Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
File: o-3nO95s_H12jrCVWPTsefsGiAU.mft (raw, json)
Hash identifier: vxrPOsvdd+QV70EUfvJBVdpnPLFquCliu9Oksn0a66E=
Subject key identifier: 2C:47:03:79:29:92:52:BD:98:2A:87:09:07:89:5A:57:0C:FD:6C:33
Authority key identifier: A3:ED:E7:3B:DE:6C:FC:7D:76:8E:B0:95:58:F4:EC:79:FB:06:88:05
Certificate issuer: /CN=a3ede73bde6cfc7d768eb09558f4ec79fb068805
Certificate serial: 01A122E5D5BBDA7FE5136C4F98C38C39B47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-3nO95s_H12jrCVWPTsefsGiAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
Manifest number: A9
Signing time: Fri 09 Oct 2026 23:00:50 +0000
Manifest this update: Fri 09 Oct 2026 23:00:50 +0000
Manifest next update: Sat 10 Oct 2026 23:00:50 +0000
Files and hashes: 1: o-3nO95s_H12jrCVWPTsefsGiAU.crl (hash: ygg7KWDbmYPI2W0EtNhfNvoWmyg6Rp02MxSjPLvdBs0=)
2: rxBMafXmJSrXR8vDOASdZ176CWs.roa (hash: UwSN/p8tMYJe6IO6Z1F6/UCLvX0zPceoWwIqurlhRz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-3nO95s_H12jrCVWPTsefsGiAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:e5:d5:bb:da:7f:e5:13:6c:4f:98:c3:8c:39:b4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ede73bde6cfc7d768eb09558f4ec79fb068805
Validity
Not Before: Oct 9 23:00:50 2026 GMT
Not After : Oct 10 23:00:50 2026 GMT
Subject: CN=2c470379299252bd982a870907895a570cfd6c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:7a:7d:63:52:7a:83:9f:94:95:a8:84:a6:
f8:01:c3:7f:90:dd:bf:39:7d:32:55:c1:c5:c4:1f:
20:16:68:bc:0b:8b:ad:b0:44:41:a5:7e:39:01:63:
72:8d:56:0f:f2:4c:84:a0:46:dd:b6:72:c3:d8:1b:
1a:c2:c5:46:7e:02:32:d8:6e:50:6d:63:cd:a6:fe:
de:23:e2:c8:60:5e:26:33:e9:c6:3e:f6:08:a1:46:
86:61:db:a8:74:86:09:f8:0c:0e:04:d8:fa:90:96:
0e:0e:0f:d5:f3:c5:3b:18:98:0a:05:7d:54:fa:cd:
6f:84:01:61:40:cd:d4:84:5e:ff:86:bf:63:4f:9d:
b9:f2:c7:38:9f:1b:f6:63:b2:32:05:13:a8:f2:dc:
88:cb:ed:ab:3c:90:6a:2a:cf:5e:bd:12:e2:8e:27:
88:6b:1f:83:91:4a:00:97:1a:96:fe:6e:bd:f7:31:
d6:c1:25:99:9d:83:40:31:0b:a0:23:93:84:65:bb:
c9:e5:2a:f2:a1:c0:68:6a:4f:b0:2a:3c:b2:aa:73:
08:76:3b:97:a2:8b:25:ad:d1:61:f8:a3:c6:09:98:
59:21:5a:e8:65:3f:4b:07:9b:dc:29:06:1d:85:15:
e5:63:65:ff:65:ac:b5:e8:9a:38:80:e7:8a:ed:f2:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:47:03:79:29:92:52:BD:98:2A:87:09:07:89:5A:57:0C:FD:6C:33
X509v3 Authority Key Identifier:
keyid:A3:ED:E7:3B:DE:6C:FC:7D:76:8E:B0:95:58:F4:EC:79:FB:06:88:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-3nO95s_H12jrCVWPTsefsGiAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6a:ba:26:67:3b:ff:bc:06:97:b1:c8:2a:ac:56:32:80:78:
