Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: sgCby1+Tp0+BymLej6VMYpImZEzyDpy9mmQjmgbHNHI=
Subject key identifier: 90:86:9D:A9:D0:DF:2A:2E:AE:E1:8D:6F:DC:ED:64:AC:11:2C:25:18
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 019DB2EB7A4369F20A1A60B14ABA706A7109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 12A2
Signing time: Wed 22 Apr 2026 02:01:09 +0000
Manifest this update: Wed 22 Apr 2026 02:01:09 +0000
Manifest next update: Thu 23 Apr 2026 02:01:09 +0000
Files and hashes: 1: 1a09heU19_ryfPhTDOItUOYW9dI.roa (hash: 5eBlNMRyLdSqsVNmNmDeopusLkevokIjHf0hTvRVozE=)
2: KQji-kvGwokbQJLmZVW7oo2hsck.roa (hash: C1Er9TyXkYi4WTR5vknL0YRmJFZIjldNM2EpkmszpDw=)
3: X91v8T4v3SGFy7I37g4wXveNq7Q.roa (hash: WWeSP8Bv7bkntWr8c/ZwSbMkcIcKgP3z0XXfZzT3UxQ=)
4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: LUJi9nEjAzYgZhQ6irPL4i7kSJa0fkJ9XJirVjqw4Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:eb:7a:43:69:f2:0a:1a:60:b1:4a:ba:70:6a:71:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Apr 22 02:01:09 2026 GMT
Not After : Apr 23 02:01:09 2026 GMT
Subject: CN=90869da9d0df2a2eaee18d6fdced64ac112c2518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:38:48:16:41:04:c8:a8:6a:61:a8:5a:b7:
57:22:4f:65:c8:4f:92:be:79:28:13:0c:95:9d:2d:
4a:44:ba:36:3d:9b:91:fb:c7:dc:f5:e0:af:14:ac:
fd:e1:b8:41:ff:e2:13:03:3b:4e:34:0a:aa:c8:76:
55:5f:ae:2a:2e:66:9e:4e:ba:0a:85:91:cf:12:b3:
e3:5c:b1:fd:aa:77:79:a0:7c:85:ea:26:a7:27:51:
b4:9d:30:79:03:c1:37:1b:48:08:7c:5d:8e:2c:42:
f4:b8:35:6e:40:c8:bf:df:f3:a6:3d:c0:b1:a2:03:
0f:75:78:6e:59:dc:4d:e9:43:7d:d4:22:cd:fe:e6:
20:99:ba:b0:2d:74:df:8a:d9:c6:a2:30:51:ba:ad:
a7:da:c9:ef:7c:3b:29:6a:f7:da:28:3f:51:05:b8:
0e:e6:d9:07:72:1a:3d:b0:c5:7a:bc:23:3b:5e:6a:
07:04:42:af:84:71:52:f0:03:15:e8:72:21:de:80:
a8:66:f3:52:18:44:76:7d:de:18:53:bd:9b:4f:e9:
ad:ab:75:fe:f8:4e:25:fd:44:e2:82:a3:a4:be:a2:
51:8e:49:ca:35:51:4f:57:66:1b:9e:4c:ee:e6:1f:
8e:d1:b9:b1:e1:6e:a2:dc:cf:4d:3f:5e:9f:8b:80:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:86:9D:A9:D0:DF:2A:2E:AE:E1:8D:6F:DC:ED:64:AC:11:2C:25:18
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:41:b2:2b:81:95:6f:ee:50:a7:77:9c:09:93:39:dc:24:48:
8d:a6:9c:5a:93:18:a4:05:53:26:0c:0d:0b:99:d3:4c:42:83:
74:c3:7e:c6:af:2d:9e:43:f8:ae:af:22:f6:e5:f6:fd:e6:13:
e2:2c:cf:a5:35:45:ea:b5:c3:78:56:81:95:c4:36:ac:2d:c6:
dc:e1:7c:20:24:0d:99:14:19:d9:33:17:10:64:8c:8e:38:04:
2a:5e:7c:b4:86:56:cb:53:43:7a:44:0e:07:88:a1:96:f2:ca:
f5:35:fc:69:da:6f:c2:6a:2d:3b:c9:5c:db:a1:6a:32:e7:3d:
0c:56:7e:84:dd:49:b6:a8:df:1a:e5:4b:92:22:14:68:be:3b:
73:ba:9b:c6:47:31:7c:23:51:7e:75:dc:1d:21:eb:66:37:ec:
26:9d:73:0e:30:c1:f9:b2:a2:05:a1:84:2e:c8:4c:31:a0:ae:
79:9e:98:b3:f0:f2:e2:8a:62:3a:0a:09:6b:bf:77:fd:14:e7:
fa:af:c0:88:b5:58:c7:ce:89:3d:62:35:ee:4c:04:3d:41:72:
87:16:f2:5b:ff:49:b6:08:66:25:4d:04:2c:6b:43:89:5a:14:
26:2b:f9:68:7d:eb:30:c0:2a:44:30:3c:43:f7:9d:cf:12:9b:
c2:12:53:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:39:35 2026 by rpki-client