Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File: oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier: kI1XJZf9/R5J/yN0H2Ibq8BASg8eogeDDNpmY/UbcjY=
Subject key identifier: 95:8C:A4:84:07:5D:87:71:62:68:6C:45:87:79:71:D1:04:52:61:F8
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer: /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial: 019D284E3A313E8A44DFF42A5B2527031D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number: 09DC
Signing time: Thu 26 Mar 2026 04:01:48 +0000
Manifest this update: Thu 26 Mar 2026 04:01:48 +0000
Manifest next update: Fri 27 Mar 2026 04:01:48 +0000
Files and hashes: 1: Mob9EPRgvBzo4H6hbqTT2HdD3JA.roa (hash: kvdg8wCS9egZQzAgHG4zTvTOgP+Bu8A9k8hcSeFomOA=)
2: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: QkRLxGVj7zvX/tdYzh59HFD40DLa2HE7TmUvVxkEeQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:3a:31:3e:8a:44:df:f4:2a:5b:25:27:03:1d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Validity
Not Before: Mar 26 04:01:48 2026 GMT
Not After : Mar 27 04:01:48 2026 GMT
Subject: CN=958ca484075d877162686c45877971d1045261f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:21:e4:dc:91:10:e6:36:34:f0:f1:ef:db:
4e:91:77:94:49:77:5a:2b:b8:fd:d4:1e:03:5b:41:
49:da:2f:3f:c7:4d:47:6d:6f:0a:5b:9e:c1:51:c6:
4c:33:dc:40:0e:5b:d2:80:3d:ef:e0:03:a1:9a:b1:
4f:c4:72:a0:1e:4b:a5:cb:c5:59:0f:7d:72:68:6d:
fd:ab:c3:b8:17:cf:43:fa:ca:42:a5:6f:7f:36:22:
ba:8d:d6:2d:27:db:70:be:56:45:8d:ed:7e:09:4c:
9d:f9:37:0b:62:5e:67:c9:33:06:a4:7e:96:c9:5d:
6a:51:95:23:ed:f1:f8:62:ab:9e:ba:c2:a1:af:94:
58:de:61:0b:bb:4c:de:cb:89:e2:6a:97:67:5f:4f:
41:bf:c7:e6:53:fe:03:3d:83:0c:cd:c2:59:36:46:
69:89:06:a4:50:fb:59:05:bd:d2:b3:33:61:46:a8:
a8:b8:ab:20:53:1f:9c:7c:c2:a1:28:a0:3a:48:5a:
34:ea:75:05:f7:90:5a:63:12:4b:6c:2e:10:57:56:
3e:be:53:a0:28:5d:82:90:6f:9e:1d:9c:b7:f0:8f:
bd:aa:94:42:f1:06:c6:ba:5d:7a:f9:d5:99:0b:49:
ca:ce:61:e1:45:e1:7e:76:53:bc:50:d0:c6:83:d5:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:A4:84:07:5D:87:71:62:68:6C:45:87:79:71:D1:04:52:61:F8
X509v3 Authority Key Identifier:
keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ec:6e:41:f7:cb:c8:6e:da:63:92:d7:a5:59:44:ed:f4:71:
28:b1:13:d6:e0:da:27:fe:9b:fc:11:a1:00:1e:84:de:f2:11:
93:a5:8f:7e:37:8b:a3:8d:54:58:90:31:d5:67:78:57:ab:7b:
a6:a1:a6:59:cd:a2:8d:50:a9:48:05:8a:3f:4d:19:6d:d8:3a:
1b:c8:a4:f9:76:fd:71:b5:dd:e5:21:d1:a5:bb:d7:ea:57:69:
d4:2c:cc:b4:ae:48:21:10:34:fb:d0:fc:b9:dd:be:ac:c9:d6:
97:bc:5c:b2:33:0d:bf:05:43:a0:ae:db:5b:76:b6:11:05:93:
99:b7:bc:b9:dd:c1:cc:7c:21:1e:34:8e:47:42:4c:d2:c4:f0:
b4:4d:35:46:fe:86:e6:82:98:ef:b4:bb:ef:cd:eb:0c:53:55:
d3:a6:6e:c7:e9:2c:35:76:76:a7:68:94:2e:2f:03:ed:64:3e:
68:7d:17:62:4d:fd:f2:6c:32:86:e4:81:5a:4a:73:91:ac:c9:
27:8e:50:5a:48:1c:86:d3:1a:33:d1:d5:04:9e:23:0f:20:52:
36:34:21:32:f1:08:a4:cf:5b:5a:aa:ed:4a:e5:ac:71:20:b5:
8f:e4:cc:88:f0:f5:7d:92:ab:09:49:98:1a:eb:f0:52:4b:c3:
7d:b7:f3:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTjoxPopE3/QqWyUnAx1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTIyZmNiNTRhMDkxZDY5MTNmZmU5ZmFmYjk4M2M1N2E0
YWMyMmMwHhcNMjYwMzI2MDQwMTQ4WhcNMjYwMzI3MDQwMTQ4WjAzMTEwLwYDVQQD
Eyg5NThjYTQ4NDA3NWQ4NzcxNjI2ODZjNDU4Nzc5NzFkMTA0NTI2MWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyUh5NyREOY2NPDx79tOkXeUSXda
K7j91B4DW0FJ2i8/x01HbW8KW57BUcZMM9xADlvSgD3v4AOhmrFPxHKgHkuly8VZ
D31yaG39q8O4F89D+spCpW9/NiK6jdYtJ9twvlZFje1+CUyd+TcLYl5nyTMGpH6W
yV1qUZUj7fH4YqueusKhr5RY3mELu0zey4niapdnX09Bv8fmU/4DPYMMzcJZNkZp
iQakUPtZBb3SszNhRqiouKsgUx+cfMKhKKA6SFo06nUF95BaYxJLbC4QV1Y+vlOg
KF2CkG+eHZy38I+9qpRC8QbGul16+dWZC0nKzmHhReF+dlO8UNDGg9W3NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWMpIQHXYdxYmhsRYd5cdEEUmH4MB8GA1UdIwQY
MBaAFKCiL8tUoJHWkT/+n6+5g8V6SsIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kZjNiMzAtMWJhOS00YzRiLWFhMGMt
ZjkyN2U1ODJlYmY5LzEvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kZjNiMzAtMWJhOS00YzRiLWFhMGMtZjkyN2U1ODJlYmY5
LzEvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuxuQffL
yG7aY5LXpVlE7fRxKLET1uDaJ/6b/BGhAB6E3vIRk6WPfjeLo41UWJAx1Wd4V6t7
pqGmWc2ijVCpSAWKP00Zbdg6G8ik+Xb9cbXd5SHRpbvX6ldp1CzMtK5IIRA0+9D8
ud2+rMnWl7xcsjMNvwVDoK7bW3a2EQWTmbe8ud3BzHwhHjSOR0JM0sTwtE01Rv6G
5oKY77S7783rDFNV06Zux+ksNXZ2p2iULi8D7WQ+aH0XYk398mwyhuSBWkpzkazJ
J45QWkgchtMaM9HVBJ4jDyBSNjQhMvEIpM9bWqrtSuWscSC1j+TMiPD1fZKrCUmY
GuvwUkvDfbfzqQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:42 2026 by rpki-client