Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: L3kaeq6x/QbUdKTqUQphwYKNRUs9XSUwMcf+Hs628tw=
Subject key identifier: CA:DA:4C:81:CC:B0:2B:E6:9E:94:F3:64:BC:33:19:06:56:B3:68:F1
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 019CC93EFBDD4BFBD4AEB80AE6D290941B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 1229
Signing time: Sat 07 Mar 2026 17:01:13 +0000
Manifest this update: Sat 07 Mar 2026 17:01:13 +0000
Manifest next update: Sun 08 Mar 2026 17:01:13 +0000
Files and hashes: 1: 1a09heU19_ryfPhTDOItUOYW9dI.roa (hash: 5eBlNMRyLdSqsVNmNmDeopusLkevokIjHf0hTvRVozE=)
2: KQji-kvGwokbQJLmZVW7oo2hsck.roa (hash: C1Er9TyXkYi4WTR5vknL0YRmJFZIjldNM2EpkmszpDw=)
3: X91v8T4v3SGFy7I37g4wXveNq7Q.roa (hash: WWeSP8Bv7bkntWr8c/ZwSbMkcIcKgP3z0XXfZzT3UxQ=)
4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: mYx28iiCY3Pu4WLUuGHgXC4xDOc//zdcxoqk/g/ZY3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:3e:fb:dd:4b:fb:d4:ae:b8:0a:e6:d2:90:94:1b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Mar 7 17:01:13 2026 GMT
Not After : Mar 8 17:01:13 2026 GMT
Subject: CN=cada4c81ccb02be69e94f364bc33190656b368f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:1d:5a:d2:84:7c:2c:a0:a9:ee:89:4f:4e:
a7:97:94:c2:56:68:b4:ed:f7:a7:35:23:86:40:29:
23:f1:da:ac:50:36:2d:b9:07:21:30:06:42:58:d7:
c8:a5:13:6a:96:86:e6:ea:20:73:73:c2:72:fa:71:
68:a5:1c:bd:23:2d:27:f9:3f:64:5e:f6:f6:d1:ce:
36:18:ae:59:27:06:7d:4d:de:d6:77:5b:c5:e3:d9:
9e:1f:03:81:8e:9b:75:8b:4d:6d:43:02:c6:f4:ad:
17:3d:50:78:54:d5:5c:29:4e:de:1c:96:b4:30:62:
9d:2a:f8:53:86:a7:28:6a:5d:e3:7b:5d:52:4d:e2:
50:6e:fa:fc:b3:6b:0d:1d:a2:e2:bd:97:0e:fc:c5:
f6:79:f3:d5:20:92:22:27:46:ff:9b:fa:20:b8:6a:
da:1f:27:b2:5e:84:31:4e:1b:69:ad:e9:0a:1e:49:
16:93:dc:8c:d3:14:48:0c:13:97:e3:ca:a4:21:e0:
fd:8d:0e:2c:22:e4:fa:e6:a9:94:47:1e:55:92:c1:
27:28:b0:3f:ac:0a:4a:b4:5d:b8:88:92:01:78:10:
2b:11:e0:20:bc:31:87:8b:d5:90:33:92:84:29:e2:
9d:9e:47:97:c8:a9:53:d5:61:00:05:64:e8:74:67:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:4C:81:CC:B0:2B:E6:9E:94:F3:64:BC:33:19:06:56:B3:68:F1
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:aa:5f:2c:11:98:47:b0:2b:53:21:fe:4a:f4:8f:12:4c:
09:e6:be:f3:40:94:91:38:14:e2:2e:f6:b2:cb:be:aa:d8:3b:
95:32:27:20:10:62:84:37:f9:6a:97:53:94:a8:03:91:61:e3:
21:b5:0d:ad:b3:6a:2a:0b:94:33:47:98:e5:06:23:32:fb:15:
53:34:db:7f:34:f0:ed:e0:f1:4c:30:58:7e:da:e6:ac:32:3d:
da:e2:1f:9c:ea:61:4d:1c:88:c3:cf:85:2d:92:74:2e:a1:91:
49:ba:2f:d9:6d:b0:c2:b5:68:91:bd:70:ce:1f:74:dd:4c:58:
25:ff:5e:49:b3:25:54:a9:a6:6f:4d:de:71:08:2d:50:dd:fd:
27:a9:8f:47:18:07:4c:4d:7b:3b:fd:a6:0f:41:28:3d:80:0f:
0c:d2:26:24:fb:ed:58:6a:59:80:45:58:b0:fb:84:dd:19:28:
02:14:76:f1:c5:c2:31:4c:3a:67:92:ef:5e:a7:3a:56:50:73:
32:ad:1d:90:80:96:72:20:f7:da:47:73:da:31:e6:b7:79:36:
2d:54:e5:2b:ab:c5:0a:75:be:35:37:29:09:85:19:20:5a:ee:
52:fe:db:84:43:4d:6e:14:11:f4:43:b7:cd:33:59:13:55:0b:
af:5a:7c:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzJPvvdS/vUrrgK5tKQlBs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzg3ZDJiZTZlYWMzNmMxZDI3ODBmNzg2Yjg3YzllMTUz
ZTgxZjEwHhcNMjYwMzA3MTcwMTEzWhcNMjYwMzA4MTcwMTEzWjAzMTEwLwYDVQQD
EyhjYWRhNGM4MWNjYjAyYmU2OWU5NGYzNjRiYzMzMTkwNjU2YjM2OGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFgdWtKEfCygqe6JT06nl5TCVmi0
7fenNSOGQCkj8dqsUDYtuQchMAZCWNfIpRNqlobm6iBzc8Jy+nFopRy9Iy0n+T9k
Xvb20c42GK5ZJwZ9Td7Wd1vF49meHwOBjpt1i01tQwLG9K0XPVB4VNVcKU7eHJa0
MGKdKvhThqcoal3je11STeJQbvr8s2sNHaLivZcO/MX2efPVIJIiJ0b/m/oguGra
HyeyXoQxThtprekKHkkWk9yM0xRIDBOX48qkIeD9jQ4sIuT65qmURx5VksEnKLA/
rApKtF24iJIBeBArEeAgvDGHi9WQM5KEKeKdnkeXyKlT1WEABWTodGdkhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMraTIHMsCvmnpTzZLwzGQZWs2jxMB8GA1UdIwQY
MBaAFKN4fSvm6sNsHSeA94a4fJ4VPoHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMt
YjYwMmNlZGFjMzZjLzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMtYjYwMmNlZGFjMzZj
LzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWOqXywR
mEewK1Mh/kr0jxJMCea+80CUkTgU4i72ssu+qtg7lTInIBBihDf5apdTlKgDkWHj
IbUNrbNqKguUM0eY5QYjMvsVUzTbfzTw7eDxTDBYftrmrDI92uIfnOphTRyIw8+F
LZJ0LqGRSbov2W2wwrVokb1wzh903UxYJf9eSbMlVKmmb03ecQgtUN39J6mPRxgH
TE17O/2mD0EoPYAPDNImJPvtWGpZgEVYsPuE3RkoAhR28cXCMUw6Z5LvXqc6VlBz
Mq0dkICWciD32kdz2jHmt3k2LVTlK6vFCnW+NTcpCYUZIFruUv7bhENNbhQR9EO3
zTNZE1ULr1p80g==
-----END CERTIFICATE-----
Generated at Sun Mar 8 02:59:00 2026 by rpki-client