Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
File: o9lcuYDUNnAPka6ld_Chw9EBOFE.mft (raw, json)
Hash identifier: PTnMT6aUWvMbirMWUR9w5HQw67aCSma9LTk/vSK1Q1w=
Subject key identifier: 9C:34:6F:77:24:14:4C:4E:9E:96:6F:83:88:A1:6E:35:74:C6:17:D7
Authority key identifier: A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
Certificate issuer: /CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Certificate serial: 01A08A8C5E0BB79BC671E294091B2DCC1066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:49 +0000
Manifest this update: Thu 10 Sep 2026 09:00:49 +0000
Manifest next update: Fri 11 Sep 2026 09:00:49 +0000
Files and hashes: 1: W--PYm95WmPyMK8dgSgV_MgjMDs.roa (hash: R9ZHpGeHyDL8BzmrmuurqwX+rq5/d11mCwkWHYGA13Y=)
2: o9lcuYDUNnAPka6ld_Chw9EBOFE.crl (hash: 0Ct2gxpppMESTmfLRm5vmzeeKSx+bpS0f7H167yNYJk=)
3: wyVwViD6OFO9yJjbf0h1g5cFqQY.roa (hash: CrQ4iuhyJ0oAhIIFh/rkGOWZ0gSsnx159Ihl2XxcKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:5e:0b:b7:9b:c6:71:e2:94:09:1b:2d:cc:10:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Validity
Not Before: Sep 10 09:00:49 2026 GMT
Not After : Sep 11 09:00:49 2026 GMT
Subject: CN=9c346f7724144c4e9e966f8388a16e3574c617d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:3a:83:ec:cd:13:f4:d4:c6:9c:55:91:41:
a0:e7:fc:96:2b:31:9c:99:ab:ec:e1:88:73:e4:a7:
b1:12:81:2e:1b:29:93:1e:a0:66:2a:94:4f:d3:39:
e5:f6:1a:84:08:8d:51:19:2e:20:13:34:68:2c:4b:
b2:35:f0:25:e3:b1:ad:c3:81:e2:21:96:d7:ba:0f:
b9:03:de:e0:9f:f2:c6:bd:b6:06:1b:ef:8a:7f:00:
6f:91:9f:77:77:47:2b:93:3e:7a:4d:42:9e:8f:65:
44:00:81:da:15:54:20:0c:d1:37:7f:0b:d0:f8:e4:
36:cf:7f:54:22:e2:ec:a5:14:ef:73:99:4e:53:1d:
0d:d3:e0:88:25:db:03:24:39:d0:49:72:3c:13:12:
98:5b:71:d0:26:e3:24:0c:4c:9f:b4:f9:a1:c9:14:
44:2f:41:1c:52:da:b9:bb:8b:d6:03:ae:d5:de:b7:
27:f1:51:77:7e:b7:cf:0e:8e:fb:50:1e:53:1a:af:
6b:d0:1b:a5:14:f2:f1:7f:98:6f:96:1a:ba:bd:77:
78:9c:1b:08:4f:61:e3:fd:f8:8c:7b:3b:56:a4:80:
46:92:66:87:24:ba:d5:d3:0d:cd:a7:70:d7:9c:7e:
56:80:d1:39:4f:44:07:e7:0a:8f:27:34:68:6c:75:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:34:6F:77:24:14:4C:4E:9E:96:6F:83:88:A1:6E:35:74:C6:17:D7
X509v3 Authority Key Identifier:
keyid:A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a9:c4:cb:98:e3:00:41:30:bb:55:75:67:6d:cc:ba:1c:9b:
