Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: GVRc6vjyq64vwGKd77yeUPIpnj9iGoOfrGnP07DYVTw=
Subject key identifier: A2:55:32:B2:DA:D0:C8:B0:B1:D7:52:3D:87:41:75:3B:EE:6C:96:F6
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 019E20FF1E676556A4E4087DF18D68D34322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 11:00:50 +0000
Manifest this update: Wed 13 May 2026 11:00:50 +0000
Manifest next update: Thu 14 May 2026 11:00:50 +0000
Files and hashes: 1: 9qy5igh9qX4Uci7bRZZV_psOu7w.roa (hash: Tnhc5d5aGwpLgFhdFa9P4ZDIL3T2P5zMzH6turPE6uU=)
2: fOlQP3-PfpjSE6EMsORwi3KiU_0.roa (hash: 9xJNvssU8LW9KKQFyieBw8RskBII5JpvnR6eOew6NAc=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: DNMvzxRTYNoXcvl3dtPjfSWNSl1ZtBGF6sj/KoRT1J0=)
4: y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa (hash: 1lKjAhubbXr/HU27nWYgH1iiL0s0e2dhdfsbjU73q04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:1e:67:65:56:a4:e4:08:7d:f1:8d:68:d3:43:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: May 13 11:00:50 2026 GMT
Not After : May 14 11:00:50 2026 GMT
Subject: CN=a25532b2dad0c8b0b1d7523d8741753bee6c96f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:fb:e6:58:80:27:79:b7:d0:bb:91:ca:d8:
66:f9:df:9f:34:ac:76:e1:3c:09:03:34:cb:41:58:
02:75:38:9d:53:d7:22:18:d8:f6:c3:7a:9b:ca:ae:
65:78:61:ec:15:70:b0:40:ad:c6:5f:29:4b:84:27:
80:4c:8a:b0:17:5a:1f:49:5f:e8:4b:ef:76:1c:d5:
55:72:8b:04:4a:af:6c:a9:03:28:b8:5c:62:67:7e:
31:41:7e:a5:5f:5f:28:09:24:b7:fd:ce:7a:0f:26:
62:6c:95:18:3c:27:05:19:cc:85:46:af:63:7e:0a:
df:73:ed:d1:f4:db:67:35:ba:c4:27:cb:a1:dc:e4:
a7:c2:67:1f:60:f6:08:dd:6c:6a:97:a7:36:27:f9:
47:b5:2c:0c:41:07:f8:5c:51:b7:ab:3e:58:66:e2:
bc:a3:4a:84:e7:6f:d5:bc:1a:cb:fb:94:a5:1c:fa:
14:55:99:b8:e7:06:e6:b1:00:de:d6:ca:5c:01:24:
24:8a:b1:d7:af:c8:b5:fc:b1:fa:96:cd:76:ef:a0:
be:76:a6:12:9d:07:ff:74:16:21:0a:50:1c:6c:a6:
5f:a7:75:9c:db:6d:3e:33:f9:43:9f:7d:a1:ca:24:
af:24:a8:00:6f:57:d7:3d:3d:61:75:ec:74:0f:4d:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:55:32:B2:DA:D0:C8:B0:B1:D7:52:3D:87:41:75:3B:EE:6C:96:F6
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4a:82:8f:dd:1d:b1:52:4d:5b:24:a3:b2:99:80:d1:66:49:
99:86:b1:b4:d4:10:e3:19:10:66:51:82:7b:1b:e2:45:ae:b8:
85:5e:98:ba:71:94:e5:17:a0:56:a2:96:9d:10:77:a4:88:3c:
97:2e:b9:35:e9:ec:66:7a:e3:b4:68:76:30:27:55:14:8a:2e:
10:dc:95:94:8c:e0:53:d4:e9:0f:a3:8e:09:f1:9d:18:c4:f7:
53:b2:64:b5:e8:c4:8a:33:79:ca:98:02:e4:35:a7:3b:7a:91:
27:35:0e:f1:65:c5:ac:f5:5d:72:8d:56:2b:f1:c8:d8:5b:f2:
7b:55:76:48:82:2b:92:31:36:5c:00:a6:11:9a:f9:ca:a9:47:
ff:62:58:fa:ec:ff:23:07:de:40:6d:5d:25:cb:e1:1d:58:06:
c7:fa:f9:52:ad:0e:6b:c8:ac:f5:17:36:96:cb:35:fa:0d:26:
80:c9:c6:cb:8d:9d:7a:47:23:c4:fd:47:00:da:3b:47:f7:4b:
0b:a9:e2:d8:62:60:f7:ff:e5:cb:7d:74:04:21:0e:1f:db:a5:
78:b1:f6:0c:8f:c9:5f:77:97:3d:ea:3c:9f:0d:73:20:7d:ae:
f3:4e:62:e2:86:d1:4c:5a:83:12:5b:bf:83:ae:a8:1b:7a:14:
29:c8:e4:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/x5nZVak5Ah98Y1o00MiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx
ODM0MjkwHhcNMjYwNTEzMTEwMDUwWhcNMjYwNTE0MTEwMDUwWjAzMTEwLwYDVQQD
EyhhMjU1MzJiMmRhZDBjOGIwYjFkNzUyM2Q4NzQxNzUzYmVlNmM5NmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxr75liAJ3m30LuRythm+d+fNKx2
4TwJAzTLQVgCdTidU9ciGNj2w3qbyq5leGHsFXCwQK3GXylLhCeATIqwF1ofSV/o
S+92HNVVcosESq9sqQMouFxiZ34xQX6lX18oCSS3/c56DyZibJUYPCcFGcyFRq9j
fgrfc+3R9NtnNbrEJ8uh3OSnwmcfYPYI3Wxql6c2J/lHtSwMQQf4XFG3qz5YZuK8
o0qE52/VvBrL+5SlHPoUVZm45wbmsQDe1spcASQkirHXr8i1/LH6ls1276C+dqYS
nQf/dBYhClAcbKZfp3Wc220+M/lDn32hyiSvJKgAb1fXPT1hdex0D00HXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJVMrLa0MiwsddSPYdBdTvubJb2MB8GA1UdIwQY
MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt
N2QwODI5MWE3NjYyLzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy
LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEqCj90d
sVJNWySjspmA0WZJmYaxtNQQ4xkQZlGCexviRa64hV6YunGU5RegVqKWnRB3pIg8
ly65NensZnrjtGh2MCdVFIouENyVlIzgU9TpD6OOCfGdGMT3U7JktejEijN5ypgC
5DWnO3qRJzUO8WXFrPVdco1WK/HI2Fvye1V2SIIrkjE2XACmEZr5yqlH/2JY+uz/
IwfeQG1dJcvhHVgGx/r5Uq0Oa8is9Rc2lss1+g0mgMnGy42dekcjxP1HANo7R/dL
C6ni2GJg9//ly310BCEOH9uleLH2DI/JX3eXPeo8nw1zIH2u805i4obRTFqDElu/
g66oG3oUKcjk3g==
-----END CERTIFICATE-----
Generated at Wed May 13 13:59:33 2026 by rpki-client