Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
File: oev1TQKO5HZPYveK2HHb8CYih4g.mft (raw, json)
Hash identifier: i4vWgs153ANGh5E3vHtMb/IuqyfiqSKsfi695cPI8Ck=
Subject key identifier: 9A:0A:58:4C:16:62:AB:1D:12:ED:12:98:7B:4E:DE:24:D7:58:ED:7F
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Certificate issuer: /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial: 01A1DD94F2888EFD5A78AFEF0E51D41F8B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
Manifest number: 0841
Signing time: Sun 15 Nov 2026 05:01:28 +0000
Manifest this update: Sun 15 Nov 2026 05:01:28 +0000
Manifest next update: Mon 16 Nov 2026 05:01:28 +0000
Files and hashes: 1: 26PCuULcHS-vm3v3fQgA6-1DVmQ.roa (hash: tTyj68LqKHap/YbHLtgQzuaQZ2ESKiv4xe4q4toZyQQ=)
2: X7aPlR-pZo6rLSSiJT7Oe8Uyo-s.roa (hash: f8OEucDIP6cYs0bjMa0ASBn6fJHEhpbyHwyN5ykv6sY=)
3: cJErKp3l7YOeG09N0R0TYAEpUGg.roa (hash: 7gKjqS1rnbh2fqNlL6j2VX106p+ru9PHs/6B+IxwUi4=)
4: kdtriYs5EMHzMm8GxGhb8NfrmqQ.roa (hash: lBWS6NaSe2F942bAeRrCfj/gV/8TvjoRWKgChfD/esI=)
5: oev1TQKO5HZPYveK2HHb8CYih4g.crl (hash: VeHXaR9POO4Vt2+S63qZyCvjnjc/+NIq3xocxd3LLbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:f2:88:8e:fd:5a:78:af:ef:0e:51:d4:1f:8b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Validity
Not Before: Nov 15 05:01:28 2026 GMT
Not After : Nov 16 05:01:28 2026 GMT
Subject: CN=9a0a584c1662ab1d12ed12987b4ede24d758ed7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:a1:46:73:ee:e5:ed:ce:05:a1:c4:04:13:
f8:e1:69:17:46:cc:92:f8:e5:6b:0e:9e:b6:79:d7:
7b:a8:44:59:ab:c1:db:76:12:3d:e6:dd:6e:2b:76:
f8:a3:ab:80:2d:e7:82:6b:e0:36:c0:5d:76:da:32:
f6:48:f8:6d:13:46:5d:b5:c1:4b:37:57:8b:b0:7a:
db:11:21:71:ce:c3:23:33:c2:a3:ac:a2:b7:73:05:
d7:26:8b:d8:77:d2:fa:55:44:59:bd:47:77:7a:5d:
3f:f3:85:53:b0:de:37:24:9a:77:57:27:f2:f3:11:
c6:b7:50:95:8f:31:28:a2:6e:d1:13:49:45:a2:dc:
e7:a9:e8:f5:ee:2f:62:a3:01:2c:b2:0a:88:a1:b6:
a5:6d:6e:3a:5f:e8:81:b4:36:23:32:f9:71:76:8d:
0e:a2:17:75:c5:b2:b9:93:b9:da:8c:da:a8:39:7b:
0b:9d:f6:40:db:4c:e4:1c:e7:21:48:b1:b3:b9:fc:
d1:0c:b5:38:a3:2b:a5:3e:9f:95:4b:e1:eb:bd:fa:
e0:b0:46:a6:a0:fc:78:25:df:ce:0b:21:fb:10:01:
f8:a1:4f:a4:88:09:3b:36:a7:08:7f:1f:8a:de:71:
5e:a8:af:29:ef:00:ec:5a:8e:b0:83:2d:07:59:4a:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0A:58:4C:16:62:AB:1D:12:ED:12:98:7B:4E:DE:24:D7:58:ED:7F
X509v3 Authority Key Identifier:
keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:26:a1:b7:58:d0:a1:fc:bf:c2:45:9a:60:80:21:06:a3:34:
75:ba:56:53:7d:9f:97:a3:95:da:31:6d:ff:20:ce:2b:19:62:
d2:f8:30:20:15:ed:d7:b5:97:1d:68:a0:5d:0e:f6:d1:10:7a:
d9:98:9c:ee:00:da:e7:3e:55:88:2e:cd:9a:4e:1b:9c:94:f3:
97:a6:c4:4a:f6:85:04:3a:49:87:4c:2b:65:8a:94:74:48:f7:
91:9a:bd:a6:49:3d:0d:0a:bd:f7:84:a0:2b:47:2f:76:70:a8:
b4:62:2c:8c:b4:12:23:7a:7d:da:19:0b:67:78:f2:ec:f4:41:
18:9f:12:e0:f1:39:a1:c8:c5:e8:b0:27:25:03:90:7d:0c:f6:
46:51:2f:a4:8f:ae:1b:39:1c:8e:83:cb:06:15:39:5f:ee:2e:
db:9c:1b:03:48:bb:78:18:a5:67:42:21:76:47:90:2e:1d:9b:
32:cb:63:5a:f7:7b:6d:2d:2a:fe:63:11:a1:25:a3:4d:63:e6:
8b:9e:83:65:94:29:af:28:52:26:fb:f3:69:09:3d:d6:5d:20:
77:11:1f:69:a5:6c:9b:72:07:a7:6b:ef:b7:6d:4c:04:a4:28:
2f:b6:dd:f9:d2:19:9e:0d:37:3f:4b:d6:e2:e0:e2:07:be:37:
5d:e2:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:24:48 2026 by rpki-client