
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: X0w+fitDonaZZRlgOBxUXDcaZleuvhm3Ci6GLcIquAw=
Subject key identifier: 91:37:3B:5D:0C:DB:FB:DE:91:11:AD:BC:23:6F:2B:2A:BA:1A:CB:78
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 01A1189917DFDC385A4031D12EA86C536B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 16D5
Signing time: Wed 07 Oct 2026 23:00:48 +0000
Manifest this update: Wed 07 Oct 2026 23:00:48 +0000
Manifest next update: Thu 08 Oct 2026 23:00:48 +0000
Files and hashes: 1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: li8yjoIkSDa3T5JgJFfDfESPH/d2gshQSEeaZgZuKVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:99:17:df:dc:38:5a:40:31:d1:2e:a8:6c:53:6b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Oct 7 23:00:48 2026 GMT
Not After : Oct 8 23:00:48 2026 GMT
Subject: CN=91373b5d0cdbfbde9111adbc236f2b2aba1acb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:ca:10:bc:bc:66:84:ab:f8:47:5c:4d:ff:
57:1c:37:8d:ae:3e:62:2f:c5:78:2d:d1:8a:d2:88:
16:d4:d2:68:d2:60:e6:19:c6:07:8c:e4:cd:dd:45:
7b:58:50:90:ca:84:6c:d5:77:ee:c0:a4:c7:32:40:
c6:fb:b6:f5:04:cc:ad:ee:05:b0:73:7a:4f:88:2a:
50:77:cb:1a:af:25:6c:43:73:06:73:89:eb:53:44:
33:77:2d:5c:c0:40:4d:31:bd:a7:8f:47:37:6f:e8:
b0:c5:a4:01:83:7f:5d:b3:fd:c6:07:cf:ef:5f:e6:
92:9b:bf:1a:01:45:f2:00:68:68:44:52:e7:32:2a:
ff:ba:81:b2:3d:0a:93:07:df:57:c7:a7:05:9e:15:
0c:ff:36:61:73:f5:06:65:f3:2e:0b:d9:1e:6b:68:
2f:2a:0d:91:87:2d:94:a0:98:45:70:5c:b0:65:f6:
e3:58:ab:fd:a8:ff:23:3b:6c:66:d3:5d:f2:53:28:
d1:31:c5:7a:63:3e:55:8b:60:29:86:8c:fe:29:49:
6e:5a:29:86:a8:a8:8c:95:d4:cb:c8:8d:96:14:55:
bc:69:09:e2:0c:73:ab:ed:4d:52:3e:0c:1f:17:df:
57:56:34:1b:91:37:31:ba:f0:92:82:01:d5:af:fa:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:37:3B:5D:0C:DB:FB:DE:91:11:AD:BC:23:6F:2B:2A:BA:1A:CB:78
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2a:3c:12:f4:04:77:dc:e9:05:89:3e:b7:3c:bb:eb:48:6e:
89:4c:61:ab:6f:0a:d0:47:77:e2:0b:aa:f4:82:d0:7c:5a:56:
89:ba:46:11:17:3d:ff:a7:2a:7b:e3:72:0b:47:f5:12:c2:2e:
88:ed:12:aa:c9:a7:e3:76:ed:87:fe:06:9f:ce:7e:79:fb:b4:
db:ba:22:c9:ae:95:d5:15:0f:87:b5:c6:1c:3d:96:27:1b:4d:
f6:18:6b:3f:dc:30:35:58:0a:ab:cc:bc:ee:30:e7:de:88:22:
12:17:07:2b:1e:ca:4c:b3:d7:b5:8c:84:60:1b:cf:96:7b:30:
e2:08:c4:75:57:d4:65:ca:53:50:17:37:85:1c:a6:9f:50:c3:
b9:3a:33:7c:cd:e0:34:24:6d:51:65:d6:ac:ce:2c:96:d7:cc:
08:3b:e5:3f:1f:20:b8:59:e8:64:61:6e:17:7c:28:40:8c:8d:
74:8e:2d:bd:bb:d6:d9:5b:0e:a1:8c:7f:7f:8f:a2:f0:a2:d2:
22:b5:0b:b6:fe:59:b6:8c:77:b6:39:6c:62:f1:35:5e:70:ad:
0c:60:17:3f:48:82:bb:da:c7:6a:ef:b7:fa:6e:3a:3f:9f:54:
39:5f:b3:1e:08:e4:9d:44:67:3f:0a:f1:70:fd:19:b2:00:0c:
3b:7c:b8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:01:31 2026 by rpki-client