Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
File: oikngd9NLEc3PD_fY_u8mSdL2ds.mft (raw, json)
Hash identifier: DY61jqZwGWXSsIzsxQ9BjxijF1t6gf41mVg/4i1GHWU=
Subject key identifier: AE:7E:A3:0D:B0:F0:A3:54:04:1C:86:E2:6F:27:23:2F:1F:4E:9B:0E
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 01A0D9F141BE9316A46EE616E2349D8892FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
Manifest number: 0235
Signing time: Fri 25 Sep 2026 19:01:01 +0000
Manifest this update: Fri 25 Sep 2026 19:01:01 +0000
Manifest next update: Sat 26 Sep 2026 19:01:01 +0000
Files and hashes: 1: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (hash: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=)
2: gD1shI7_ncKmAHHzuQDRToVphgs.roa (hash: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=)
3: oikngd9NLEc3PD_fY_u8mSdL2ds.crl (hash: 5Yy5TefxPOg7V9ZdCd/OjR8rjSpKxFrphJXkMBkZQws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:41:be:93:16:a4:6e:e6:16:e2:34:9d:88:92:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Sep 25 19:01:01 2026 GMT
Not After : Sep 26 19:01:01 2026 GMT
Subject: CN=ae7ea30db0f0a354041c86e26f27232f1f4e9b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:42:14:a4:0b:a3:48:e3:2b:67:92:a0:f4:
16:e9:ed:38:f0:bf:c4:27:94:f6:1b:2b:d1:32:e3:
e5:f8:46:b8:42:9d:72:5f:06:b9:cc:1a:94:9c:6d:
1f:4d:0d:98:14:39:76:c7:b5:ba:6d:4b:65:fd:80:
20:8e:21:6d:9f:95:ad:74:33:dd:93:af:bf:2b:fb:
ba:05:ab:83:68:ac:8a:50:5d:58:09:33:46:7c:aa:
20:de:a4:f5:7b:0e:89:2a:30:cd:b0:1a:66:e3:d1:
12:7a:88:8e:c9:77:56:64:c2:e3:ea:ce:f3:8c:3b:
5e:32:1a:5d:4a:a5:28:31:a8:cc:b8:f9:85:50:a8:
45:38:f3:4d:98:6c:05:69:2d:42:61:49:bd:78:7f:
d6:89:b3:e1:f6:80:03:1a:a1:3e:d4:da:62:59:ba:
32:d3:62:87:39:3b:63:d4:03:9d:c6:55:3c:f6:74:
a7:0c:e8:60:6d:84:c3:78:d4:b8:3d:13:2b:5c:f7:
4f:5b:0b:dc:20:07:ac:bc:3c:2e:fd:fd:ab:be:c6:
32:18:2e:3c:b8:9f:f0:df:64:f2:44:2d:6c:fc:4b:
a4:c5:df:a2:bc:c6:3b:08:e1:95:6f:52:19:70:a2:
6a:16:61:fd:fb:17:08:ef:2b:fb:9a:48:f1:c2:6f:
dd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7E:A3:0D:B0:F0:A3:54:04:1C:86:E2:6F:27:23:2F:1F:4E:9B:0E
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:56:6b:84:1a:15:31:3f:59:5d:2a:37:ee:f5:5f:86:6d:7b:
c0:6a:28:34:74:d4:e9:54:8a:77:8a:7f:8f:b2:3a:fa:c3:41:
dc:67:ee:3b:df:49:cd:8b:ae:38:4f:f4:68:9e:58:ad:e5:61:
9c:ab:e8:7e:e6:d4:71:1c:d5:66:e6:a4:5b:f6:d4:94:1c:b8:
1c:d5:94:70:9a:37:3e:6d:54:e9:88:b2:a9:46:41:c8:b1:16:
54:df:4d:28:7b:d1:c8:82:d0:e1:7c:f5:2e:f2:03:2d:46:62:
91:b6:72:84:02:ae:98:4f:00:a6:07:d2:c2:44:df:1f:d4:3c:
f8:59:35:ba:c1:c8:1f:e2:c6:f7:e8:38:05:8d:ac:03:e3:6d:
f0:f2:b5:19:fc:43:1b:6c:f6:b6:62:9c:df:66:73:ec:04:7d:
b6:3f:25:9c:41:04:cf:55:07:84:af:30:f5:03:ed:bc:cb:3c:
e1:da:84:7b:f2:13:b5:8d:eb:0f:c9:7f:74:d6:d2:f4:82:99:
51:3e:da:ee:d6:62:92:2b:c6:a0:66:47:bf:62:79:23:b8:39:
94:04:dd:7e:5b:bd:80:97:34:b7:77:ba:6e:19:92:fc:f3:61:
ad:f5:39:06:a0:a9:17:74:27:ec:d2:94:8d:70:b0:57:d1:ea:
8a:63:a9:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZ8UG+kxakbuYW4jSdiJL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMjkyNzgxZGY0ZDJjNDczNzNjM2ZkZjYzZmJiYzk5Mjc0
YmQ5ZGIwHhcNMjYwOTI1MTkwMTAxWhcNMjYwOTI2MTkwMTAxWjAzMTEwLwYDVQQD
EyhhZTdlYTMwZGIwZjBhMzU0MDQxYzg2ZTI2ZjI3MjMyZjFmNGU5YjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBNCFKQLo0jjK2eSoPQW6e048L/E
J5T2GyvRMuPl+Ea4Qp1yXwa5zBqUnG0fTQ2YFDl2x7W6bUtl/YAgjiFtn5WtdDPd
k6+/K/u6BauDaKyKUF1YCTNGfKog3qT1ew6JKjDNsBpm49ESeoiOyXdWZMLj6s7z
jDteMhpdSqUoMajMuPmFUKhFOPNNmGwFaS1CYUm9eH/WibPh9oADGqE+1NpiWboy
02KHOTtj1AOdxlU89nSnDOhgbYTDeNS4PRMrXPdPWwvcIAesvDwu/f2rvsYyGC48
uJ/w32TyRC1s/Eukxd+ivMY7COGVb1IZcKJqFmH9+xcI7yv7mkjxwm/dLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5+ow2w8KNUBByG4m8nIy8fTpsOMB8GA1UdIwQY
MBaAFKIpJ4HfTSxHNzw/32P7vJknS9nbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NjY1N2YtMGQxNS00MjExLWEzMjgt
NjllYTgxNDU5NThiLzEvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS83NjY1N2YtMGQxNS00MjExLWEzMjgtNjllYTgxNDU5NThi
LzEvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlZrhBoV
MT9ZXSo37vVfhm17wGooNHTU6VSKd4p/j7I6+sNB3GfuO99JzYuuOE/0aJ5YreVh
nKvofubUcRzVZuakW/bUlBy4HNWUcJo3Pm1U6YiyqUZByLEWVN9NKHvRyILQ4Xz1
LvIDLUZikbZyhAKumE8ApgfSwkTfH9Q8+Fk1usHIH+LG9+g4BY2sA+Nt8PK1GfxD
G2z2tmKc32Zz7AR9tj8lnEEEz1UHhK8w9QPtvMs84dqEe/ITtY3rD8l/dNbS9IKZ
UT7a7tZikivGoGZHv2J5I7g5lATdflu9gJc0t3e6bhmS/PNhrfU5BqCpF3Qn7NKU
jXCwV9HqimOpIQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:09:52 2026 by rpki-client