Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
File: oLwReyvH4FrFwOs1FaF0GBMP3oI.mft (raw, json)
Hash identifier: Ods6AOPqTlFBDil5aPuk+M6X2X9sYUY9ftfr9CNO93I=
Subject key identifier: E4:E3:1D:FE:7D:9B:19:EC:E2:F8:AF:97:97:59:A6:78:F8:A6:5C:C7
Authority key identifier: A0:BC:11:7B:2B:C7:E0:5A:C5:C0:EB:35:15:A1:74:18:13:0F:DE:82
Certificate issuer: /CN=a0bc117b2bc7e05ac5c0eb3515a17418130fde82
Certificate serial: 01A0E174674867D8ECD181EA021766716E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:37 +0000
Manifest this update: Sun 27 Sep 2026 06:01:37 +0000
Manifest next update: Mon 28 Sep 2026 06:01:37 +0000
Files and hashes: 1: MMGfobkcPvFzzP7MQZnUAsVVZp8.roa (hash: WGW0WSapBDRofWXt8DtNDTEwEorTNTg8AzDt4Ue2MDI=)
2: oLwReyvH4FrFwOs1FaF0GBMP3oI.crl (hash: JcmWHK1teKI2orN3H8iDvgTE9laenZjCVsFk2D0pEJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:67:48:67:d8:ec:d1:81:ea:02:17:66:71:6e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc117b2bc7e05ac5c0eb3515a17418130fde82
Validity
Not Before: Sep 27 06:01:37 2026 GMT
Not After : Sep 28 06:01:37 2026 GMT
Subject: CN=e4e31dfe7d9b19ece2f8af979759a678f8a65cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:71:02:47:eb:81:ca:3a:30:1d:3f:b1:8f:
25:98:e5:43:07:66:e9:47:da:17:f2:10:ec:d5:0e:
81:66:2d:8d:4e:a1:e5:46:ed:0d:6f:4c:20:92:50:
a1:f4:34:1c:2e:0a:d2:71:bf:ff:82:7c:1d:94:76:
b3:b6:05:e3:a4:ba:dd:f6:4a:e4:e5:b5:1a:73:d7:
76:72:c9:8e:f6:13:27:d9:d4:fb:04:28:51:c3:59:
e4:80:88:5c:4b:8b:cb:46:8a:f6:91:32:21:6f:5d:
32:10:1c:aa:8a:51:f7:28:2a:20:bd:b3:53:c8:85:
6c:05:6e:e1:58:2e:c1:00:14:d0:d9:03:b6:2b:0b:
92:d6:73:05:a4:95:80:21:9f:ff:02:2d:7c:7f:bf:
fa:fe:45:f4:29:c3:a4:8d:7d:41:33:08:10:19:0f:
da:20:e2:2b:e9:8e:54:77:69:71:0a:15:4d:af:a3:
26:18:14:0a:67:50:91:b4:4d:14:fb:59:b2:57:c1:
c5:96:a2:2e:0b:9d:98:6d:c6:1f:09:8b:04:dc:67:
9e:b5:ac:29:a0:38:83:43:aa:5c:75:3b:57:10:84:
8f:33:15:26:1b:9b:5b:10:46:52:20:e8:c3:d6:83:
47:ef:ae:6c:9c:9c:22:b6:30:06:51:6a:39:a0:05:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E3:1D:FE:7D:9B:19:EC:E2:F8:AF:97:97:59:A6:78:F8:A6:5C:C7
X509v3 Authority Key Identifier:
keyid:A0:BC:11:7B:2B:C7:E0:5A:C5:C0:EB:35:15:A1:74:18:13:0F:DE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:92:93:40:c0:79:87:f2:73:2b:47:bc:6c:3f:7f:2e:52:ce:
ec:05:20:e5:99:21:d7:cc:9e:b1:5f:12:c1:b5:5a:66:a5:58:
