Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: KAxjBzXUVk7K5D9yNeJxsLYr5nUxEZu1LV61LCR1Tqs=
Subject key identifier: F8:21:E7:E1:CD:35:06:DA:A2:3F:EE:09:60:C6:87:A3:F5:F9:65:C9
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 019F946DD838097053ADC0A980A112D45542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 160C
Signing time: Fri 24 Jul 2026 14:00:54 +0000
Manifest this update: Fri 24 Jul 2026 14:00:54 +0000
Manifest next update: Sat 25 Jul 2026 14:00:54 +0000
Files and hashes: 1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: M9uYxVCOa/BQCK6DnMbTM4t8aZvpUhBx2no62fNkzt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:d8:38:09:70:53:ad:c0:a9:80:a1:12:d4:55:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Jul 24 14:00:54 2026 GMT
Not After : Jul 25 14:00:54 2026 GMT
Subject: CN=f821e7e1cd3506daa23fee0960c687a3f5f965c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:f5:e2:90:bc:db:bd:07:12:c5:75:7a:1d:
59:fe:8e:ac:61:1a:14:0c:d4:a9:bf:8a:27:5c:c1:
92:30:7e:35:58:b4:18:79:2e:e5:28:82:32:3c:8e:
fb:39:ae:3a:cb:74:24:8f:69:e9:27:37:d9:ad:be:
fe:7a:c0:10:d5:a5:1c:f6:b1:39:fc:29:25:27:04:
c4:ed:3c:7f:09:b6:3e:c8:b1:e0:fe:ef:6c:7b:36:
b9:38:8b:91:86:5c:70:74:2d:3c:3d:0f:7f:1d:6b:
c4:58:fc:a9:d3:cc:ca:de:68:0a:f4:7d:32:21:79:
b3:95:f4:25:59:7f:c6:14:81:c2:0e:4d:9e:7d:3a:
0d:56:5f:38:fd:69:2e:2c:d5:c0:07:89:2a:a1:70:
a1:80:4c:08:0a:87:69:a6:16:62:94:73:06:be:73:
73:4a:9a:64:97:bc:cb:97:0f:28:8f:a4:ef:e2:4b:
48:d6:75:44:15:6a:ff:3d:0a:61:08:03:a5:c3:de:
62:90:04:c6:5b:88:af:18:46:64:6f:82:b3:15:e4:
33:01:75:2b:0c:e5:ce:31:91:a5:97:33:b2:dc:da:
4f:2d:75:8c:63:6f:dc:03:a8:bf:0b:f7:09:e3:16:
4d:f5:b8:fb:00:92:96:f9:80:b7:7c:6b:54:18:a1:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:21:E7:E1:CD:35:06:DA:A2:3F:EE:09:60:C6:87:A3:F5:F9:65:C9
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c2:78:f0:67:ef:a8:99:b3:fc:04:d5:58:1f:83:bb:71:0e:
fc:b3:b0:40:28:43:f1:96:4f:bf:52:73:90:d5:dd:1c:ea:f4:
ad:79:98:d7:a3:9f:e3:1e:05:67:22:3b:aa:ef:85:ff:64:58:
c6:6a:f9:a3:93:2b:fa:52:d2:45:8f:b6:10:1f:25:41:fe:9e:
31:7a:00:e0:00:3c:b7:cd:aa:12:03:e2:7d:ce:39:dd:3e:03:
3b:c4:93:01:4a:ad:f2:f6:e3:87:9f:e7:a3:1a:b7:b9:bb:c7:
1a:d1:2d:c1:68:b7:31:2f:f8:c5:cb:e3:e5:2d:94:03:e8:9d:
0a:5f:f6:71:55:fa:fa:4d:b2:e3:6a:ee:23:47:3e:be:36:29:
d9:3e:4b:45:a2:e0:a5:b3:81:77:e5:03:3f:6e:39:33:4b:cc:
65:55:6f:fc:6f:ce:f6:52:6b:62:ef:41:23:0b:7a:ab:ad:3d:
f0:c4:66:00:22:98:42:35:a1:85:88:6e:09:d0:42:73:4b:0b:
56:f1:40:59:df:7f:33:26:51:4c:54:e5:08:8e:ba:37:30:ef:
3b:ac:a7:84:bb:55:6b:67:11:3f:70:a2:ec:14:99:39:69:1c:
13:d5:2f:d7:14:a8:d0:12:dd:a2:a3:28:a7:d0:db:25:3e:74:
98:f4:aa:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ubdg4CXBTrcCpgKES1FVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZGEwMTk2MDk2YzExYzIzMWU0OWJiMzA4OTY3MGI5NGRi
ZjVlODAwHhcNMjYwNzI0MTQwMDU0WhcNMjYwNzI1MTQwMDU0WjAzMTEwLwYDVQQD
EyhmODIxZTdlMWNkMzUwNmRhYTIzZmVlMDk2MGM2ODdhM2Y1Zjk2NWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswT14pC8270HEsV1eh1Z/o6sYRoU
DNSpv4onXMGSMH41WLQYeS7lKIIyPI77Oa46y3Qkj2npJzfZrb7+esAQ1aUc9rE5
/CklJwTE7Tx/CbY+yLHg/u9seza5OIuRhlxwdC08PQ9/HWvEWPyp08zK3mgK9H0y
IXmzlfQlWX/GFIHCDk2efToNVl84/WkuLNXAB4kqoXChgEwICodpphZilHMGvnNz
Sppkl7zLlw8oj6Tv4ktI1nVEFWr/PQphCAOlw95ikATGW4ivGEZkb4KzFeQzAXUr
DOXOMZGllzOy3NpPLXWMY2/cA6i/C/cJ4xZN9bj7AJKW+YC3fGtUGKHSJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgh5+HNNQbaoj/uCWDGh6P1+WXJMB8GA1UdIwQY
MBaAFKPaAZYJbBHCMeSbswiWcLlNv16AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYt
YTMwMmY2YTc0YjA4LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYtYTMwMmY2YTc0YjA4
LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsJ48Gfv
qJmz/ATVWB+Du3EO/LOwQChD8ZZPv1JzkNXdHOr0rXmY16Of4x4FZyI7qu+F/2RY
xmr5o5Mr+lLSRY+2EB8lQf6eMXoA4AA8t82qEgPifc453T4DO8STAUqt8vbjh5/n
oxq3ubvHGtEtwWi3MS/4xcvj5S2UA+idCl/2cVX6+k2y42ruI0c+vjYp2T5LRaLg
pbOBd+UDP245M0vMZVVv/G/O9lJrYu9BIwt6q6098MRmACKYQjWhhYhuCdBCc0sL
VvFAWd9/MyZRTFTlCI66NzDvO6ynhLtVa2cRP3Ci7BSZOWkcE9Uv1xSo0BLdoqMo
p9DbJT50mPSq9A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:15 2026 by rpki-client