Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: KKeVybNGqDfPVyuk0UY2nQcehG4CJd3G0KBWTVCsc2s=
Subject key identifier: 57:99:47:79:3A:A2:8B:4B:C1:D2:53:51:5D:8D:4A:4B:5F:C1:FA:2B
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 019CE5C923F8C5C17F20A761CC0850CEE558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: 010C
Signing time: Fri 13 Mar 2026 06:01:30 +0000
Manifest this update: Fri 13 Mar 2026 06:01:30 +0000
Manifest next update: Sat 14 Mar 2026 06:01:30 +0000
Files and hashes: 1: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (hash: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: +yjbNfb9tcn3IzSCttolDfOJDFrm/KaP4WmPY7TrII4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:23:f8:c5:c1:7f:20:a7:61:cc:08:50:ce:e5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Mar 13 06:01:30 2026 GMT
Not After : Mar 14 06:01:30 2026 GMT
Subject: CN=579947793aa28b4bc1d253515d8d4a4b5fc1fa2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:d1:91:35:05:a1:da:bd:6c:7f:0f:83:10:
7c:af:0c:fa:01:d1:f5:f2:47:f9:25:6a:6e:93:a4:
0e:4b:8b:94:f6:35:67:2d:0a:d0:06:d4:6d:4f:66:
30:4c:61:f4:5d:bf:bd:bc:ae:6c:b7:0b:f7:e3:2c:
aa:ff:5c:81:f7:95:8a:ad:56:14:6c:8f:d8:41:53:
d0:7b:23:e3:ff:41:f1:f9:33:fa:a1:fb:8a:38:ca:
3d:db:16:45:c8:42:f0:36:ef:6b:57:23:7b:54:db:
c9:fb:6c:67:13:2e:1c:29:fd:05:17:b7:ae:47:02:
e2:7a:b1:1b:5c:14:ab:af:a8:b3:ca:34:4d:ea:cc:
06:ae:b6:a8:a5:56:45:4c:b9:df:9f:ca:25:a2:2c:
6e:88:bd:5d:a1:fb:06:d0:e7:3b:cb:ce:b3:2a:5a:
c6:57:7f:b9:84:f7:37:e7:8e:f2:a4:9b:0a:30:d9:
5d:f8:7b:36:d9:9e:8b:e3:32:f2:94:2c:06:62:a7:
4f:e9:0e:43:fe:d5:40:2b:e8:fd:57:85:b4:92:d3:
51:b4:51:36:bd:e8:4c:15:38:06:de:f4:2b:e5:ef:
e7:ba:25:49:d2:5b:cc:5d:ef:45:38:88:26:c3:02:
fd:2c:a5:1b:df:fa:63:5a:b4:c1:82:ff:27:22:ea:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:99:47:79:3A:A2:8B:4B:C1:D2:53:51:5D:8D:4A:4B:5F:C1:FA:2B
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:72:af:48:2f:78:a1:83:6d:4e:3d:fa:62:73:12:d0:ca:1c:
28:14:51:38:ae:f4:11:61:7a:d1:b0:45:51:5e:a8:e8:97:12:
67:4e:68:51:02:d7:8e:99:9b:4c:2c:54:bc:36:27:53:bb:76:
e4:d5:66:4e:0e:92:ee:0a:fb:b3:30:19:2b:8a:d6:03:39:73:
5f:74:1f:03:37:1a:ed:bc:4e:bd:14:26:6e:89:b8:04:14:c5:
23:73:c0:5c:5c:49:6b:75:6a:93:f9:7e:49:e0:5d:a4:35:82:
58:00:93:4a:0b:35:0e:52:e2:58:37:97:8a:1f:67:64:c7:24:
e0:ba:bf:0f:0f:36:76:3a:36:bd:04:02:39:10:ca:c7:d1:e2:
42:39:28:23:9d:e2:50:e6:37:e5:66:13:3b:9b:21:f7:bb:4c:
9a:1b:e3:c0:25:df:0a:a5:c8:8e:75:0b:23:6e:2a:ad:74:7c:
1c:7f:4c:67:c0:02:8d:5a:75:4e:e8:25:71:75:f0:3c:e7:fe:
a8:a7:09:99:0a:b4:ae:7d:c8:26:a5:25:2f:27:5f:af:b6:18:
cd:aa:e4:21:0f:a7:33:52:e2:16:a4:df:22:68:08:3e:33:d5:
70:d5:78:b0:b6:d0:d9:81:1b:bb:50:7b:7c:1b:58:e1:b9:1a:
14:6e:f9:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlySP4xcF/IKdhzAhQzuVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGNiNWIyNmVhNjVkODFmZGY2M2ExZDliMjAwNTcwOTEw
MDAzYjAwHhcNMjYwMzEzMDYwMTMwWhcNMjYwMzE0MDYwMTMwWjAzMTEwLwYDVQQD
Eyg1Nzk5NDc3OTNhYTI4YjRiYzFkMjUzNTE1ZDhkNGE0YjVmYzFmYTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+7RkTUFodq9bH8PgxB8rwz6AdH1
8kf5JWpuk6QOS4uU9jVnLQrQBtRtT2YwTGH0Xb+9vK5stwv34yyq/1yB95WKrVYU
bI/YQVPQeyPj/0Hx+TP6ofuKOMo92xZFyELwNu9rVyN7VNvJ+2xnEy4cKf0FF7eu
RwLierEbXBSrr6izyjRN6swGrraopVZFTLnfn8oloixuiL1dofsG0Oc7y86zKlrG
V3+5hPc3547ypJsKMNld+Hs22Z6L4zLylCwGYqdP6Q5D/tVAK+j9V4W0ktNRtFE2
vehMFTgG3vQr5e/nuiVJ0lvMXe9FOIgmwwL9LKUb3/pjWrTBgv8nIuqYLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeZR3k6ootLwdJTUV2NSktfwforMB8GA1UdIwQY
MBaAFKCMtbJupl2B/fY6HZsgBXCRAAOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgt
Y2VlOTNjMjVlNjM5LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgtY2VlOTNjMjVlNjM5
LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3KvSC94
oYNtTj36YnMS0MocKBRROK70EWF60bBFUV6o6JcSZ05oUQLXjpmbTCxUvDYnU7t2
5NVmTg6S7gr7szAZK4rWAzlzX3QfAzca7bxOvRQmbom4BBTFI3PAXFxJa3Vqk/l+
SeBdpDWCWACTSgs1DlLiWDeXih9nZMck4Lq/Dw82djo2vQQCORDKx9HiQjkoI53i
UOY35WYTO5sh97tMmhvjwCXfCqXIjnULI24qrXR8HH9MZ8ACjVp1TuglcXXwPOf+
qKcJmQq0rn3IJqUlLydfr7YYzarkIQ+nM1LiFqTfImgIPjPVcNV4sLbQ2YEbu1B7
fBtY4bkaFG75Jw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 15:58:43 2026 by rpki-client