7a:82:df:f8:a1:68:45:35:be:a2:a0:c5:ac:4f:6e:b7:92:17:
6e:7e:02:2c:d1:bd:56:dd:03:ee:08:5e:de:da:59:62:63:44:
4a:a1:cc:b9:71:55:e0:cd:7d:2e:cb:75:25:33:87:2e:a2:da:
42:34:a1:21:4f:aa:14:39:0e:9d:e5:de:c2:e6:2d:e0:20:dc:
4b:de:ad:b3:fd:8f:12:04:fd:aa:eb:2c:f4:e6:5c:1f:d4:35:
f5:dc:d7:47:be:ae:f0:05:1b:46:79:6a:46:31:3b:b3:d1:b7:
7c:16:27:d5:18:e5:48:f6:ad:f7:aa:3c:18:a0:49:9e:53:dd:
6d:4e:b7:2a:2e:de:1c:20:21:22:36:01:56:bd:e1:2e:ec:b7:
99:c9:d5:a2:5b:5f:ce:68:b1:02:53:52:3b:f2:5a:d9:2d:fb:
ce:0e:be:57:98:7c:a2:c7:b0:ae:48:d3:51:5f:aa:d1:9c:28:
20:cf:82:8c:2b:9b:db:d6:ab:c2:e0:6f:51:ad:f9:f8:50:19:
55:4d:ea:d5:9a:1e:3a:5f:7f:36:65:4b:1b:af:68:3c:94:df:
a0:94:6f:2c:63:42:3d:77:cb:39:67:94:f3:90:04:03:5b:89:
d2:ed:32:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjF4Lt5vGceKUCRstzBBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZDk1Y2I5ODBkNDM2NzAwZjkxYWVhNTc3ZjBhMWMzZDEw
MTM4NTEwHhcNMjYwOTEwMDkwMDQ5WhcNMjYwOTExMDkwMDQ5WjAzMTEwLwYDVQQD
Eyg5YzM0NmY3NzI0MTQ0YzRlOWU5NjZmODM4OGExNmUzNTc0YzYxN2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJc6g+zNE/TUxpxVkUGg5/yWKzGc
mavs4Yhz5KexEoEuGymTHqBmKpRP0znl9hqECI1RGS4gEzRoLEuyNfAl47Gtw4Hi
IZbXug+5A97gn/LGvbYGG++KfwBvkZ93d0crkz56TUKej2VEAIHaFVQgDNE3fwvQ
+OQ2z39UIuLspRTvc5lOUx0N0+CIJdsDJDnQSXI8ExKYW3HQJuMkDEyftPmhyRRE
L0EcUtq5u4vWA67V3rcn8VF3frfPDo77UB5TGq9r0BulFPLxf5hvlhq6vXd4nBsI
T2Hj/fiMeztWpIBGkmaHJLrV0w3Np3DXnH5WgNE5T0QH5wqPJzRobHVjGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJw0b3ckFExOnpZvg4ihbjV0xhfXMB8GA1UdIwQY
MBaAFKPZXLmA1DZwD5GupXfwocPRAThRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzlsY3VZRFVObkFQa2E2bGRfQ2h3OUVCT0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAt
MzRhOWU5OGE1Zjg2LzEvbzlsY3VZRFVObkFQa2E2bGRfQ2h3OUVCT0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAtMzRhOWU5OGE1Zjg2
LzEvbzlsY3VZRFVObkFQa2E2bGRfQ2h3OUVCT0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqnEy5jj
AEEwu1V1Z23MuhybeoLf+KFoRTW+oqDFrE9ut5IXbn4CLNG9Vt0D7ghe3tpZYmNE
SqHMuXFV4M19Lst1JTOHLqLaQjShIU+qFDkOneXewuYt4CDcS96ts/2PEgT9quss
9OZcH9Q19dzXR76u8AUbRnlqRjE7s9G3fBYn1RjlSPat96o8GKBJnlPdbU63Ki7e
HCAhIjYBVr3hLuy3mcnVoltfzmixAlNSO/Ja2S37zg6+V5h8osewrkjTUV+q0Zwo
IM+CjCub29arwuBvUa35+FAZVU3q1ZoeOl9/NmVLG69oPJTfoJRvLGNCPXfLOWeU
85AEA1uJ0u0yfA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:04:20 2026 by rpki-client