9c:8b:10:57:ac:07:10:61:f0:28:2b:2c:1b:ba:bf:cf:d6:81:
11:d7:02:87:42:01:60:88:84:16:97:23:71:6d:6b:09:93:3b:
9f:ff:28:9b:bc:90:77:a1:5b:63:b4:c6:77:d5:67:3f:09:a4:
5a:36:42:5e:2d:4f:dc:7e:19:6f:48:f7:d0:eb:43:8f:5e:ee:
d7:a0:67:32:0c:42:fb:84:54:7e:a4:5c:21:56:aa:46:cb:13:
c5:0e:40:97:48:53:38:c1:0c:3d:91:f8:6d:8f:af:5d:be:04:
e0:2f:28:b1:10:96:29:b8:54:0a:77:32:b1:7f:53:55:88:51:
0c:b2:b2:dd:8e:75:94:e5:76:a5:92:b5:e8:f8:c0:b9:1a:c7:
14:17:b0:62:03:97:01:fd:78:56:f8:aa:ac:0e:ac:2e:95:0b:
54:56:90:02:f1:31:5c:17:53:f1:a2:df:87:b1:08:d8:d0:40:
01:90:9b:5a:18:94:59:dc:52:7d:45:56:50:12:18:92:a0:d9:
d1:cb:7a:19:52:56:63:19:4f:a1:88:23:87:e5:a8:2f:8b:74:
ee:1c:45:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdGdIZ9js0YHqAhdmcW4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYmMxMTdiMmJjN2UwNWFjNWMwZWIzNTE1YTE3NDE4MTMw
ZmRlODIwHhcNMjYwOTI3MDYwMTM3WhcNMjYwOTI4MDYwMTM3WjAzMTEwLwYDVQQD
EyhlNGUzMWRmZTdkOWIxOWVjZTJmOGFmOTc5NzU5YTY3OGY4YTY1Y2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtlxAkfrgco6MB0/sY8lmOVDB2bp
R9oX8hDs1Q6BZi2NTqHlRu0Nb0wgklCh9DQcLgrScb//gnwdlHaztgXjpLrd9krk
5bUac9d2csmO9hMn2dT7BChRw1nkgIhcS4vLRor2kTIhb10yEByqilH3KCogvbNT
yIVsBW7hWC7BABTQ2QO2KwuS1nMFpJWAIZ//Ai18f7/6/kX0KcOkjX1BMwgQGQ/a
IOIr6Y5Ud2lxChVNr6MmGBQKZ1CRtE0U+1myV8HFlqIuC52YbcYfCYsE3Geetawp
oDiDQ6pcdTtXEISPMxUmG5tbEEZSIOjD1oNH765snJwitjAGUWo5oAXuTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTjHf59mxns4vivl5dZpnj4plzHMB8GA1UdIwQY
MBaAFKC8EXsrx+BaxcDrNRWhdBgTD96CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0x3UmV5dkg0RnJGd09zMUZhRjBHQk1QM29JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NjY1OTktM2ZhMC00MjMwLWJhOWEt
MTljNGZmMTg3N2JiLzEvb0x3UmV5dkg0RnJGd09zMUZhRjBHQk1QM29JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84NjY1OTktM2ZhMC00MjMwLWJhOWEtMTljNGZmMTg3N2Ji
LzEvb0x3UmV5dkg0RnJGd09zMUZhRjBHQk1QM29JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5KTQMB5
h/JzK0e8bD9/LlLO7AUg5Zkh18yesV8SwbVaZqVYnIsQV6wHEGHwKCssG7q/z9aB
EdcCh0IBYIiEFpcjcW1rCZM7n/8om7yQd6FbY7TGd9VnPwmkWjZCXi1P3H4Zb0j3
0OtDj17u16BnMgxC+4RUfqRcIVaqRssTxQ5Al0hTOMEMPZH4bY+vXb4E4C8osRCW
KbhUCncysX9TVYhRDLKy3Y51lOV2pZK16PjAuRrHFBewYgOXAf14VviqrA6sLpUL
VFaQAvExXBdT8aLfh7EI2NBAAZCbWhiUWdxSfUVWUBIYkqDZ0ct6GVJWYxlPoYgj
h+WoL4t07hxFOQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:43:56 2026 by rpki-client