
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
File: oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft (raw, json)
Hash identifier: gz1+qyq6CDfKr1z82AjxfiyqiHu9SmVs9ksrvc9zHHE=
Subject key identifier: AC:0F:37:0C:E2:8B:14:77:1D:2D:8C:59:69:E3:98:DB:9E:FE:8E:93
Authority key identifier: A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
Certificate issuer: /CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Certificate serial: 01A0D64C5436184E4E239F5D74135C505BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
Manifest number: 018D
Signing time: Fri 25 Sep 2026 02:02:01 +0000
Manifest this update: Fri 25 Sep 2026 02:02:01 +0000
Manifest next update: Sat 26 Sep 2026 02:02:01 +0000
Files and hashes: 1: aPHgHDs8wZHtsWjj-BGNDzZUqVw.asa (hash: xCblPYPS0g+4wFl3k4nN7Rdc1pcGx5xLzvzdxGTb7kU=)
2: oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl (hash: gdOU6vbF6CiRVyDjY4IMPk7e9qWyb9y79FL9G6bM8ds=)
3: rfnpKAqIl3YHBE0u0rKLog4npJ8.roa (hash: e2aXB5iCVJvKeAcAsidwehVczzB3FZGwEfrPbuvBxKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:54:36:18:4e:4e:23:9f:5d:74:13:5c:50:5b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Validity
Not Before: Sep 25 02:02:01 2026 GMT
Not After : Sep 26 02:02:01 2026 GMT
Subject: CN=ac0f370ce28b14771d2d8c5969e398db9efe8e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b5:c6:50:f0:4b:c5:6d:9a:e9:d5:24:02:83:
35:ff:49:f6:89:69:18:5c:e5:d6:c3:41:74:32:d8:
dc:3f:19:c5:13:1e:ba:9e:80:5b:0d:4d:c6:0d:6a:
6e:a0:1f:17:4e:88:57:21:4e:ce:4c:be:cc:79:dd:
45:9a:2f:99:b1:02:f5:ff:a2:58:9a:06:e1:da:54:
44:c6:98:25:bb:37:6c:6f:a4:1e:f0:81:98:4f:e6:
dd:72:e5:8d:a9:89:47:47:f6:5c:80:12:a1:56:30:
00:6e:fc:97:1e:5e:38:1c:d9:2a:0a:d2:45:02:49:
6f:92:ad:a1:49:ad:d5:00:8f:e3:c4:3a:c8:b2:62:
fe:8e:5e:c8:5b:2b:33:bc:fc:2a:ed:29:c1:d0:d9:
da:f9:ca:b4:84:e8:2c:b8:2b:1b:07:55:7b:4d:18:
ac:47:4c:e4:9f:87:85:04:12:83:73:70:69:ab:fa:
a9:ff:0e:85:ab:ae:98:70:68:bc:1c:33:bf:fa:1d:
57:0c:3f:0f:30:34:66:95:8c:e2:1c:c8:8d:60:d5:
f5:93:41:98:23:98:ed:bf:c5:6e:48:7e:8d:df:83:
a7:ba:40:d6:d0:8a:8f:cc:13:fe:8c:38:af:3b:fd:
dd:73:dd:cc:67:7d:21:da:45:15:dc:b6:b8:a3:1a:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0F:37:0C:E2:8B:14:77:1D:2D:8C:59:69:E3:98:DB:9E:FE:8E:93
X509v3 Authority Key Identifier:
keyid:A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:aa:aa:c4:b8:74:fc:a7:48:b9:0d:72:6c:53:be:16:4a:69:
