Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: KfuLz7Yj55PsU7WwR10kDd9usPUOC7LrA00idf+qQlg=
Subject key identifier: 3A:F8:E3:66:56:8D:4D:7C:A3:0E:82:4F:BF:CC:2A:3C:A8:E6:99:14
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 019E1F113CB917012AC545DE83B420A3F6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 12DA
Signing time: Wed 13 May 2026 02:01:23 +0000
Manifest this update: Wed 13 May 2026 02:01:23 +0000
Manifest next update: Thu 14 May 2026 02:01:23 +0000
Files and hashes: 1: 1a09heU19_ryfPhTDOItUOYW9dI.roa (hash: 5eBlNMRyLdSqsVNmNmDeopusLkevokIjHf0hTvRVozE=)
2: KQji-kvGwokbQJLmZVW7oo2hsck.roa (hash: C1Er9TyXkYi4WTR5vknL0YRmJFZIjldNM2EpkmszpDw=)
3: X91v8T4v3SGFy7I37g4wXveNq7Q.roa (hash: WWeSP8Bv7bkntWr8c/ZwSbMkcIcKgP3z0XXfZzT3UxQ=)
4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: wicekr7cRLJRWuRiTE1p0rzPNQwpdT6OkE2XUhcm3wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:3c:b9:17:01:2a:c5:45:de:83:b4:20:a3:f6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: May 13 02:01:23 2026 GMT
Not After : May 14 02:01:23 2026 GMT
Subject: CN=3af8e366568d4d7ca30e824fbfcc2a3ca8e69914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:e3:83:b0:9e:93:c6:9b:ec:9c:3d:f0:5e:
97:89:04:77:3c:03:de:aa:c1:16:03:09:73:ef:47:
8c:45:91:55:69:9f:83:2d:a4:c2:65:80:13:0b:63:
56:a2:c9:72:1f:74:32:c8:2e:40:00:f9:90:14:05:
94:a8:7b:fe:f7:b8:b0:47:8b:3c:06:8b:ee:2f:34:
aa:5c:e1:52:6c:3c:87:96:30:fd:31:79:3a:b1:7e:
bd:dc:fd:89:3e:4c:46:77:78:59:cd:78:66:4d:d1:
59:32:c2:32:c3:75:c6:6f:21:8b:00:7e:20:d8:d0:
cb:ff:5a:99:11:3f:c8:4a:29:06:ed:06:e4:30:42:
97:0b:fd:6d:18:ec:a7:d5:cc:25:ac:d4:62:88:55:
e3:b2:b0:e0:40:89:ca:3b:46:87:d1:00:31:d7:f7:
f5:b4:0a:fe:d3:3e:fc:56:1c:d1:20:1f:ba:b2:49:
53:fc:4a:4b:67:09:68:7f:3a:47:10:8d:07:10:a0:
9a:d4:cc:45:0b:ca:57:37:00:58:59:33:66:52:65:
a7:74:d8:a4:ef:8b:bb:a7:d5:9a:93:f0:45:cd:21:
8f:f7:7a:6e:28:25:67:24:fa:04:67:3a:0d:1b:64:
53:5e:cf:b4:b5:02:7b:46:17:79:75:91:c3:d0:8f:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F8:E3:66:56:8D:4D:7C:A3:0E:82:4F:BF:CC:2A:3C:A8:E6:99:14
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:89:42:81:54:38:e3:ac:1d:bd:98:a2:5a:58:ab:8a:cc:23:
da:36:47:4e:9e:4c:d0:b0:27:7d:5c:5f:8a:ca:2a:b6:bf:eb:
ea:ae:3c:5b:e8:9a:ba:4e:c6:80:d2:ff:56:35:f1:18:4b:75:
4c:86:7e:3c:fe:d3:d0:c4:3e:6d:c9:99:60:b4:ee:5b:ec:f7:
12:4f:10:e5:b6:4a:70:ba:b3:d4:cf:92:06:0b:f7:0f:2d:15:
6d:d3:a0:b6:ac:c0:90:0d:ee:35:2e:df:37:81:5d:62:5a:26:
ab:bf:d4:58:0f:f6:e4:cb:23:80:c9:f2:a9:18:db:c0:34:4a:
00:a7:8d:8e:8a:4d:6a:04:47:12:4b:ad:bb:8e:d2:db:08:05:
18:e4:47:04:24:74:e1:f5:d3:b2:a7:a9:67:de:69:cf:99:28:
3e:02:e3:d4:dd:05:65:42:18:32:62:0f:10:8c:ac:db:4e:70:
0c:c8:e9:77:d9:02:84:aa:ce:61:60:75:ec:43:a4:58:bf:77:
9a:b4:f7:5b:3c:2c:bc:60:b0:1b:e3:e2:3a:7e:c3:26:a3:d4:
d3:e8:5b:b3:16:f2:d0:80:39:6e:d5:98:36:dd:d5:22:fe:ba:
8a:48:3c:c6:d3:6f:89:d2:16:bb:d5:0e:fe:33:0d:2f:f4:2a:
57:9e:96:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:24 2026 by rpki-client