Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: 5+dYHqdiq1K1d2u1a32Rt/BG06XXmqrtplMg3jdMazI=
Subject key identifier: 27:D5:87:7F:FC:AF:A7:83:0E:29:26:D3:11:60:5F:44:4F:F6:FC:51
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 019E9C97A3B17E42E2E5EFC5E18026ED9362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 131B
Signing time: Sat 06 Jun 2026 11:00:43 +0000
Manifest this update: Sat 06 Jun 2026 11:00:43 +0000
Manifest next update: Sun 07 Jun 2026 11:00:43 +0000
Files and hashes: 1: 1a09heU19_ryfPhTDOItUOYW9dI.roa (hash: 5eBlNMRyLdSqsVNmNmDeopusLkevokIjHf0hTvRVozE=)
2: KQji-kvGwokbQJLmZVW7oo2hsck.roa (hash: C1Er9TyXkYi4WTR5vknL0YRmJFZIjldNM2EpkmszpDw=)
3: X91v8T4v3SGFy7I37g4wXveNq7Q.roa (hash: WWeSP8Bv7bkntWr8c/ZwSbMkcIcKgP3z0XXfZzT3UxQ=)
4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: N63Aa8Mt7fmwzvx+ITgfTg9qJ9lwYW/W9NVbhgchiB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:97:a3:b1:7e:42:e2:e5:ef:c5:e1:80:26:ed:93:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Jun 6 11:00:43 2026 GMT
Not After : Jun 7 11:00:43 2026 GMT
Subject: CN=27d5877ffcafa7830e2926d311605f444ff6fc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:8d:de:61:96:95:91:9e:0c:7e:a3:d0:db:
a9:45:2b:80:2c:81:93:c0:a3:64:32:34:4b:da:c4:
b0:25:6c:c5:09:78:21:94:8a:72:e8:35:04:30:94:
88:5e:9b:03:4b:04:e0:3d:2c:ff:20:6d:5e:62:13:
8e:a6:49:1d:69:21:5c:6e:17:b7:95:36:3c:c2:55:
58:21:09:ee:b0:97:62:73:5b:b8:75:25:43:51:d5:
84:ad:6f:ae:e9:e4:5a:bb:01:d7:23:a0:38:97:1b:
d0:19:1b:19:e5:dc:a9:c8:e0:14:e6:ae:05:10:9d:
70:de:a8:c7:5a:c5:f5:15:86:73:88:9b:b7:78:06:
95:32:84:0c:49:ea:8a:44:c9:eb:da:40:ba:14:b6:
1b:2a:3f:75:ad:2b:48:3c:51:c1:98:a7:f5:a1:ee:
20:fa:a2:81:11:88:4f:c3:74:76:46:33:67:9e:df:
b0:44:ad:aa:93:ed:51:ad:8e:f1:ba:79:37:63:89:
3e:42:4c:79:eb:c2:5d:82:fd:25:d2:5f:36:90:c2:
8e:35:be:4f:a0:82:06:16:32:18:17:62:23:58:ae:
95:be:0b:33:3f:3b:21:bf:50:1a:42:f9:44:31:54:
05:c1:8b:d3:5b:5f:03:fa:94:4b:ea:7d:4a:4c:98:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D5:87:7F:FC:AF:A7:83:0E:29:26:D3:11:60:5F:44:4F:F6:FC:51
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:51:d0:2c:26:6d:d1:a8:16:e3:1a:a0:47:72:04:e8:2f:62:
55:4f:86:4b:85:51:94:59:97:6a:eb:51:80:77:37:44:67:74:
5a:fc:e2:2b:4e:22:5f:0c:84:38:16:6f:c8:99:f8:bd:a5:cf:
9d:ea:42:8b:a8:e7:36:2d:d0:80:94:fd:48:04:89:d4:50:3b:
3e:02:5f:fd:e1:34:bd:84:6a:d0:d7:06:a8:f3:ae:08:0d:26:
5a:5b:e4:b6:b2:71:a1:97:de:9f:14:e1:07:83:d2:c5:7d:89:
76:23:52:b7:6a:7e:d4:14:27:88:f4:75:98:5c:1e:73:af:02:
9c:08:bc:e6:c0:b4:19:f4:0c:4b:d3:aa:ea:b0:8e:fd:c6:8e:
02:c4:e3:8e:6f:c8:9c:4c:51:f0:c1:bb:54:17:da:d5:56:fb:
b5:af:8a:2b:c6:a4:2f:16:7c:d5:40:c3:53:35:00:09:58:30:
0d:01:bf:99:96:73:c9:b5:c5:12:9b:78:9e:70:80:0b:67:61:
91:e9:e1:d7:b3:36:d2:bc:60:0f:9b:df:f2:fa:3a:8e:c2:e6:
8c:88:a2:8a:e6:9b:0a:07:73:21:46:93:d5:1d:c7:aa:4a:44:
6e:4a:16:d5:33:ab:f5:ba:76:97:29:61:7b:72:81:79:72:db:
92:11:51:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6cl6OxfkLi5e/F4YAm7ZNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzg3ZDJiZTZlYWMzNmMxZDI3ODBmNzg2Yjg3YzllMTUz
ZTgxZjEwHhcNMjYwNjA2MTEwMDQzWhcNMjYwNjA3MTEwMDQzWjAzMTEwLwYDVQQD
EygyN2Q1ODc3ZmZjYWZhNzgzMGUyOTI2ZDMxMTYwNWY0NDRmZjZmYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVCN3mGWlZGeDH6j0NupRSuALIGT
wKNkMjRL2sSwJWzFCXghlIpy6DUEMJSIXpsDSwTgPSz/IG1eYhOOpkkdaSFcbhe3
lTY8wlVYIQnusJdic1u4dSVDUdWErW+u6eRauwHXI6A4lxvQGRsZ5dypyOAU5q4F
EJ1w3qjHWsX1FYZziJu3eAaVMoQMSeqKRMnr2kC6FLYbKj91rStIPFHBmKf1oe4g
+qKBEYhPw3R2RjNnnt+wRK2qk+1RrY7xunk3Y4k+Qkx568Jdgv0l0l82kMKONb5P
oIIGFjIYF2IjWK6VvgszPzshv1AaQvlEMVQFwYvTW18D+pRL6n1KTJiYLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfVh3/8r6eDDikm0xFgX0RP9vxRMB8GA1UdIwQY
MBaAFKN4fSvm6sNsHSeA94a4fJ4VPoHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMt
YjYwMmNlZGFjMzZjLzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMtYjYwMmNlZGFjMzZj
LzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFHQLCZt
0agW4xqgR3IE6C9iVU+GS4VRlFmXautRgHc3RGd0WvziK04iXwyEOBZvyJn4vaXP
nepCi6jnNi3QgJT9SASJ1FA7PgJf/eE0vYRq0NcGqPOuCA0mWlvktrJxoZfenxTh
B4PSxX2JdiNSt2p+1BQniPR1mFwec68CnAi85sC0GfQMS9Oq6rCO/caOAsTjjm/I
nExR8MG7VBfa1Vb7ta+KK8akLxZ81UDDUzUACVgwDQG/mZZzybXFEpt4nnCAC2dh
kenh17M20rxgD5vf8vo6jsLmjIiiiuabCgdzIUaT1R3HqkpEbkoW1TOr9bp2lylh
e3KBeXLbkhFRxA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 16:54:50 2026 by rpki-client