Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
File: oL_QbOhVti2baIzYxTXV9JTNOTI.mft (raw, json)
Hash identifier: hpaygRntoLO/9sW8zMmflRtZnsy/9giB4EHEauDXvy4=
Subject key identifier: FD:6C:79:86:2B:17:C6:82:9D:80:F2:87:50:6D:44:02:DB:CF:5F:0F
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 01A0E40772430307EAD2CEAA8B7B8E799FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
Manifest number: 1A7D
Signing time: Sun 27 Sep 2026 18:01:28 +0000
Manifest this update: Sun 27 Sep 2026 18:01:28 +0000
Manifest next update: Mon 28 Sep 2026 18:01:28 +0000
Files and hashes: 1: LKfnJFP3stLPWkjsWhakvnaxplg.roa (hash: 3FNKamFL0cuW1/UK40gTZTnTQ2szlVWiH3Kqp5bB2Jc=)
2: oL_QbOhVti2baIzYxTXV9JTNOTI.crl (hash: mBRLfI6U0pL9VBQKOls6t/NJE6fRv5Beux+eU0fVVkI=)
3: vvVsYWWoAOYdpjYQrdRCqadNLp0.roa (hash: 7wSWVSVEK2tx71oit1iR5MZZ41C88wL0lV1CJmf846k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:72:43:03:07:ea:d2:ce:aa:8b:7b:8e:79:9f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Sep 27 18:01:28 2026 GMT
Not After : Sep 28 18:01:28 2026 GMT
Subject: CN=fd6c79862b17c6829d80f287506d4402dbcf5f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:ab:56:d5:a7:28:46:1f:2e:c9:5b:ca:cf:
c7:14:36:a3:21:34:1b:12:45:36:96:8a:fd:7b:c1:
b8:6a:dc:3b:f0:35:6c:73:72:0f:f2:2c:1e:ec:5a:
47:05:56:ac:fe:a4:f2:26:9f:8e:22:f8:82:b5:87:
55:2c:79:8b:a9:8c:cb:af:b0:72:f8:c4:e3:68:f3:
87:35:df:41:58:59:71:99:fe:53:6c:06:05:31:ce:
d3:78:e8:1a:f3:7b:9a:57:db:d9:70:8e:4a:1b:db:
56:89:5c:07:ee:a4:c5:1b:ce:d4:98:73:4a:35:9d:
53:f7:cd:59:a3:03:4d:4a:78:af:cf:f5:28:70:ff:
88:10:31:c3:3f:d7:87:e9:ff:8f:f1:46:0f:0c:e1:
05:e1:28:d0:fa:ed:3e:29:a0:39:3c:50:af:b7:27:
ac:a0:cc:60:9a:b5:6a:71:25:f2:80:0b:80:04:01:
cf:d9:12:a1:b2:9e:ed:8b:c0:8f:78:29:ed:b7:85:
2e:c8:ad:7e:fc:e0:f2:6f:af:34:f8:0e:ad:16:f9:
6c:6f:76:cd:57:6f:83:43:3b:58:98:72:85:e2:53:
0d:ea:ec:71:fd:d5:d3:60:b7:9a:2d:aa:5d:d6:d6:
74:5f:73:0b:14:75:cb:ec:a9:7b:ce:42:c5:9c:74:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6C:79:86:2B:17:C6:82:9D:80:F2:87:50:6D:44:02:DB:CF:5F:0F
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:43:70:bd:62:00:33:ea:c9:0a:3f:9b:cb:7b:ca:82:d8:
24:32:f9:40:69:de:f5:ca:a8:69:04:2b:ab:f4:21:8d:e9:cf:
50:79:d5:36:01:67:99:28:fe:c9:26:cd:11:39:3b:27:a8:fc:
bf:e1:bd:6e:5f:ef:0c:38:08:e9:6d:f1:cb:2b:1f:d3:3b:4b:
5c:43:d7:f3:ef:10:e5:75:d9:d5:ec:d9:36:33:a7:ea:10:8b:
34:96:33:83:78:9c:f2:92:26:d8:0e:8a:2c:42:78:ba:b6:55:
da:ac:ed:6a:52:90:72:73:b7:53:9d:d8:f7:39:c3:93:05:79:
7b:bc:8f:88:5c:7d:e4:73:2c:bb:05:52:a9:c1:7d:4a:09:65:
d2:d5:d2:70:9b:f1:bb:96:9f:08:5f:fd:6b:57:97:90:cc:fe:
4f:7e:08:e7:fe:65:c6:8a:ff:11:aa:59:df:82:6c:9d:28:74:
b6:ca:56:0f:69:81:93:7c:fa:71:35:e8:43:5d:8d:bb:b0:bd:
6c:72:be:6b:0d:e2:ee:38:85:e6:76:04:35:88:e7:e5:32:77:
e1:9f:d0:e9:5a:07:c1:8c:90:83:20:a9:20:16:c6:2d:e6:12:
f4:4b:47:19:0f:3d:f6:8b:57:1a:e2:fd:97:f4:60:80:81:d7:
1d:9c:49:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkB3JDAwfq0s6qi3uOeZ+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYmZkMDZjZTg1NWI2MmQ5YjY4OGNkOGM1MzVkNWY0OTRj
ZDM5MzIwHhcNMjYwOTI3MTgwMTI4WhcNMjYwOTI4MTgwMTI4WjAzMTEwLwYDVQQD
EyhmZDZjNzk4NjJiMTdjNjgyOWQ4MGYyODc1MDZkNDQwMmRiY2Y1ZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3irVtWnKEYfLslbys/HFDajITQb
EkU2lor9e8G4atw78DVsc3IP8iwe7FpHBVas/qTyJp+OIviCtYdVLHmLqYzLr7By
+MTjaPOHNd9BWFlxmf5TbAYFMc7TeOga83uaV9vZcI5KG9tWiVwH7qTFG87UmHNK
NZ1T981ZowNNSnivz/UocP+IEDHDP9eH6f+P8UYPDOEF4SjQ+u0+KaA5PFCvtyes
oMxgmrVqcSXygAuABAHP2RKhsp7ti8CPeCntt4UuyK1+/ODyb680+A6tFvlsb3bN
V2+DQztYmHKF4lMN6uxx/dXTYLeaLapd1tZ0X3MLFHXL7Kl7zkLFnHS/JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1seYYrF8aCnYDyh1BtRALbz18PMB8GA1UdIwQY
MBaAFKC/0GzoVbYtm2iM2MU11fSUzTkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2Ut
NjcxODM5MjAwNjA0LzEvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2UtNjcxODM5MjAwNjA0
LzEvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQJDcL1i
ADPqyQo/m8t7yoLYJDL5QGne9cqoaQQrq/QhjenPUHnVNgFnmSj+ySbNETk7J6j8
v+G9bl/vDDgI6W3xyysf0ztLXEPX8+8Q5XXZ1ezZNjOn6hCLNJYzg3ic8pIm2A6K
LEJ4urZV2qztalKQcnO3U53Y9znDkwV5e7yPiFx95HMsuwVSqcF9Sgll0tXScJvx
u5afCF/9a1eXkMz+T34I5/5lxor/EapZ34JsnSh0tspWD2mBk3z6cTXoQ12Nu7C9
bHK+aw3i7jiF5nYENYjn5TJ34Z/Q6VoHwYyQgyCpIBbGLeYS9EtHGQ899otXGuL9
l/RggIHXHZxJSQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:14:29 2026 by rpki-client