e5:32:e1:0b:67:4b:42:36:a4:32:68:f1:6b:96:91:80:bf:25:
7f:92:12:ce:f1:93:8b:09:b3:bf:16:5c:5b:ea:90:c5:49:4e:
2c:98:f1:f5:ab:62:1e:a3:cd:7f:95:7b:d9:c0:40:a7:9f:46:
50:fe:a0:27:9c:1c:85:48:ff:33:7d:e2:f2:c4:75:be:ea:74:
76:e7:b2:c2:97:34:8b:40:33:e7:57:29:7e:d0:92:fa:4b:a2:
c8:8c:60:00:50:19:bf:bb:65:14:94:40:d6:63:0d:84:f4:c9:
29:10:1c:1e:35:8b:a9:d0:ff:ca:d4:43:e3:0e:a9:87:75:c7:
33:f7:ee:c8:fe:25:c7:21:db:87:8a:7b:3e:10:f3:a4:f7:bb:
06:77:c1:42:e0:24:a1:88:e8:76:ed:d9:22:e9:e9:05:5b:c2:
c4:46:bd:0c:88:74:99:be:82:a4:8f:13:2f:1b:ce:51:67:7a:
1c:85:04:68:92:6b:9b:f2:b5:bf:2b:36:51:36:bb:c8:b2:ea:
eb:f0:e3:ad:72:f3:5d:2d:11:e2:5a:c4:fb:b0:c6:6f:31:3a:
a4:cc:78:a1:2b:99:54:08:69:94:ed:38:03:47:87:d3:57:77:
b0:54:31:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWTFQ2GE5OI59ddBNcUFvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMWYwNTdlYjJlNjQ4MWM1NWYzZTg4ZjQ1N2VkOGNkYTFj
OGFkYzMwHhcNMjYwOTI1MDIwMjAxWhcNMjYwOTI2MDIwMjAxWjAzMTEwLwYDVQQD
EyhhYzBmMzcwY2UyOGIxNDc3MWQyZDhjNTk2OWUzOThkYjllZmU4ZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bXGUPBLxW2a6dUkAoM1/0n2iWkY
XOXWw0F0MtjcPxnFEx66noBbDU3GDWpuoB8XTohXIU7OTL7Med1Fmi+ZsQL1/6JY
mgbh2lRExpgluzdsb6Qe8IGYT+bdcuWNqYlHR/ZcgBKhVjAAbvyXHl44HNkqCtJF
Aklvkq2hSa3VAI/jxDrIsmL+jl7IWyszvPwq7SnB0Nna+cq0hOgsuCsbB1V7TRis
R0zkn4eFBBKDc3Bpq/qp/w6Fq66YcGi8HDO/+h1XDD8PMDRmlYziHMiNYNX1k0GY
I5jtv8VuSH6N34OnukDW0IqPzBP+jDivO/3dc93MZ30h2kUV3La4oxqw8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwPNwziixR3HS2MWWnjmNue/o6TMB8GA1UdIwQY
MBaAFKAfBX6y5kgcVfPoj0V+2M2hyK3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0I4RmZyTG1TQnhWOC1pUFJYN1l6YUhJcmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kNzU0N2QtYTQyMy00ZjkwLWI4ZDkt
ZGRlYmIwNTU5MjVhLzEvb0I4RmZyTG1TQnhWOC1pUFJYN1l6YUhJcmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kNzU0N2QtYTQyMy00ZjkwLWI4ZDktZGRlYmIwNTU5MjVh
LzEvb0I4RmZyTG1TQnhWOC1pUFJYN1l6YUhJcmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6qqxLh0
/KdIuQ1ybFO+Fkpp5TLhC2dLQjakMmjxa5aRgL8lf5ISzvGTiwmzvxZcW+qQxUlO
LJjx9atiHqPNf5V72cBAp59GUP6gJ5wchUj/M33i8sR1vup0dueywpc0i0Az51cp
ftCS+kuiyIxgAFAZv7tlFJRA1mMNhPTJKRAcHjWLqdD/ytRD4w6ph3XHM/fuyP4l
xyHbh4p7PhDzpPe7BnfBQuAkoYjodu3ZIunpBVvCxEa9DIh0mb6CpI8TLxvOUWd6
HIUEaJJrm/K1vys2UTa7yLLq6/DjrXLzXS0R4lrE+7DGbzE6pMx4oSuZVAhplO04
A0eH01d3sFQxzA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:30:41 2026 by rpki-client