL/KSzivDiIj1beOUQ95vrUX0DJFmGlH8tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:f6:2b:77:52:04:6d:35:31:14:6b:4e:92:5d:94:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Validity
Not Before: Apr 27 22:01:27 2026 GMT
Not After : Apr 28 22:01:27 2026 GMT
Subject: CN=06a76f1a6c6b58a8df8b1c4b7bd8eacf3ef97d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:8e:12:8c:0e:f5:fb:82:47:d2:bb:99:3d:
19:8a:7f:13:99:03:41:cf:5d:c3:69:4f:7c:30:2f:
f2:5f:47:63:46:7e:71:5d:a4:cb:5f:d6:62:83:bf:
5b:cb:97:26:9a:df:20:6c:a1:bb:11:e5:e2:38:91:
b2:84:b2:93:43:4c:a9:4c:2a:2d:3a:d6:ff:31:88:
f2:e6:29:d9:c3:5f:7f:20:9c:3f:bb:4f:5b:e9:ad:
23:f7:b5:34:c3:2c:b3:42:f9:5a:62:c4:00:cc:57:
d5:72:45:14:de:ba:cf:db:8c:4b:a9:21:eb:26:8e:
14:b4:10:f1:ad:43:03:60:18:d4:1e:76:5b:ac:01:
43:db:b2:b4:f7:ba:1f:b3:48:e3:c9:21:02:17:da:
64:60:67:7f:5f:00:94:99:dd:89:44:4e:6f:84:cd:
13:0a:99:22:39:d6:ff:ae:1d:0c:5f:4c:6e:09:64:
c4:1b:16:6f:42:0b:a3:ef:76:1f:a5:8d:e2:6d:4d:
e1:60:00:e4:4b:21:fc:f7:4a:b6:b4:80:dd:38:31:
f2:46:04:fb:a8:5e:8d:9b:7c:6a:07:25:14:ca:9a:
f6:f8:bf:a9:bb:c2:e7:f2:e2:9f:4f:3c:be:3f:80:
4d:b1:cc:97:8b:93:c0:d9:aa:08:11:58:05:6f:3a:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A7:6F:1A:6C:6B:58:A8:DF:8B:1C:4B:7B:D8:EA:CF:3E:F9:7D:96
X509v3 Authority Key Identifier:
keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:93:b0:0b:ff:fc:bf:21:2b:f8:d2:dc:49:4b:84:02:e0:75:
8c:a3:cf:1b:d2:2b:d2:22:50:d4:f7:88:3c:b0:87:79:3a:9d:
64:f9:f7:3d:4f:ec:b3:ef:13:fa:c1:2f:5e:69:92:18:5a:25:
c4:f1:e6:69:46:ae:70:29:10:e3:35:7d:89:3e:82:e1:68:c5:
29:e9:c0:6a:c7:0f:59:01:72:b7:ab:87:94:54:f6:03:08:14:
92:80:b3:cf:5c:97:e6:1f:f2:0e:c2:d9:24:47:a1:d5:d7:51:
e2:1e:28:f3:af:95:88:ba:a4:e5:63:5e:d8:25:51:f0:19:7f:
4b:01:cb:f0:ab:08:2c:a8:c2:2c:f6:40:83:c6:1f:60:c7:96:
5c:eb:7b:b7:f7:5b:a7:bb:5d:5c:d8:08:fe:f4:db:3d:7f:4d:
ac:62:67:e2:95:36:cc:3f:27:9a:44:4d:dc:88:8c:e0:8c:fa:
82:09:41:01:fd:ef:7c:7a:5e:a3:de:4e:a9:56:84:ec:fb:a6:
13:1e:ee:cf:0c:7e:b7:8d:00:b9:dd:e8:e4:9c:26:59:06:e1:
9a:0c:fc:79:cf:b6:a6:1e:a8:d7:6d:4e:8b:6d:05:cf:79:c1:
82:d8:56:37:67:71:2a:c1:0c:5c:42:68:a8:8a:87:59:7d:13:
a8:b3:59:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Q9it3UgRtNTEUa06SXZS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGMyOTZhOWZlNWE2MDUxNTgyZTVhZGU0NzU0OTg1ZjZm
MTFiMzEwHhcNMjYwNDI3MjIwMTI3WhcNMjYwNDI4MjIwMTI3WjAzMTEwLwYDVQQD
EygwNmE3NmYxYTZjNmI1OGE4ZGY4YjFjNGI3YmQ4ZWFjZjNlZjk3ZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJCOEowO9fuCR9K7mT0Zin8TmQNB
z13DaU98MC/yX0djRn5xXaTLX9Zig79by5cmmt8gbKG7EeXiOJGyhLKTQ0ypTCot
Otb/MYjy5inZw19/IJw/u09b6a0j97U0wyyzQvlaYsQAzFfVckUU3rrP24xLqSHr
Jo4UtBDxrUMDYBjUHnZbrAFD27K097ofs0jjySECF9pkYGd/XwCUmd2JRE5vhM0T
CpkiOdb/rh0MX0xuCWTEGxZvQguj73YfpY3ibU3hYADkSyH890q2tIDdODHyRgT7
qF6Nm3xqByUUypr2+L+pu8Ln8uKfTzy+P4BNscyXi5PA2aoIEVgFbzp9gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAanbxpsa1io34scS3vY6s8++X2WMB8GA1UdIwQY
MBaAFKCMKWqf5aYFFYLlreR1SYX28RsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0l3cGFwX2xwZ1VWZ3VXdDVIVkpoZmJ4R3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82MDA3ODktZDcxZC00OTY4LThiYTkt
YWZiN2U4ZTczMGNjLzEvb0l3cGFwX2xwZ1VWZ3VXdDVIVkpoZmJ4R3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82MDA3ODktZDcxZC00OTY4LThiYTktYWZiN2U4ZTczMGNj
LzEvb0l3cGFwX2xwZ1VWZ3VXdDVIVkpoZmJ4R3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZOwC//8
vyEr+NLcSUuEAuB1jKPPG9Ir0iJQ1PeIPLCHeTqdZPn3PU/ss+8T+sEvXmmSGFol
xPHmaUaucCkQ4zV9iT6C4WjFKenAascPWQFyt6uHlFT2AwgUkoCzz1yX5h/yDsLZ
JEeh1ddR4h4o86+ViLqk5WNe2CVR8Bl/SwHL8KsILKjCLPZAg8YfYMeWXOt7t/db
p7tdXNgI/vTbPX9NrGJn4pU2zD8nmkRN3IiM4Iz6gglBAf3vfHpeo95OqVaE7Pum
Ex7uzwx+t40Aud3o5JwmWQbhmgz8ec+2ph6o121Oi20Fz3nBgthWN2dxKsEMXEJo
qIqHWX0TqLNZkA==
-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:43 2026 by rpki-client