Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
File: o9lcuYDUNnAPka6ld_Chw9EBOFE.mft (raw, json)
Hash identifier: VCNa2dK34YrsP6+N8T9AtIu+3ZipYCIu0CfdOYwhXJo=
Subject key identifier: 16:7D:16:0A:90:5F:4D:0E:E9:7D:A0:D3:6C:12:0E:84:6F:07:2F:1C
Authority key identifier: A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
Certificate issuer: /CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Certificate serial: 01A0D011C99B343099709836D89BD6684129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:21 +0000
Manifest this update: Wed 23 Sep 2026 21:00:21 +0000
Manifest next update: Thu 24 Sep 2026 21:00:21 +0000
Files and hashes: 1: W--PYm95WmPyMK8dgSgV_MgjMDs.roa (hash: R9ZHpGeHyDL8BzmrmuurqwX+rq5/d11mCwkWHYGA13Y=)
2: o9lcuYDUNnAPka6ld_Chw9EBOFE.crl (hash: yNJrZdl7P8t+nfxZzSozy/ju/GP8pGRSW8r1gBFE0+o=)
3: wyVwViD6OFO9yJjbf0h1g5cFqQY.roa (hash: CrQ4iuhyJ0oAhIIFh/rkGOWZ0gSsnx159Ihl2XxcKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:c9:9b:34:30:99:70:98:36:d8:9b:d6:68:41:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Validity
Not Before: Sep 23 21:00:21 2026 GMT
Not After : Sep 24 21:00:21 2026 GMT
Subject: CN=167d160a905f4d0ee97da0d36c120e846f072f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:83:51:ed:78:c1:9e:30:e7:78:d9:3d:23:
ae:ea:43:e3:db:d1:39:7d:7d:5c:1e:e3:fe:38:af:
b2:2e:f2:7a:ff:0b:69:14:80:14:33:a0:fd:9f:68:
d6:52:59:5f:3d:42:d9:f6:f7:38:01:70:e5:d3:9b:
30:9d:69:b2:22:ba:23:98:7d:cc:ca:a2:0d:0d:1d:
71:fe:f6:55:95:9f:ef:0a:dd:77:9b:b8:32:2d:e0:
d8:e6:05:eb:d9:26:71:29:24:30:12:23:fb:cc:ef:
c1:20:04:77:f2:4b:8a:76:d4:1e:6f:1c:f0:8e:ca:
9d:42:c6:47:c0:23:9f:0e:8b:7c:a6:87:e1:bc:b3:
2f:bf:49:1b:fc:82:f6:2a:31:df:8d:47:f2:a4:5a:
f5:7b:d4:79:5f:01:26:64:6f:59:7d:aa:93:99:ea:
54:6d:09:6d:a5:c4:fd:42:31:a4:47:27:e8:0d:82:
4f:62:74:ee:34:27:e6:eb:bc:c2:ac:dc:6c:4e:39:
bd:8c:ac:d1:f0:1d:a1:1a:00:e8:68:05:78:55:e4:
c8:6b:b4:61:f5:2a:22:f7:92:41:5d:69:1c:87:07:
a3:03:11:23:7e:03:68:d4:d2:15:d1:a4:f9:6d:0d:
bc:c4:d4:d5:59:07:cb:e0:67:e1:86:ba:6f:dc:eb:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7D:16:0A:90:5F:4D:0E:E9:7D:A0:D3:6C:12:0E:84:6F:07:2F:1C
X509v3 Authority Key Identifier:
keyid:A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ff:04:47:85:74:d9:4b:bf:e8:d0:23:5c:9d:f1:c2:5c:a1:
c2:6a:00:a4:f8:52:47:76:53:87:de:49:95:1f:3a:f4:56:2d:
b2:2f:98:a1:6d:3c:bc:4b:1e:98:cf:5d:05:96:cc:f8:cf:c1:
cf:e2:65:25:09:18:f3:42:5b:e4:7c:8f:56:1a:63:ef:6c:f9:
cb:cf:73:19:ff:14:73:d1:f0:e0:c6:b1:94:ee:fd:22:f9:14:
63:c2:40:81:c3:f3:12:1b:b5:87:1c:f3:43:24:28:03:5d:80:
23:37:aa:5a:b0:84:8f:f4:20:c1:2d:af:49:5e:3a:89:b1:b7:
4e:ca:70:f2:f2:38:8e:e4:e0:9c:95:f7:a6:25:0a:e5:9a:6c:
31:21:44:55:60:28:e8:ec:11:88:18:63:78:e0:df:35:91:31:
68:e4:b2:3f:3d:aa:fa:e5:18:86:c3:22:f5:b5:b9:fb:6e:17:
c1:ab:b0:c9:59:b0:15:06:66:64:3a:73:0a:43:22:48:8b:ee:
ae:c1:41:b1:18:03:a3:1f:28:de:3a:6a:82:69:d5:7f:a6:62:
3e:d9:1e:ff:0d:d6:f3:9a:05:9c:2b:e6:9d:25:6c:63:7e:81:
54:ab:d8:7d:24:3a:1c:56:cc:20:77:90:ae:8f:45:27:94:26:
36:d9:ea:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:53:50 2026 by rpki-client