Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
File: O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft (raw, json)
Hash identifier: ID1j6E0ClKQh5q+aGo6Cz7GlmXtxtHLVdhpcN25GEN8=
Subject key identifier: 9A:7C:FB:9B:70:47:72:55:1A:C5:12:AB:54:9A:85:52:4A:A6:9A:B2
Authority key identifier: 3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
Certificate issuer: /CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Certificate serial: 01A08C0CB9F0FC98C0ECB04CE679F4976686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
Manifest number: 12B0
Signing time: Thu 10 Sep 2026 16:00:39 +0000
Manifest this update: Thu 10 Sep 2026 16:00:39 +0000
Manifest next update: Fri 11 Sep 2026 16:00:39 +0000
Files and hashes: 1: O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl (hash: /sA38NOMKyVJzfcJR01WD7sN1sGScqq4Ly4ec/llWHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:b9:f0:fc:98:c0:ec:b0:4c:e6:79:f4:97:66:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Validity
Not Before: Sep 10 16:00:39 2026 GMT
Not After : Sep 11 16:00:39 2026 GMT
Subject: CN=9a7cfb9b704772551ac512ab549a85524aa69ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:ab:1a:98:ce:39:30:4b:af:4d:17:e9:b1:
67:02:19:d9:1f:dc:df:6a:b0:60:ff:d6:1f:f0:4e:
91:79:83:ef:66:52:e7:04:b8:35:51:c0:1a:9d:f2:
d4:8a:f2:50:f1:60:bc:31:0e:4b:74:27:4d:fc:af:
09:d8:0e:dc:34:0c:5e:78:71:f6:f3:6d:fa:4e:8d:
3b:58:f8:ae:68:f4:57:1d:a0:08:e4:f4:9b:83:01:
1e:da:86:64:c4:55:fd:46:f9:f6:9f:98:07:dc:8b:
9d:92:c2:e4:2c:ab:2a:c8:40:73:c0:39:cb:96:3c:
a4:f9:01:e3:88:12:ab:a8:a0:03:1f:60:8d:19:eb:
24:00:5e:5f:e9:64:65:f4:2a:f2:77:50:e5:92:ee:
de:63:5e:7b:58:9c:f4:0f:5b:69:bf:1e:db:d3:be:
e9:72:9d:ac:24:73:4c:b5:03:28:4c:5e:ec:a4:dd:
ab:6c:e2:6c:76:f8:65:9d:c7:4a:bd:14:31:d2:ae:
b5:e3:f4:71:fb:c8:5d:4a:77:5e:76:1a:36:12:49:
40:a5:7a:c4:51:d5:96:fa:8b:46:cd:98:e3:54:dc:
31:49:b4:5d:c1:05:a8:5a:d0:3e:6b:02:de:47:de:
f4:c6:3a:9f:25:52:28:2f:82:3f:5a:6e:a7:b4:15:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7C:FB:9B:70:47:72:55:1A:C5:12:AB:54:9A:85:52:4A:A6:9A:B2
X509v3 Authority Key Identifier:
keyid:3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:38:d2:0a:10:3b:10:d3:a7:39:4c:2e:92:63:20:db:6a:16:
f8:fb:b7:25:34:14:95:e2:ab:f4:6b:4d:7d:0d:80:82:2d:77:
61:0d:d7:9b:d3:b3:39:3d:d0:72:42:65:13:bd:f1:d9:85:06:
5e:c6:62:d0:3c:22:59:3c:e7:f6:ba:1e:ca:57:6a:47:8f:40:
98:f5:2f:41:7d:ac:4a:1d:e4:74:4a:2f:60:65:26:ab:73:96:
21:7f:62:2d:03:12:a4:9f:8d:e3:af:04:8d:99:59:07:cd:b3:
f0:7c:50:c2:d1:d7:96:21:90:0c:1e:8d:14:99:9b:09:dd:ae:
54:fd:aa:81:cc:e6:db:8e:56:e3:1c:aa:d3:a9:9d:0a:79:44:
0c:3c:ac:bf:c9:06:5d:08:0a:43:21:c4:1d:4d:a3:70:82:2e:
23:1b:1c:45:cb:02:7f:1c:45:db:71:77:76:d1:9a:1a:eb:d0:
79:99:9a:87:d0:25:86:3f:28:ce:c0:98:3b:07:10:f4:0e:7a:
7e:ad:cf:33:3d:1a:c2:70:1f:63:c3:2c:06:95:7c:6f:7f:7f:
26:a6:47:b3:d3:95:18:76:eb:e9:4a:4d:10:7f:83:42:d2:37:
12:dd:a7:28:43:4f:39:09:a8:40:68:70:74:99:b4:c6:79:b6:
47:46:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:03:54 2026 by rpki-client