Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier: IXk4T/oeDGEletnKCLKD+9pmr0MZfE79WZgc2M2GwKg=
Subject key identifier: 6A:EE:10:C8:6F:17:1C:30:CF:CD:B5:58:B8:BF:75:E1:3F:B5:F1:70
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 019CE47EBA9C31FE4F30CEA4A4ACF42512EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number: 164A
Signing time: Fri 13 Mar 2026 00:00:36 +0000
Manifest this update: Fri 13 Mar 2026 00:00:36 +0000
Manifest next update: Sat 14 Mar 2026 00:00:36 +0000
Files and hashes: 1: L2VyPx5ZvpU5RN459OVpFdGEzTI.roa (hash: q4E7mZNnPKZTyFhGeFOu6dBopK+4PcrNRvByumhCm4I=)
2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: FqqL0ppHqX4kgJsP9CT4otQk8IDQXPvnsB+v5jhMr3g=)
3: TJBNmpOs8INt5hscYvO24ZrUkg4.roa (hash: ccL8Nmo2+hfQcGN76XZ7Htt8PEnEJD9VPV3ept5h6/g=)
4: y-uuMFXf-Scx2MN6BDbVIftk3xk.roa (hash: yfvMu66uv7Lal8MVr9Vgy1IUkLDBtyoLNZxuu1dTKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:ba:9c:31:fe:4f:30:ce:a4:a4:ac:f4:25:12:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Mar 13 00:00:36 2026 GMT
Not After : Mar 14 00:00:36 2026 GMT
Subject: CN=6aee10c86f171c30cfcdb558b8bf75e13fb5f170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:92:2b:3c:59:be:e4:5f:a2:c9:91:45:c7:3c:
91:4b:84:be:53:8a:4b:09:67:3b:6b:f6:fe:63:86:
20:a8:76:3d:2f:27:7a:d7:1b:f4:10:9d:33:ed:a9:
83:c7:e4:db:b0:32:a0:a3:ef:e9:1e:4b:27:1e:1e:
67:b9:de:4f:b5:27:38:64:dc:4a:fb:d9:8f:c2:42:
5e:97:c4:83:f4:b9:dc:81:c3:a1:70:3d:33:10:30:
8c:de:05:b1:d4:78:ae:27:3a:43:6e:ed:4e:38:e4:
67:dc:eb:9b:3f:14:33:5d:b0:22:87:ae:6d:31:d1:
a8:fd:3c:02:60:4b:18:dc:0b:e4:68:11:ff:cb:48:
ca:db:13:8a:2d:4a:68:6d:a0:44:47:4f:c5:f6:ca:
88:ea:95:60:1c:44:35:52:75:ab:7a:0c:bb:66:e1:
af:43:90:f4:b9:19:6f:25:b1:cb:cf:d7:cd:0f:9a:
17:03:6f:e3:46:62:e9:eb:e3:30:83:f1:e5:99:fa:
fc:e0:99:5a:b3:e6:22:5f:69:47:e3:ab:65:59:c2:
6f:b9:2f:fb:9a:7b:80:9c:e6:bd:9c:74:30:1b:e0:
c6:fe:c4:49:f0:60:6e:21:71:8d:22:06:b6:da:90:
06:2c:11:89:f1:ab:48:31:87:30:ef:04:67:c8:71:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:10:C8:6F:17:1C:30:CF:CD:B5:58:B8:BF:75:E1:3F:B5:F1:70
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6f:9a:cd:67:cf:1f:39:9a:c0:60:aa:c8:34:f4:e0:e2:46:
4b:18:ba:b4:eb:1b:6f:09:a4:52:ad:2f:78:7d:a1:4a:2c:c8:
79:a8:83:ef:57:85:2c:55:a8:18:2c:d9:cd:bb:b7:76:d5:71:
3b:d8:a9:ba:8f:82:ae:4e:74:52:eb:36:3e:5c:67:91:19:fd:
65:ec:df:1c:cc:9a:a3:c9:84:5d:88:9f:c9:83:28:70:8f:6c:
fd:0e:cc:43:3f:0d:13:46:c4:84:b1:07:5f:12:e1:12:f9:21:
0f:fe:ac:09:b9:a8:fa:1f:c2:47:57:1b:0d:ae:5d:4d:80:76:
5a:c6:a6:2f:07:16:8b:2e:66:19:8c:b9:c8:09:be:b0:c8:cb:
65:59:e2:f5:b9:6b:aa:03:62:56:70:3a:5d:dd:d7:e9:43:45:
5b:f8:12:bb:bf:72:95:aa:63:11:6f:89:79:98:a1:fd:15:a5:
b1:d5:d9:de:85:1b:d5:b5:fd:59:7e:00:d5:e8:c6:d3:14:a4:
53:14:47:34:9e:c0:96:f0:f5:50:4c:a3:ee:a3:d5:4c:68:69:
9b:f8:0d:4e:d1:e3:97:43:54:1b:bc:88:77:4b:00:77:93:35:
ef:5f:1b:a1:28:43:b7:34:07:31:86:88:47:86:07:52:96:c6:
29:bd:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:11 2026 by rpki-client