Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: TSsIZg9yLQDdsQ1xHtnj+o9VSqof7IcoeGnhsx8dppc=
Subject key identifier: 9B:0F:29:D4:75:33:9B:78:07:69:5A:64:7B:CE:9A:AD:39:37:06:21
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 019E1E6C0CF331B32987DA1ABA14B7F95BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 11A0
Signing time: Tue 12 May 2026 23:00:58 +0000
Manifest this update: Tue 12 May 2026 23:00:58 +0000
Manifest next update: Wed 13 May 2026 23:00:58 +0000
Files and hashes: 1: Lw6dpIVKTrHkqnvz6_8ZfhY3LHE.roa (hash: zWKT6y6B8vxLNvJ+sCTyWUsXCNlPOrbo7d9YXIBVvAM=)
2: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: RoocK2q4E9lzhd4nllplAVOIBt5r2JLcjn+KbRpc/is=)
3: yGo3bd_PBkdSOHP97aSwO25CbMs.roa (hash: 4G7Mo+idHxtoGcT5AVhMItxtHJ9uui0A13uK+5ubrzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0c:f3:31:b3:29:87:da:1a:ba:14:b7:f9:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: May 12 23:00:58 2026 GMT
Not After : May 13 23:00:58 2026 GMT
Subject: CN=9b0f29d475339b7807695a647bce9aad39370621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:f6:bb:b5:5b:c7:37:5a:3e:b1:63:cf:4c:
3c:4d:56:b9:66:a9:0a:f0:ca:6e:10:e9:39:c7:ff:
c1:b6:28:77:e5:05:14:ed:53:d9:ad:d9:1e:37:26:
fb:e6:f5:bb:75:57:d8:dc:d3:48:1b:cf:33:cf:23:
a3:0d:ca:21:91:a9:32:80:2b:52:d0:7f:df:53:23:
ed:8d:59:36:90:85:b0:0d:bf:19:d6:02:76:b1:02:
ac:6b:08:c4:5e:49:90:96:dd:e5:0b:9b:7b:d1:dc:
90:1b:c8:6f:8c:e6:ff:d9:2a:aa:04:56:fc:be:d9:
e0:5c:53:ef:c9:86:83:f2:0e:67:bc:c7:21:f3:a0:
47:74:8b:91:fb:44:40:21:a9:95:f8:a5:03:15:0c:
19:db:4e:36:5b:3f:8b:13:8b:60:6e:f3:f6:76:fb:
d1:23:df:51:ee:ce:8c:7c:7c:93:87:00:1f:09:a3:
b2:6b:6c:04:2f:7a:47:d0:cb:f6:9d:9d:3f:60:e0:
77:c3:c5:ba:28:ee:94:43:12:07:82:b8:43:2a:db:
79:1b:f2:f8:96:f9:98:fb:6e:bf:c3:28:84:c2:cf:
ab:86:78:90:d9:70:16:03:2e:ad:13:d3:94:c5:89:
34:7c:14:4b:7a:e6:81:dc:77:4f:5e:92:12:e2:0f:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0F:29:D4:75:33:9B:78:07:69:5A:64:7B:CE:9A:AD:39:37:06:21
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9f:de:9c:47:23:d1:35:d6:23:64:ff:d4:d1:7d:86:49:4c:
11:d5:f6:49:04:aa:92:a5:57:d6:d7:e3:75:3d:75:27:99:c0:
05:6e:ad:5e:13:22:d6:23:3c:42:a1:62:0d:ab:f5:cb:6c:61:
7c:86:25:10:c6:56:e6:d9:c7:e4:d4:70:26:86:c9:59:a0:f4:
02:9d:ae:f0:1d:0c:3e:61:3e:5b:7e:ef:51:91:cf:cd:33:34:
dc:44:37:58:99:20:29:fe:9a:18:59:be:f3:40:90:bd:1c:e5:
0f:cd:5a:1d:ca:15:9a:c4:e1:bd:15:7e:a4:5f:06:7b:f3:83:
6b:f0:f0:b8:f7:1f:be:37:53:02:fe:c9:1a:36:b1:48:9f:79:
2d:b0:ce:40:ac:ee:6e:99:a8:33:fe:60:b8:a9:8c:01:63:98:
3b:c3:87:72:55:eb:cc:f6:ca:a3:2e:46:6b:bf:bf:b9:b7:ce:
66:34:ed:0a:35:54:3e:98:c5:7e:cc:45:9c:44:0d:b8:04:bf:
ec:b9:c0:8f:25:1a:d2:ff:5d:48:a1:9c:0b:c7:f8:b2:87:80:
53:91:ad:45:58:84:61:f3:a9:86:36:a8:c3:8f:d8:15:dc:21:
9a:ef:fa:0d:7a:f4:38:9a:40:29:3c:e7:d7:dd:98:77:17:52:
69:8f:88:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebAzzMbMph9oauhS3+VvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjQ2ZDNmOTA3NThkOGEzNzQzZjE1NWY2MmJmZmZmMWJi
NjM2NmEwHhcNMjYwNTEyMjMwMDU4WhcNMjYwNTEzMjMwMDU4WjAzMTEwLwYDVQQD
Eyg5YjBmMjlkNDc1MzM5Yjc4MDc2OTVhNjQ3YmNlOWFhZDM5MzcwNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcP2u7VbxzdaPrFjz0w8TVa5ZqkK
8MpuEOk5x//Btih35QUU7VPZrdkeNyb75vW7dVfY3NNIG88zzyOjDcohkakygCtS
0H/fUyPtjVk2kIWwDb8Z1gJ2sQKsawjEXkmQlt3lC5t70dyQG8hvjOb/2SqqBFb8
vtngXFPvyYaD8g5nvMch86BHdIuR+0RAIamV+KUDFQwZ2042Wz+LE4tgbvP2dvvR
I99R7s6MfHyThwAfCaOya2wEL3pH0Mv2nZ0/YOB3w8W6KO6UQxIHgrhDKtt5G/L4
lvmY+26/wyiEws+rhniQ2XAWAy6tE9OUxYk0fBRLeuaB3HdPXpIS4g9D0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsPKdR1M5t4B2laZHvOmq05NwYhMB8GA1UdIwQY
MBaAFKFkbT+QdY2KN0PxVfYr//8btjZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yYjcwZjAtNGRhMy00YjQ1LWE5NWQt
NDhhMjBlNmU1ZDhiLzEvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yYjcwZjAtNGRhMy00YjQ1LWE5NWQtNDhhMjBlNmU1ZDhi
LzEvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5/enEcj
0TXWI2T/1NF9hklMEdX2SQSqkqVX1tfjdT11J5nABW6tXhMi1iM8QqFiDav1y2xh
fIYlEMZW5tnH5NRwJobJWaD0Ap2u8B0MPmE+W37vUZHPzTM03EQ3WJkgKf6aGFm+
80CQvRzlD81aHcoVmsThvRV+pF8Ge/ODa/DwuPcfvjdTAv7JGjaxSJ95LbDOQKzu
bpmoM/5guKmMAWOYO8OHclXrzPbKoy5Ga7+/ubfOZjTtCjVUPpjFfsxFnEQNuAS/
7LnAjyUa0v9dSKGcC8f4soeAU5GtRViEYfOphjaow4/YFdwhmu/6DXr0OJpAKTzn
192YdxdSaY+IXQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:42:44 2026 by rpki-client