Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
File: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json)
Hash identifier: JsUm3WUh+Ta7+Ou3llaJ4JCnBW6pROUTxn6ucjezekE=
Subject key identifier: 49:B1:4F:83:5D:AC:8A:89:AA:2E:72:48:0B:3D:78:12:6D:E8:FC:F8
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 01A0D6F0DB08B0B4C2609613499549E7F351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
Manifest number: 1592
Signing time: Fri 25 Sep 2026 05:01:43 +0000
Manifest this update: Fri 25 Sep 2026 05:01:43 +0000
Manifest next update: Sat 26 Sep 2026 05:01:43 +0000
Files and hashes: 1: E0FhH7aNsDOMh5ZSlQ4FDkv-nU0.roa (hash: q/8wfiJe6Z5yCg6R7Ws4sjAshSjQMW+hXl1C4xiGP+U=)
2: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: iwSQinBsGm6/nlkzQbXnSX7yGoUemw3oOVl3jKf9Cec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:db:08:b0:b4:c2:60:96:13:49:95:49:e7:f3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Sep 25 05:01:43 2026 GMT
Not After : Sep 26 05:01:43 2026 GMT
Subject: CN=49b14f835dac8a89aa2e72480b3d78126de8fcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:e0:9e:1f:9f:14:d0:01:53:73:43:ee:98:
78:4d:38:60:1a:b4:68:fc:f7:24:a9:c7:3b:18:f6:
d2:02:08:69:5a:a6:57:bd:9f:ff:3c:df:3c:5d:98:
8a:3a:de:80:a6:c4:a9:21:5a:40:1b:de:b8:9c:3a:
3f:eb:8e:23:1c:f0:c9:bf:07:2b:45:19:07:4c:53:
b3:b4:e6:1c:ad:a8:17:97:20:c6:2a:24:e1:69:f2:
8e:3f:44:9d:74:55:2e:25:c0:2f:1d:63:8f:00:43:
93:58:2d:f8:f0:9d:a0:3c:8e:1e:85:65:5d:7f:02:
3f:84:22:35:53:ea:9a:ff:d5:66:30:54:bb:a9:72:
8a:b9:c7:de:3f:39:af:13:db:f9:6a:3e:51:de:95:
16:e3:83:33:5e:0a:c9:bf:cd:96:5e:1c:5a:07:9d:
3c:35:4b:fd:8b:ce:da:3a:e1:08:eb:d2:d4:0c:2b:
95:87:47:e6:08:de:09:11:3a:41:a1:d7:cd:db:75:
79:4f:78:ff:ab:46:fc:50:4a:56:cf:b5:fc:02:15:
d8:21:98:f9:02:5d:df:ae:14:32:e1:95:64:56:07:
14:00:4c:98:72:c0:6b:d7:80:ad:fe:b1:27:79:10:
c5:dc:79:45:c7:e1:b3:b9:2e:90:aa:53:16:65:2c:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B1:4F:83:5D:AC:8A:89:AA:2E:72:48:0B:3D:78:12:6D:E8:FC:F8
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:22:71:a2:02:12:3a:a4:6c:aa:e0:74:08:92:05:3d:e1:98:
fe:03:fa:f9:d9:16:cd:f7:9a:b1:af:3c:cf:6d:35:94:a3:f0:
48:49:ee:15:bd:c1:9c:35:21:f9:bb:c5:11:e9:67:95:d1:f3:
4c:18:d0:ae:99:18:2d:fe:70:c6:73:e3:ab:14:8c:39:1a:5e:
42:6f:25:d6:fb:67:8b:1c:45:33:3b:b3:3c:29:be:30:5a:4f:
98:c1:14:cc:c3:6a:56:64:b8:3a:2d:c9:12:31:cd:ef:d9:01:
f7:83:d6:05:6e:34:bc:c0:f4:02:69:7a:cc:c6:27:65:5a:ee:
d8:0b:30:52:f5:ef:ac:f2:6c:79:cd:88:2b:06:30:5d:f0:94:
2e:a0:3f:76:7d:22:5c:9f:24:4e:ae:29:77:30:18:b7:98:bc:
41:3f:b8:7a:98:0e:00:82:c4:6f:1c:98:88:a5:06:22:65:12:
8f:a2:7d:83:17:74:ba:ef:77:48:8f:18:50:e4:a3:4a:89:2c:
88:1e:0c:9e:2e:87:e1:ce:40:b5:e6:b5:49:6f:72:7e:09:3e:
32:81:65:8f:90:cf:1d:31:8b:94:be:1e:5a:53:a9:88:ae:38:
97:45:b8:4a:1f:03:40:3b:aa:8a:b3:0b:7a:67:58:79:e0:c2:
db:45:6c:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDW8NsIsLTCYJYTSZVJ5/NRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz
ZWNiNjAwHhcNMjYwOTI1MDUwMTQzWhcNMjYwOTI2MDUwMTQzWjAzMTEwLwYDVQQD
Eyg0OWIxNGY4MzVkYWM4YTg5YWEyZTcyNDgwYjNkNzgxMjZkZThmY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0Xgnh+fFNABU3ND7ph4TThgGrRo
/Pckqcc7GPbSAghpWqZXvZ//PN88XZiKOt6ApsSpIVpAG964nDo/644jHPDJvwcr
RRkHTFOztOYcragXlyDGKiThafKOP0SddFUuJcAvHWOPAEOTWC348J2gPI4ehWVd
fwI/hCI1U+qa/9VmMFS7qXKKucfePzmvE9v5aj5R3pUW44MzXgrJv82WXhxaB508
NUv9i87aOuEI69LUDCuVh0fmCN4JETpBodfN23V5T3j/q0b8UEpWz7X8AhXYIZj5
Al3frhQy4ZVkVgcUAEyYcsBr14Ct/rEneRDF3HlFx+GzuS6QqlMWZSwMFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmxT4NdrIqJqi5ySAs9eBJt6Pz4MB8GA1UdIwQY
MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct
ZTBkN2RkNWUyZTZmLzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm
LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSJxogIS
OqRsquB0CJIFPeGY/gP6+dkWzfeasa88z201lKPwSEnuFb3BnDUh+bvFEelnldHz
TBjQrpkYLf5wxnPjqxSMORpeQm8l1vtnixxFMzuzPCm+MFpPmMEUzMNqVmS4Oi3J
EjHN79kB94PWBW40vMD0Aml6zMYnZVru2AswUvXvrPJsec2IKwYwXfCULqA/dn0i
XJ8kTq4pdzAYt5i8QT+4epgOAILEbxyYiKUGImUSj6J9gxd0uu93SI8YUOSjSoks
iB4Mni6H4c5Atea1SW9yfgk+MoFlj5DPHTGLlL4eWlOpiK44l0W4Sh8DQDuqirML
emdYeeDC20Vsxg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:45:46 2026 by rpki-client