Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: NaJ7H1HDdZFjqM7ZCV+qSCLyxcHyC6/iEQyZvZXW/ps=
Subject key identifier: 01:7E:51:D9:F2:2A:E4:D3:95:0E:FE:B5:3B:34:50:EA:27:17:88:86
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 01A0D45E042A79929107D0B64B91BED89221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 17:02:06 +0000
Manifest this update: Thu 24 Sep 2026 17:02:06 +0000
Manifest next update: Fri 25 Sep 2026 17:02:06 +0000
Files and hashes: 1: acv-v2eHqlrCvjloaRGiMlCidZI.roa (hash: oC/VXdmhm0cHY+VKvZYv7E0OaLtC7J/ULHsMcrTf+MI=)
2: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: nI4pHle+vtM48DexPbb7CaVuHXfVlu7Ar5jPNimAfas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5e:04:2a:79:92:91:07:d0:b6:4b:91:be:d8:92:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Sep 24 17:02:06 2026 GMT
Not After : Sep 25 17:02:06 2026 GMT
Subject: CN=017e51d9f22ae4d3950efeb53b3450ea27178886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:cf:cb:42:00:a3:8d:d9:02:79:ae:7f:f4:
71:37:94:ca:46:73:fb:19:0c:2c:ba:e3:40:ed:02:
6d:7c:71:e8:9d:a8:de:c4:70:d8:9c:06:be:c4:10:
e0:41:34:c2:9e:c8:c4:ce:db:79:ad:5a:30:72:87:
a8:3e:c6:e6:3b:f5:ff:41:38:72:7d:d2:ad:17:f7:
54:a3:1f:c9:e2:44:4b:a3:57:61:1b:c0:c5:c3:bc:
7a:c3:0c:37:29:65:1a:90:6e:da:c1:11:46:89:22:
e3:80:30:1f:18:1f:36:70:23:a4:13:0c:9c:d6:8e:
65:1d:13:6a:21:4d:b1:17:64:a6:fe:45:42:4a:07:
41:2a:c7:66:bd:4a:bd:78:82:73:7f:1f:a5:ca:59:
bd:98:7b:c3:d6:29:a8:d1:54:b3:e0:d7:16:91:61:
a9:8b:31:57:dc:1c:e5:81:f3:a7:20:e4:4b:c9:6e:
fa:21:c3:36:0a:30:67:92:8b:3c:b0:56:2e:23:a2:
2b:11:3d:5e:03:50:cd:03:40:75:00:dd:b1:3a:66:
ba:99:66:fe:58:d7:74:22:10:8f:cb:4f:ba:0f:6f:
a6:98:e0:7d:1c:26:90:f5:10:91:66:93:74:60:b1:
57:0f:a0:e3:3f:4a:e8:a9:b1:02:0a:94:24:af:f9:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7E:51:D9:F2:2A:E4:D3:95:0E:FE:B5:3B:34:50:EA:27:17:88:86
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3e:2d:db:f7:cd:3f:b3:59:b7:bd:a7:2c:d6:e4:49:65:13:
cc:53:15:26:f1:10:0a:90:6b:f9:fd:85:c2:4a:2d:4b:58:9a:
5a:da:58:8d:d7:af:07:49:f7:47:c2:b7:bc:3c:69:5d:88:bd:
bf:81:6a:04:b6:cd:d9:2b:08:3c:08:d1:03:60:80:ad:36:49:
c6:73:ac:52:53:e6:68:d2:44:db:72:9b:27:42:df:1f:79:4e:
53:85:5d:92:f1:b4:00:29:d2:85:69:90:67:4a:89:2b:6c:cb:
dd:9f:c1:a4:3d:88:62:d3:75:f3:ec:02:0f:b7:90:ea:80:5a:
b8:6f:1b:25:83:61:d7:00:76:b6:de:60:25:63:0d:68:ce:50:
b9:e5:9f:d2:83:aa:b3:b4:93:e8:bf:22:69:5d:46:fc:39:8b:
2c:8d:c0:41:b3:8a:42:23:cf:65:b7:76:7a:7d:90:7d:a2:7d:
7a:dc:8d:81:cf:07:12:ab:ce:d7:76:f9:c9:31:cc:52:7c:3f:
eb:fa:e3:c5:04:df:8e:5a:85:14:77:c0:a2:92:d8:33:c0:25:
2d:62:4f:d0:0b:cd:05:3c:cc:b7:1d:78:9f:9b:f9:db:e0:10:
d8:ce:ce:72:5f:bd:b1:b9:01:59:3a:a4:09:24:7a:7e:10:ff:
bd:60:fd:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXgQqeZKRB9C2S5G+2JIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMTk2NmM1YWI0ZWEwNjczY2M0MWM3ODZlMDc3ODM5NGI4
YmRhY2YwHhcNMjYwOTI0MTcwMjA2WhcNMjYwOTI1MTcwMjA2WjAzMTEwLwYDVQQD
EygwMTdlNTFkOWYyMmFlNGQzOTUwZWZlYjUzYjM0NTBlYTI3MTc4ODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuXPy0IAo43ZAnmuf/RxN5TKRnP7
GQwsuuNA7QJtfHHonajexHDYnAa+xBDgQTTCnsjEztt5rVowcoeoPsbmO/X/QThy
fdKtF/dUox/J4kRLo1dhG8DFw7x6www3KWUakG7awRFGiSLjgDAfGB82cCOkEwyc
1o5lHRNqIU2xF2Sm/kVCSgdBKsdmvUq9eIJzfx+lylm9mHvD1imo0VSz4NcWkWGp
izFX3BzlgfOnIORLyW76IcM2CjBnkos8sFYuI6IrET1eA1DNA0B1AN2xOma6mWb+
WNd0IhCPy0+6D2+mmOB9HCaQ9RCRZpN0YLFXD6DjP0roqbECCpQkr/kmAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAF+UdnyKuTTlQ7+tTs0UOonF4iGMB8GA1UdIwQY
MBaAFKEZZsWrTqBnPMQceG4HeDlLi9rPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgt
NGE3NWExNDEyMWJmLzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgtNGE3NWExNDEyMWJm
LzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz4t2/fN
P7NZt72nLNbkSWUTzFMVJvEQCpBr+f2FwkotS1iaWtpYjdevB0n3R8K3vDxpXYi9
v4FqBLbN2SsIPAjRA2CArTZJxnOsUlPmaNJE23KbJ0LfH3lOU4VdkvG0ACnShWmQ
Z0qJK2zL3Z/BpD2IYtN18+wCD7eQ6oBauG8bJYNh1wB2tt5gJWMNaM5QueWf0oOq
s7ST6L8iaV1G/DmLLI3AQbOKQiPPZbd2en2QfaJ9etyNgc8HEqvO13b5yTHMUnw/
6/rjxQTfjlqFFHfAopLYM8AlLWJP0AvNBTzMtx14n5v52+AQ2M7Ocl+9sbkBWTqk
CSR6fhD/vWD9uQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:32:46 2026 by rpki-client