Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: VNO1vxxdQQKGIhz0N87sM6lE8H10ZjcNqATtNMeBqUg=
Subject key identifier: 90:91:3D:A4:19:1F:F5:3F:92:32:93:A5:9B:DA:D1:9D:37:86:D4:21
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 01A11CACD413D1D7FBD9D5FA84CF20E0FD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 1A12
Signing time: Thu 08 Oct 2026 18:00:50 +0000
Manifest this update: Thu 08 Oct 2026 18:00:50 +0000
Manifest next update: Fri 09 Oct 2026 18:00:50 +0000
Files and hashes: 1: 2MsPFamPffku1ttx9gaJe1ffa6Y.roa (hash: DHSbfM3R76vdNxci0L/Qjop0BLeabp3SpJ5q1Jd300M=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: aAtjNd6LwTf/WRQWUZwMeOyww2rvt4Q0prVwJwzPiuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:d4:13:d1:d7:fb:d9:d5:fa:84:cf:20:e0:fd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Oct 8 18:00:50 2026 GMT
Not After : Oct 9 18:00:50 2026 GMT
Subject: CN=90913da4191ff53f923293a59bdad19d3786d421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:80:b1:02:b0:74:e7:8d:c7:15:64:05:3b:
ee:90:60:bc:7f:ee:b0:25:ba:f8:8d:4c:63:e0:02:
a5:8a:81:3b:a4:5d:26:9f:c8:e8:15:47:5b:c5:2e:
74:0f:7e:1a:35:af:ac:65:d3:71:29:28:ed:12:2d:
1d:ec:fe:c3:a6:c4:99:54:22:d6:0e:41:bb:52:7b:
01:47:ed:69:11:86:d2:86:82:3b:8a:71:ea:61:56:
b2:07:53:2f:ee:1f:dd:55:fa:46:ea:a6:d1:b3:45:
1c:bd:85:e0:86:cb:5e:3b:c7:b7:4d:28:a2:11:51:
9a:33:39:56:cd:5f:f0:f6:2e:79:56:32:15:1b:18:
10:7f:40:8d:72:a6:de:e9:c2:6b:7f:1c:71:fd:62:
37:71:76:aa:ca:55:05:0c:81:34:d7:22:f7:4f:54:
72:65:f2:cf:68:79:8a:92:b7:3c:16:ea:00:98:b9:
ea:d3:d1:9a:0d:42:7e:39:ed:e5:69:89:57:74:93:
ea:2a:0e:6d:c4:5d:ab:cc:cc:87:5a:a4:6a:c8:51:
b2:d2:6e:28:f4:8b:5f:f9:85:ab:8d:74:31:9e:6b:
21:8a:52:97:dc:86:b9:f8:79:6b:db:ab:d6:c2:8a:
67:b9:ec:f6:94:dd:9e:90:6f:17:cc:71:66:e6:a5:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:91:3D:A4:19:1F:F5:3F:92:32:93:A5:9B:DA:D1:9D:37:86:D4:21
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1e:fd:47:3f:17:c5:ee:05:2c:92:be:4a:41:52:9a:c8:e7:
e6:59:82:6f:6a:d2:77:1b:46:a6:44:c8:f6:0c:9c:a6:3a:af:
e5:a7:4f:6d:8c:8c:d5:bb:30:89:ba:75:e9:82:66:76:4f:5d:
ae:96:d7:10:29:38:2d:2e:5e:f4:ad:58:07:ea:48:d8:0d:68:
08:d8:3d:59:ce:40:75:d7:10:ea:c2:24:4c:50:6a:d1:65:f4:
0f:0f:b4:b2:6b:2a:4d:33:41:bc:46:7c:33:44:3a:31:8f:30:
51:82:70:4f:45:41:45:b7:6b:3c:6b:00:f7:1c:0b:9b:2d:d5:
08:42:67:60:ca:6a:e0:a6:cb:b8:58:14:6d:d8:09:fb:c6:18:
54:6a:7a:43:e2:ff:2a:28:5c:32:8c:8b:e1:0f:6a:d5:8e:61:
ea:1c:f3:41:2f:78:fa:79:fe:56:58:42:43:ce:59:27:e3:c7:
14:a5:54:7d:99:d7:43:12:d0:98:18:21:a8:ba:30:a3:9c:27:
d5:ad:0e:43:ff:ae:66:11:e5:5b:fb:db:07:7d:3a:6a:04:72:
e9:68:84:e4:c2:aa:f4:8f:f0:ef:80:79:0c:a6:16:55:b0:e1:
0e:0a:45:39:b7:34:58:e1:ea:7a:2b:09:09:35:fb:84:b8:34:
16:0c:c5:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEcrNQT0df72dX6hM8g4P2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZWNlYWM4MTI1NTM0YTU3OTQ3OTYyZGIyODkwM2ZhZDdh
YzNhZjkwHhcNMjYxMDA4MTgwMDUwWhcNMjYxMDA5MTgwMDUwWjAzMTEwLwYDVQQD
Eyg5MDkxM2RhNDE5MWZmNTNmOTIzMjkzYTU5YmRhZDE5ZDM3ODZkNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeGAsQKwdOeNxxVkBTvukGC8f+6w
Jbr4jUxj4AKlioE7pF0mn8joFUdbxS50D34aNa+sZdNxKSjtEi0d7P7DpsSZVCLW
DkG7UnsBR+1pEYbShoI7inHqYVayB1Mv7h/dVfpG6qbRs0UcvYXghsteO8e3TSii
EVGaMzlWzV/w9i55VjIVGxgQf0CNcqbe6cJrfxxx/WI3cXaqylUFDIE01yL3T1Ry
ZfLPaHmKkrc8FuoAmLnq09GaDUJ+Oe3laYlXdJPqKg5txF2rzMyHWqRqyFGy0m4o
9Itf+YWrjXQxnmshilKX3Ia5+Hlr26vWwopnuez2lN2ekG8XzHFm5qWsXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCRPaQZH/U/kjKTpZva0Z03htQhMB8GA1UdIwQY
MBaAFKPs6sgSVTSleUeWLbKJA/rXrDr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQt
YTliZDVlNDEwYWVkLzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQtYTliZDVlNDEwYWVk
LzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARx79Rz8X
xe4FLJK+SkFSmsjn5lmCb2rSdxtGpkTI9gycpjqv5adPbYyM1bswibp16YJmdk9d
rpbXECk4LS5e9K1YB+pI2A1oCNg9Wc5AddcQ6sIkTFBq0WX0Dw+0smsqTTNBvEZ8
M0Q6MY8wUYJwT0VBRbdrPGsA9xwLmy3VCEJnYMpq4KbLuFgUbdgJ+8YYVGp6Q+L/
KihcMoyL4Q9q1Y5h6hzzQS94+nn+VlhCQ85ZJ+PHFKVUfZnXQxLQmBghqLowo5wn
1a0OQ/+uZhHlW/vbB306agRy6WiE5MKq9I/w74B5DKYWVbDhDgpFObc0WOHqeisJ
CTX7hLg0FgzFGQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 04:45:37 2026 by rpki-client