Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: 9UUUpLeF+OHIeCHVhvoRFU5iIHFbgPYZXPZrz5VIEkE=
Subject key identifier: 59:08:B2:9A:52:BE:45:45:FF:EC:CC:B6:D0:F3:3C:F3:38:DE:AE:A7
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 01A107DD07AF3C5E47AD8AAB59F24EAF2461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 1322
Signing time: Sun 04 Oct 2026 17:01:28 +0000
Manifest this update: Sun 04 Oct 2026 17:01:28 +0000
Manifest next update: Mon 05 Oct 2026 17:01:28 +0000
Files and hashes: 1: Lw6dpIVKTrHkqnvz6_8ZfhY3LHE.roa (hash: zWKT6y6B8vxLNvJ+sCTyWUsXCNlPOrbo7d9YXIBVvAM=)
2: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: FRCrx3AJOBxnoUzLYozQRvaWf0tuUIW9drI8jpQNw7k=)
3: yGo3bd_PBkdSOHP97aSwO25CbMs.roa (hash: 4G7Mo+idHxtoGcT5AVhMItxtHJ9uui0A13uK+5ubrzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:dd:07:af:3c:5e:47:ad:8a:ab:59:f2:4e:af:24:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Oct 4 17:01:28 2026 GMT
Not After : Oct 5 17:01:28 2026 GMT
Subject: CN=5908b29a52be4545ffecccb6d0f33cf338deaea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:bf:0a:a7:17:0c:f4:5c:8f:73:fa:cc:15:
79:c1:bf:b9:c1:74:60:11:67:27:71:62:9c:b3:03:
68:f1:94:16:9f:56:09:4f:c4:45:96:91:b3:d2:4a:
7b:2f:a1:44:fe:c4:b0:5e:22:d9:1f:5a:03:24:8c:
81:08:07:28:a7:da:80:29:ad:e0:78:ef:f4:cc:37:
c0:1a:e6:a0:f4:e8:cc:a2:e9:55:8b:ec:16:c9:a9:
d6:3a:95:bf:d1:f7:b0:2d:29:50:da:93:2e:f8:36:
0a:36:ed:03:fb:fe:16:e0:5a:29:dc:15:2b:a7:8a:
5e:9f:93:aa:2b:69:48:d9:a5:f0:dc:f5:44:a6:76:
58:a8:16:a3:51:fb:9a:f3:5c:ef:5a:6c:6d:ef:82:
6f:35:7f:02:1a:10:c7:e2:4a:13:65:c2:09:e5:93:
55:58:60:76:40:cd:5e:b3:45:62:e2:47:c9:7f:9c:
01:cd:b5:6c:b5:a2:7c:c4:48:0e:0a:b5:3f:de:e9:
f0:cb:6c:5d:a9:c9:99:bc:81:e5:9e:92:6f:c5:71:
f9:5b:1c:7b:e9:93:66:af:ee:b3:2c:79:58:4e:e5:
21:30:6f:88:18:3f:61:cc:8a:f7:57:f1:f3:db:b7:
04:46:ed:87:d2:db:79:ab:fe:65:f5:79:e4:ed:7c:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:08:B2:9A:52:BE:45:45:FF:EC:CC:B6:D0:F3:3C:F3:38:DE:AE:A7
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:55:45:d2:a7:e4:83:5a:64:49:b1:a5:83:2a:a6:25:2d:71:
06:1c:ea:ec:18:d4:30:9d:48:a3:9d:c9:3b:77:99:10:a9:5a:
c4:34:22:c3:70:a3:73:8f:72:75:e3:6b:a7:b9:cc:05:7d:c8:
98:6e:22:35:e1:6f:b2:a0:fb:90:0a:d5:a3:63:13:49:4f:56:
8a:93:99:a6:31:1c:31:86:7f:98:42:df:90:35:f4:3d:52:10:
06:b1:f2:a8:92:a0:83:c5:b6:12:1d:14:b1:41:f3:5e:23:7b:
f9:b8:62:07:67:b4:33:3d:83:35:6e:b5:75:ac:cc:26:8c:f4:
91:8c:08:9f:d7:2d:d5:fe:c1:27:f2:6f:31:f0:ca:01:5a:ad:
6c:09:31:57:db:c2:e4:12:2e:b3:ac:43:2b:b3:02:9f:72:2d:
f0:dc:06:0c:f7:1a:37:be:d3:29:c0:9f:cf:6d:a9:72:7d:d8:
2e:63:b9:06:89:f2:12:ea:6e:95:ee:a5:84:c2:d7:95:42:6c:
ea:10:30:2d:33:f2:c3:36:cb:ae:80:86:16:36:57:a0:b4:32:
a9:f5:f9:3c:03:68:27:1b:a8:f8:54:f8:d5:22:d2:77:ff:89:
7c:82:64:3b:d9:aa:67:56:bb:32:9c:53:db:4a:ae:46:99:d5:
83:7b:4c:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEH3QevPF5HrYqrWfJOryRhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjQ2ZDNmOTA3NThkOGEzNzQzZjE1NWY2MmJmZmZmMWJi
NjM2NmEwHhcNMjYxMDA0MTcwMTI4WhcNMjYxMDA1MTcwMTI4WjAzMTEwLwYDVQQD
Eyg1OTA4YjI5YTUyYmU0NTQ1ZmZlY2NjYjZkMGYzM2NmMzM4ZGVhZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ry/CqcXDPRcj3P6zBV5wb+5wXRg
EWcncWKcswNo8ZQWn1YJT8RFlpGz0kp7L6FE/sSwXiLZH1oDJIyBCAcop9qAKa3g
eO/0zDfAGuag9OjMoulVi+wWyanWOpW/0fewLSlQ2pMu+DYKNu0D+/4W4Fop3BUr
p4pen5OqK2lI2aXw3PVEpnZYqBajUfua81zvWmxt74JvNX8CGhDH4koTZcIJ5ZNV
WGB2QM1es0Vi4kfJf5wBzbVstaJ8xEgOCrU/3unwy2xdqcmZvIHlnpJvxXH5Wxx7
6ZNmr+6zLHlYTuUhMG+IGD9hzIr3V/Hz27cERu2H0tt5q/5l9Xnk7XwaKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkIsppSvkVF/+zMttDzPPM43q6nMB8GA1UdIwQY
MBaAFKFkbT+QdY2KN0PxVfYr//8btjZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yYjcwZjAtNGRhMy00YjQ1LWE5NWQt
NDhhMjBlNmU1ZDhiLzEvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yYjcwZjAtNGRhMy00YjQ1LWE5NWQtNDhhMjBlNmU1ZDhi
LzEvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVVF0qfk
g1pkSbGlgyqmJS1xBhzq7BjUMJ1Io53JO3eZEKlaxDQiw3Cjc49ydeNrp7nMBX3I
mG4iNeFvsqD7kArVo2MTSU9WipOZpjEcMYZ/mELfkDX0PVIQBrHyqJKgg8W2Eh0U
sUHzXiN7+bhiB2e0Mz2DNW61dazMJoz0kYwIn9ct1f7BJ/JvMfDKAVqtbAkxV9vC
5BIus6xDK7MCn3It8NwGDPcaN77TKcCfz22pcn3YLmO5BonyEupule6lhMLXlUJs
6hAwLTPywzbLroCGFjZXoLQyqfX5PANoJxuo+FT41SLSd/+JfIJkO9mqZ1a7MpxT
20quRpnVg3tMgA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 07:17:31 2026 by rpki-client