Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: yerwrZ/Puj6kj8cXigzmhF2Il440KX1rySMJ4nN89VM=
Subject key identifier: F9:9F:71:63:0B:9A:AB:76:54:47:80:C6:0B:51:43:8E:38:2B:EA:7B
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 019D2695D3A9CFE473B467F797A3C91E66D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 14CA
Signing time: Wed 25 Mar 2026 20:00:46 +0000
Manifest this update: Wed 25 Mar 2026 20:00:46 +0000
Manifest next update: Thu 26 Mar 2026 20:00:46 +0000
Files and hashes: 1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: Cswc3rEFSCOs4Asa444yXMAXM+zQdxa7oUmiP31BMZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d3:a9:cf:e4:73:b4:67:f7:97:a3:c9:1e:66:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Mar 25 20:00:46 2026 GMT
Not After : Mar 26 20:00:46 2026 GMT
Subject: CN=f99f71630b9aab76544780c60b51438e382bea7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:3d:e2:c7:18:02:c6:2d:a2:44:2b:3c:d9:
31:f9:a7:c9:83:f8:13:6e:69:d2:76:d5:e2:9c:4b:
a2:8c:43:40:b6:24:b8:c9:f0:22:fe:b7:47:6e:a1:
08:5d:ca:2b:3e:7b:d9:f5:66:ef:04:6f:f9:23:25:
aa:72:4f:21:f7:96:ed:0c:30:88:50:d3:e6:e4:cf:
c3:6e:88:c2:59:b2:5f:c8:9e:01:58:0f:cd:1f:99:
b8:9d:84:da:a9:7d:21:43:3c:66:dc:05:3f:bd:87:
d1:35:33:cf:f0:14:f3:23:d0:dd:fe:7e:1c:67:a7:
04:0a:62:8c:f0:a5:be:e8:e8:a8:fd:c8:ca:3d:8a:
22:2f:09:e8:2d:25:a1:76:8a:36:72:e8:a1:09:81:
df:e5:87:ed:82:dd:f6:bc:51:1b:56:f8:b4:45:07:
88:8d:35:10:ae:57:8c:88:95:11:47:26:a1:c1:bc:
e5:e1:90:c9:66:7c:d0:71:cd:5f:89:44:a2:86:61:
65:37:32:81:ca:60:63:a0:49:c8:ff:88:a8:98:a0:
4c:de:46:9d:8d:f7:6c:7a:26:b9:7b:cc:58:95:bd:
67:30:10:90:0b:7b:78:16:11:a2:85:c1:28:d8:94:
23:01:76:47:27:a1:dc:32:1f:1d:48:5e:5c:c0:ff:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9F:71:63:0B:9A:AB:76:54:47:80:C6:0B:51:43:8E:38:2B:EA:7B
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c2:72:6e:6a:90:dc:a5:17:f4:20:c1:aa:0a:4b:72:9d:24:
9c:0d:88:ce:01:ab:f4:b8:27:5a:93:6f:da:3d:92:d1:64:c1:
e9:7d:3a:e2:b7:98:8e:70:c8:b8:ea:c4:96:38:f6:7e:b3:67:
fd:40:b3:e2:ea:45:b5:78:f2:07:00:3b:d1:df:9e:c1:dc:1d:
58:af:64:11:ae:1a:5f:1c:19:2c:5a:6c:19:12:e0:fa:8f:98:
46:24:f7:da:8e:8d:1e:94:1f:40:9b:63:da:7e:12:29:17:29:
2b:68:f0:d5:00:97:f0:04:ad:bb:7d:e2:a8:f9:e9:84:eb:3a:
53:5d:9c:96:2f:97:16:51:23:cc:43:d2:02:5e:cb:07:5e:f8:
eb:fa:f5:16:56:06:b8:e8:b1:67:7d:48:2e:46:d8:96:97:94:
64:0a:db:eb:56:3c:8c:23:2e:53:81:20:75:56:86:c5:df:b5:
27:d3:0b:73:48:64:46:a6:fe:3d:51:1d:bc:11:97:3c:ec:fc:
59:04:f4:b1:a1:cb:70:eb:98:4b:92:74:29:9a:0b:ee:86:2a:
43:1b:11:cc:ec:90:28:6c:50:4e:b0:1f:84:05:67:44:a7:bc:
7a:99:31:f3:00:f0:03:dc:cc:6f:ee:7e:e5:5b:19:70:6e:79:
11:16:7c:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mldOpz+RztGf3l6PJHmbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZGEwMTk2MDk2YzExYzIzMWU0OWJiMzA4OTY3MGI5NGRi
ZjVlODAwHhcNMjYwMzI1MjAwMDQ2WhcNMjYwMzI2MjAwMDQ2WjAzMTEwLwYDVQQD
EyhmOTlmNzE2MzBiOWFhYjc2NTQ0NzgwYzYwYjUxNDM4ZTM4MmJlYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXI94scYAsYtokQrPNkx+afJg/gT
bmnSdtXinEuijENAtiS4yfAi/rdHbqEIXcorPnvZ9WbvBG/5IyWqck8h95btDDCI
UNPm5M/DbojCWbJfyJ4BWA/NH5m4nYTaqX0hQzxm3AU/vYfRNTPP8BTzI9Dd/n4c
Z6cECmKM8KW+6Oio/cjKPYoiLwnoLSWhdoo2cuihCYHf5Yftgt32vFEbVvi0RQeI
jTUQrleMiJURRyahwbzl4ZDJZnzQcc1fiUSihmFlNzKBymBjoEnI/4iomKBM3kad
jfdseia5e8xYlb1nMBCQC3t4FhGihcEo2JQjAXZHJ6HcMh8dSF5cwP9k8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmfcWMLmqt2VEeAxgtRQ444K+p7MB8GA1UdIwQY
MBaAFKPaAZYJbBHCMeSbswiWcLlNv16AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYt
YTMwMmY2YTc0YjA4LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYtYTMwMmY2YTc0YjA4
LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicJybmqQ
3KUX9CDBqgpLcp0knA2IzgGr9LgnWpNv2j2S0WTB6X064reYjnDIuOrEljj2frNn
/UCz4upFtXjyBwA70d+ewdwdWK9kEa4aXxwZLFpsGRLg+o+YRiT32o6NHpQfQJtj
2n4SKRcpK2jw1QCX8AStu33iqPnphOs6U12cli+XFlEjzEPSAl7LB1746/r1FlYG
uOixZ31ILkbYlpeUZArb61Y8jCMuU4EgdVaGxd+1J9MLc0hkRqb+PVEdvBGXPOz8
WQT0saHLcOuYS5J0KZoL7oYqQxsRzOyQKGxQTrAfhAVnRKe8epkx8wDwA9zMb+5+
5VsZcG55ERZ8Ag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:59 2026 by rpki-client