Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: Rh0I/Avopf4raS6vfdEoOP8spC93AjBBz1IO+bxaxHM=
Subject key identifier: 8C:DE:A3:E8:6C:19:C2:C0:7C:5F:1A:AB:ED:8F:1E:89:F7:2B:55:7E
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 01A0F1FA4FDCFA25A5135259989377D9A26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 1A7F
Signing time: Wed 30 Sep 2026 11:01:48 +0000
Manifest this update: Wed 30 Sep 2026 11:01:48 +0000
Manifest next update: Thu 01 Oct 2026 11:01:48 +0000
Files and hashes: 1: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: Mw9jPnLJc3y4IzAT/kAuCEcSYxSVykGtJLVy7EOOPoE=)
2: XY5E_RelyGQ_x471R3yDmTVoDTk.roa (hash: eROWL67g5W2cGW9pnAdECfpL0HCLybLp8h6TDlEvGJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:fa:4f:dc:fa:25:a5:13:52:59:98:93:77:d9:a2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Sep 30 11:01:48 2026 GMT
Not After : Oct 1 11:01:48 2026 GMT
Subject: CN=8cdea3e86c19c2c07c5f1aabed8f1e89f72b557e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:88:00:70:bf:2c:ce:5b:81:e5:ae:a9:e6:
72:f1:6b:6b:cd:69:10:35:c4:4d:93:57:1a:c5:c8:
fd:b0:8f:0e:26:36:52:42:f2:14:0b:8b:ea:a9:c7:
ea:21:13:8c:04:95:75:14:7c:f1:46:c3:9c:a6:d6:
d1:ed:d4:76:8f:f7:88:b9:63:25:1e:9a:56:1b:b8:
62:29:cf:5c:d7:83:d9:2c:6f:11:b7:cd:88:b2:d7:
82:09:4f:ef:90:07:40:f2:20:24:12:8a:fd:82:05:
25:48:23:a8:a9:67:8f:4d:60:fd:8d:70:6a:7f:bc:
f6:b0:2d:1f:91:8e:d7:7d:47:f7:e7:d9:c3:ef:ad:
75:e3:a9:81:04:47:86:61:f5:fa:15:ce:33:3e:54:
a4:e2:04:ce:39:2d:dc:00:63:b5:8c:22:9c:08:a3:
a6:86:10:e7:27:e4:71:8a:61:fc:31:d5:06:12:e3:
23:8e:30:e1:67:e1:31:6d:b8:7d:bd:a1:99:88:17:
2a:07:62:98:89:75:ae:f4:89:25:28:51:c6:c4:e4:
ab:99:24:ea:cf:18:df:6e:a6:19:a5:4a:87:53:36:
1f:70:17:c3:b1:79:13:c5:c8:e2:66:57:df:a9:25:
19:b8:81:76:4b:1d:2b:9e:06:6c:95:f3:ca:45:62:
62:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DE:A3:E8:6C:19:C2:C0:7C:5F:1A:AB:ED:8F:1E:89:F7:2B:55:7E
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1e:8a:69:b8:28:6a:07:ff:05:92:ba:aa:f2:ef:a6:94:d4:
d9:70:d2:87:e8:5a:91:9d:8b:32:a7:af:b9:fb:d0:c1:6a:71:
34:01:ee:85:41:5f:23:41:20:b9:d5:e4:ba:b6:0e:36:d7:60:
95:88:47:28:ba:cf:43:aa:b6:6c:b7:0f:58:83:56:30:5e:f5:
7a:b4:1d:0a:3e:b6:e7:d5:78:49:31:15:aa:15:d0:5d:cd:65:
f3:18:90:94:3f:cb:72:79:05:79:0a:d9:12:4f:9b:2d:94:88:
94:70:c1:1f:a1:7f:df:57:5b:a1:d5:71:39:f4:fa:5d:35:f9:
6b:f9:26:88:96:72:60:5f:8d:e4:50:28:0c:9b:fe:90:0b:23:
f2:8d:f9:c3:9f:1f:44:65:28:ab:39:79:fa:ed:22:41:ca:4a:
34:e1:e7:a5:8d:50:f0:4f:95:82:54:ac:23:fb:09:2f:ad:8c:
ff:6c:12:a0:83:fa:50:e2:45:36:9b:f0:0f:f0:53:9b:50:6a:
78:e2:72:d9:a3:26:7e:10:b3:54:d6:38:9d:42:e8:95:b8:2b:
60:58:87:b9:85:a3:1f:83:b0:9b:c2:18:f2:ca:77:cc:75:a0:
ac:c2:1c:a4:ba:5b:21:a6:3a:0d:f2:a8:14:f6:50:74:8b:6f:
a1:a4:1d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDx+k/c+iWlE1JZmJN32aJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDgyYjEzMjBiOTgwZjQ2ZDZlNDA0ZmU3ZDU4YmRiMTFk
NTBmZDMwHhcNMjYwOTMwMTEwMTQ4WhcNMjYxMDAxMTEwMTQ4WjAzMTEwLwYDVQQD
Eyg4Y2RlYTNlODZjMTljMmMwN2M1ZjFhYWJlZDhmMWU4OWY3MmI1NTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXWIAHC/LM5bgeWuqeZy8WtrzWkQ
NcRNk1caxcj9sI8OJjZSQvIUC4vqqcfqIROMBJV1FHzxRsOcptbR7dR2j/eIuWMl
HppWG7hiKc9c14PZLG8Rt82IsteCCU/vkAdA8iAkEor9ggUlSCOoqWePTWD9jXBq
f7z2sC0fkY7XfUf359nD761146mBBEeGYfX6Fc4zPlSk4gTOOS3cAGO1jCKcCKOm
hhDnJ+RximH8MdUGEuMjjjDhZ+Exbbh9vaGZiBcqB2KYiXWu9IklKFHGxOSrmSTq
zxjfbqYZpUqHUzYfcBfDsXkTxcjiZlffqSUZuIF2Sx0rngZslfPKRWJiqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzeo+hsGcLAfF8aq+2PHon3K1V+MB8GA1UdIwQY
MBaAFDhIKxMguYD0bW5AT+fVi9sR1Q/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAt
NWNmNDNkMzU5MDhlLzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAtNWNmNDNkMzU5MDhl
LzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPR6Kabgo
agf/BZK6qvLvppTU2XDSh+hakZ2LMqevufvQwWpxNAHuhUFfI0EgudXkurYONtdg
lYhHKLrPQ6q2bLcPWINWMF71erQdCj6259V4STEVqhXQXc1l8xiQlD/LcnkFeQrZ
Ek+bLZSIlHDBH6F/31dbodVxOfT6XTX5a/kmiJZyYF+N5FAoDJv+kAsj8o35w58f
RGUoqzl5+u0iQcpKNOHnpY1Q8E+VglSsI/sJL62M/2wSoIP6UOJFNpvwD/BTm1Bq
eOJy2aMmfhCzVNY4nULolbgrYFiHuYWjH4Owm8IY8sp3zHWgrMIcpLpbIaY6DfKo
FPZQdItvoaQd1A==
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:55:38 2026 by rpki-client