Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File: 5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier: SLYz4MScFDslpCRqtWfWB+Mdd8h3I2qX40KiW6GQnn8=
Subject key identifier: 69:7C:A2:C0:35:3F:7E:69:45:1D:EC:3C:36:1B:E3:B3:10:9E:77:52
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 01A0CF6CBC72CDD2C002BAD6E1404BC46055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 18:00:04 +0000
Manifest this update: Wed 23 Sep 2026 18:00:04 +0000
Manifest next update: Thu 24 Sep 2026 18:00:04 +0000
Files and hashes: 1: 1nHUlwt2X9A095aW8Ml7tVPj8v4.roa (hash: eAfz7g6fQcUQW5klBUU8wHwhbjDDEZDHt243j4/4j64=)
2: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: 3XtZ4ox04YwZxhMFkg6zCdE7YAgIjV6oPjcd4hUuVX4=)
3: Nq0UTD_SclIG9HFMOsAxBcWAB9U.roa (hash: znYnyo3jsEa5JPCdrns9UrjveBbD2qT9TL2pzWDyjTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:bc:72:cd:d2:c0:02:ba:d6:e1:40:4b:c4:60:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Sep 23 18:00:04 2026 GMT
Not After : Sep 24 18:00:04 2026 GMT
Subject: CN=697ca2c0353f7e69451dec3c361be3b3109e7752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:d1:3d:67:fc:c2:08:47:61:77:25:93:46:
36:e4:9f:21:7b:45:66:5c:e0:d4:ed:59:e3:a6:64:
51:b9:86:b6:c7:8d:5f:ce:0a:91:60:93:5a:fa:91:
13:45:00:8f:1c:a6:e6:33:d3:b9:24:d6:66:a0:a8:
42:d6:f0:67:ee:f5:16:d1:41:53:76:07:12:44:f3:
d7:9f:3c:8c:ce:2e:bf:65:db:23:82:b9:12:01:6f:
a2:09:87:fc:e2:87:f9:5c:9e:57:de:74:9f:92:fc:
69:ba:fe:b1:a2:a8:7c:2a:57:c3:bf:d9:7e:66:d7:
9c:91:2b:d2:57:2a:5f:56:66:8b:48:de:a0:c4:2d:
b6:d4:3b:a1:d2:d4:6b:83:2b:c1:65:b3:19:d8:19:
24:96:56:8f:4f:c0:fc:cc:cb:4d:65:db:77:24:63:
29:ad:a3:90:39:5b:86:c1:56:49:d2:ff:7a:8a:cc:
05:26:85:e8:0f:2b:10:b0:c8:a2:7e:4d:fd:7a:e7:
c9:ee:5f:4f:98:a7:5c:1c:ce:ba:92:8b:49:f2:f9:
49:45:f5:da:e9:65:c6:1c:cb:d0:35:95:b7:52:aa:
dd:30:18:fc:39:fa:79:d8:45:cb:7f:e0:d0:7e:90:
c6:78:41:a1:d8:d8:26:ca:34:e4:2c:bc:c5:46:d2:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7C:A2:C0:35:3F:7E:69:45:1D:EC:3C:36:1B:E3:B3:10:9E:77:52
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:1a:0c:65:4d:26:61:db:63:a3:38:4a:a0:20:d9:8c:0f:7c:
ae:29:65:4a:73:9e:77:40:c9:f7:f8:c0:fc:34:da:19:6f:34:
30:95:7a:4d:04:43:56:3c:3b:20:b9:cf:1e:6c:7e:fc:64:ae:
2a:7e:4c:2a:52:df:db:a2:7f:3c:63:6e:e3:e8:77:af:a6:72:
34:33:d6:3a:bd:c3:8c:96:a6:3a:02:e8:d1:18:01:93:34:e5:
58:2f:04:00:28:84:76:02:5d:51:79:ce:1b:52:39:dc:e2:a6:
98:55:0d:da:6f:99:3d:41:50:a7:77:53:2b:5f:f7:1b:44:9f:
a2:d8:97:fd:a0:e3:ff:ee:13:de:44:52:ec:68:79:5d:f7:ca:
49:53:ea:ae:6e:e8:b5:2e:8e:31:93:11:85:82:c9:fb:6f:9e:
24:35:b2:ee:6d:96:f6:d6:08:d6:a2:fa:53:3a:6a:37:93:a1:
b2:c4:22:24:25:bb:ea:4d:6a:5b:0e:ef:1e:10:8e:39:c7:44:
a4:9e:f6:8b:bd:94:6f:84:33:d2:24:9b:7c:00:11:66:d2:9b:
d7:26:b8:95:ec:25:bc:df:7d:e4:65:17:9f:35:e4:b2:23:9f:
af:30:21:80:4d:ac:cc:e4:4a:4d:75:84:7f:20:b5:d6:be:11:
c5:7f:0b:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbLxyzdLAArrW4UBLxGBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OGNlODZkNDA5ZTgyNDM3NjU2MGZlM2IxYTE2OGYyYmEw
MDgyZTMwHhcNMjYwOTIzMTgwMDA0WhcNMjYwOTI0MTgwMDA0WjAzMTEwLwYDVQQD
Eyg2OTdjYTJjMDM1M2Y3ZTY5NDUxZGVjM2MzNjFiZTNiMzEwOWU3NzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/fRPWf8wghHYXclk0Y25J8he0Vm
XODU7VnjpmRRuYa2x41fzgqRYJNa+pETRQCPHKbmM9O5JNZmoKhC1vBn7vUW0UFT
dgcSRPPXnzyMzi6/ZdsjgrkSAW+iCYf84of5XJ5X3nSfkvxpuv6xoqh8KlfDv9l+
ZteckSvSVypfVmaLSN6gxC221Duh0tRrgyvBZbMZ2BkkllaPT8D8zMtNZdt3JGMp
raOQOVuGwVZJ0v96iswFJoXoDysQsMiifk39eufJ7l9PmKdcHM66kotJ8vlJRfXa
6WXGHMvQNZW3UqrdMBj8Ofp52EXLf+DQfpDGeEGh2NgmyjTkLLzFRtJAewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGl8osA1P35pRR3sPDYb47MQnndSMB8GA1UdIwQY
MBaAFOaM6G1AnoJDdlYP47GhaPK6AILjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYt
MGNhZGQ4NDc0NDhiLzEvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYtMGNhZGQ4NDc0NDhi
LzEvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvBoMZU0m
YdtjozhKoCDZjA98rillSnOed0DJ9/jA/DTaGW80MJV6TQRDVjw7ILnPHmx+/GSu
Kn5MKlLf26J/PGNu4+h3r6ZyNDPWOr3DjJamOgLo0RgBkzTlWC8EACiEdgJdUXnO
G1I53OKmmFUN2m+ZPUFQp3dTK1/3G0SfotiX/aDj/+4T3kRS7Gh5XffKSVPqrm7o
tS6OMZMRhYLJ+2+eJDWy7m2W9tYI1qL6UzpqN5OhssQiJCW76k1qWw7vHhCOOcdE
pJ72i72Ub4Qz0iSbfAARZtKb1ya4lewlvN995GUXnzXksiOfrzAhgE2szORKTXWE
fyC11r4RxX8LoA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:24:47 2026 by rpki-client