Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: Q16d8ody770PJp/EqLAlKcCtL1RfuPAbqCL4tU1dBr0=
Subject key identifier: DF:A7:5F:21:1F:23:17:B5:F4:C1:29:4F:E8:79:F8:6E:15:9C:66:D3
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 01A0CCD9CA7C97538610E52257B6A038B0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 09A8
Signing time: Wed 23 Sep 2026 06:00:20 +0000
Manifest this update: Wed 23 Sep 2026 06:00:20 +0000
Manifest next update: Thu 24 Sep 2026 06:00:20 +0000
Files and hashes: 1: 3MFj15oSeUJYuJbY2U542UoSXGM.roa (hash: j9Y9LVF9WUhE5Tw8LMdWTvxog1CGJJ1rf8AUNlTnbFI=)
2: FGVsTKcXFHABDa_e0HM9Faa7r2M.roa (hash: 2Iqm//83hIlnGhnfsyksmZkIg0tX+MTyrQg6DXUyYdQ=)
3: SwB1iAgYjly4csbv4jz0oadyUZk.roa (hash: TuHJEn/9Xw5181UZ/VH/apXlrIOdLQGvmuNms8pxlNU=)
4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: RaEtK58lVMbyzZdoqLewQdqDUGGpmgzgJGpKLmYV1Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:ca:7c:97:53:86:10:e5:22:57:b6:a0:38:b0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Sep 23 06:00:20 2026 GMT
Not After : Sep 24 06:00:20 2026 GMT
Subject: CN=dfa75f211f2317b5f4c1294fe879f86e159c66d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d9:5b:55:3d:2f:54:90:3f:40:5d:8d:2c:13:
66:9b:35:3b:f4:ff:e4:32:ef:49:c9:57:91:8b:62:
ac:23:4a:85:94:47:21:d9:a4:1a:bb:0f:df:2b:2d:
08:5c:70:bd:0a:6e:6b:dc:73:cf:da:2b:51:e2:ba:
5c:42:9e:20:e9:38:b7:27:09:9f:d2:c7:2e:07:02:
0f:7e:41:a0:df:4e:e1:9b:43:2c:8c:0e:22:2e:4d:
82:c3:9a:74:c6:0f:e6:6d:81:2a:17:1e:87:be:04:
5d:fa:8d:38:6e:27:5d:2a:d4:ef:73:0c:23:40:c2:
f0:65:7a:9e:4b:93:67:ff:8e:af:9a:35:ad:16:0d:
fb:77:d4:a3:96:f8:75:bf:64:24:b9:35:67:f8:10:
e9:55:3b:ed:88:8d:68:d1:27:35:46:24:be:99:11:
7c:70:51:f6:3d:de:cc:c4:36:4b:28:05:53:15:d3:
20:06:5d:b3:c7:37:2b:94:58:7b:9e:11:c0:3a:0a:
df:9f:fb:0c:57:f7:05:55:cd:ca:0d:13:77:1d:fb:
c8:2f:22:cf:4c:08:5c:b6:07:00:9d:8a:b3:a0:16:
1b:c6:de:fd:a3:38:fc:f0:7f:bc:b3:df:68:fe:3f:
75:42:a1:27:c1:5d:9a:c0:86:c7:ab:a7:91:15:7c:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:5F:21:1F:23:17:B5:F4:C1:29:4F:E8:79:F8:6E:15:9C:66:D3
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e7:b9:d9:1c:d7:01:11:80:55:10:2b:30:bf:7b:dc:39:20:
1e:13:5a:c2:53:3e:92:37:f9:8c:b1:53:0c:ad:c6:c8:16:a9:
ad:f8:d6:11:ed:66:c3:94:fc:c2:bf:6c:a2:92:11:8a:ab:72:
50:07:4f:1c:1f:88:3a:c6:bb:bd:fd:fd:d1:d6:19:8a:45:da:
05:1e:6c:3d:0f:d6:0c:5c:b4:4c:ef:af:a3:d3:71:af:6b:bb:
c6:23:f4:34:d2:47:bb:f8:20:ab:0f:3b:2c:5f:ce:ee:3a:45:
2e:c8:7f:29:6c:0f:dc:6f:ff:53:04:c3:1b:85:83:be:55:de:
b2:15:a4:18:f6:fd:df:35:07:13:ed:d7:44:08:ff:07:c1:4f:
9f:3e:0a:ac:a8:3b:48:a7:8b:17:58:40:3e:88:70:7f:aa:0e:
ef:d2:09:0f:22:6d:a9:3e:68:84:20:ec:9a:44:9f:e2:c1:4f:
8a:70:20:47:69:f8:45:49:a4:1d:2d:f6:36:91:fd:c7:e2:b4:
fe:54:27:19:f9:16:5f:ee:16:e5:d8:c2:0f:2c:ad:f1:ae:8e:
05:bb:d2:9c:19:eb:64:99:ed:2a:1a:30:90:1a:a6:15:7c:f5:
c1:53:9c:bb:f0:88:d7:48:c8:db:7b:ea:4d:d0:04:67:c2:66:
ca:ce:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:20:37 2026 by rpki-client