a0:0c:ad:e8:91:1a:e7:75:b2:11:ac:9a:6c:f6:1a:22:93:eb:
58:56:a2:61:a5:1c:cd:ed:6d:65:ba:65:63:89:97:5d:6a:21:
83:85:56:8e:24:da:b5:26:c2:9e:32:28:24:22:39:4e:39:5b:
1a:0b:f7:6b:f5:7d:44:57:0f:d6:cd:fc:61:21:f2:d8:e8:78:
a2:e0:bf:ba:6f:cb:98:9d:6e:74:d3:18:f8:0e:cb:de:03:ed:
3e:36:7a:6f:cb:66:46:f2:02:87:a3:55:af:bf:6b:31:78:a1:
eb:de:3a:6f:2c:de:a7:27:d9:c6:52:80:4e:02:df:8b:ef:6d:
99:ab:30:6d:7f:96:04:5c:42:22:ab:a0:4a:ed:4a:8e:ba:95:
b0:34:8b:d3:80:0a:3d:13:10:c9:4f:a6:71:25:37:cf:34:97:
e7:77:d5:9c:5e:83:ab:18:90:2a:3e:7b:51:56:db:f2:4b:b5:
88:b3:d0:80:63:db:6c:db:30:d2:0d:c0:87:1a:6d:e8:b9:e8:
4d:4f:12:9a:a3:a1:43:1a:81:db:20:95:f9:94:1f:10:eb:51:
3c:63:86:38:de:e4:78:c3:fb:0d:dd:6c:40:74:a7:24:1a:a0:
9a:c7:c4:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEi5dW72n/lE2xPmMOMObR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZWRlNzNiZGU2Y2ZjN2Q3NjhlYjA5NTU4ZjRlYzc5ZmIw
Njg4MDUwHhcNMjYxMDA5MjMwMDUwWhcNMjYxMDEwMjMwMDUwWjAzMTEwLwYDVQQD
EygyYzQ3MDM3OTI5OTI1MmJkOTgyYTg3MDkwNzg5NWE1NzBjZmQ2YzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0B6fWNSeoOflJWohKb4AcN/kN2/
OX0yVcHFxB8gFmi8C4utsERBpX45AWNyjVYP8kyEoEbdtnLD2BsawsVGfgIy2G5Q
bWPNpv7eI+LIYF4mM+nGPvYIoUaGYduodIYJ+AwOBNj6kJYODg/V88U7GJgKBX1U
+s1vhAFhQM3UhF7/hr9jT5258sc4nxv2Y7IyBROo8tyIy+2rPJBqKs9evRLijieI
ax+DkUoAlxqW/m699zHWwSWZnYNAMQugI5OEZbvJ5SryocBoak+wKjyyqnMIdjuX
ooslrdFh+KPGCZhZIVroZT9LB5vcKQYdhRXlY2X/Zay16Jo4gOeK7fILPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxHA3kpklK9mCqHCQeJWlcM/WwzMB8GA1UdIwQY
MBaAFKPt5zvebPx9do6wlVj07Hn7BogFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby0zbk85NXNfSDEyanJDVldQVHNlZnNHaUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80NjcwYTQtMjNkNi00ZDZhLTk0YTYt
MDNjZGEzNTljZTJlLzEvby0zbk85NXNfSDEyanJDVldQVHNlZnNHaUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS80NjcwYTQtMjNkNi00ZDZhLTk0YTYtMDNjZGEzNTljZTJl
LzEvby0zbk85NXNfSDEyanJDVldQVHNlZnNHaUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGq6Jmc7
/7wGl7HIKqxWMoB4oAyt6JEa53WyEayabPYaIpPrWFaiYaUcze1tZbplY4mXXWoh
g4VWjiTatSbCnjIoJCI5TjlbGgv3a/V9RFcP1s38YSHy2Oh4ouC/um/LmJ1udNMY
+A7L3gPtPjZ6b8tmRvICh6NVr79rMXih6946byzepyfZxlKATgLfi+9tmaswbX+W
BFxCIqugSu1KjrqVsDSL04AKPRMQyU+mcSU3zzSX53fVnF6DqxiQKj57UVbb8ku1
iLPQgGPbbNsw0g3Ahxpt6LnoTU8SmqOhQxqB2yCV+ZQfEOtRPGOGON7keMP7Dd1s
QHSnJBqgmsfE6g==
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:11:07 2026 by rpki-client