Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: 5iAt715igVnYlK/HyhtfshipJRFHOt7NlIwP4MjVJSU=
Subject key identifier: 82:69:EF:6F:6C:A1:52:C4:FE:EE:E5:15:71:C8:74:2E:8B:D4:59:62
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 019D37F7162B98CDF8A7C86BE93ADD1EDFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 14D3
Signing time: Sun 29 Mar 2026 05:00:33 +0000
Manifest this update: Sun 29 Mar 2026 05:00:33 +0000
Manifest next update: Mon 30 Mar 2026 05:00:33 +0000
Files and hashes: 1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: FJaMHdpDJWMgYkiXgLkucFh0Nrns21kNnY1Dzeu66jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:16:2b:98:cd:f8:a7:c8:6b:e9:3a:dd:1e:df:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Mar 29 05:00:33 2026 GMT
Not After : Mar 30 05:00:33 2026 GMT
Subject: CN=8269ef6f6ca152c4feeee51571c8742e8bd45962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:1d:c2:b0:8c:1b:2e:42:02:de:24:0b:2a:
b7:fb:3f:bd:75:89:84:ac:5d:69:27:57:07:4d:6f:
d3:3f:f0:85:55:33:b9:f6:9c:8e:3e:46:fa:4c:58:
31:4f:ca:38:8a:e8:e3:f3:a3:0f:45:d3:e8:e6:89:
68:fd:21:d7:b7:34:ef:1c:ce:c9:7a:8f:8b:aa:f1:
e3:be:8b:bd:c0:ac:81:f8:98:88:05:15:c3:56:80:
d2:30:b3:ea:a0:65:b0:74:64:c4:fc:6c:ab:8d:d4:
2c:80:4a:b6:27:d5:a3:c1:36:f2:4b:02:63:62:9b:
e4:a1:7b:e1:f8:c5:5f:81:a3:f9:ce:da:5a:09:89:
3c:bf:02:c7:da:bf:8c:19:51:a3:8a:63:59:7f:de:
3c:f7:e3:c4:83:a5:8b:42:74:7f:d7:f7:ea:a9:4d:
80:8b:39:c5:73:50:60:bc:10:29:b5:99:6f:62:20:
72:23:c8:44:bc:83:6d:55:7a:1d:15:09:34:5f:00:
87:a7:a9:27:69:ca:00:77:d6:30:6f:5e:dc:ff:c6:
74:95:c9:b0:2d:c2:0f:65:b0:94:62:4f:23:05:f3:
de:63:ae:0f:56:89:cc:8c:61:bd:e6:4f:9d:24:4d:
b5:4a:be:fd:0d:c9:df:f4:94:80:86:1a:4e:2e:65:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:69:EF:6F:6C:A1:52:C4:FE:EE:E5:15:71:C8:74:2E:8B:D4:59:62
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e1:25:45:15:c8:0c:4d:10:19:95:20:c4:c7:5b:c6:84:69:
35:a3:e0:5b:bf:be:e8:69:6a:cc:70:79:f3:fa:11:72:21:6c:
1d:f9:97:b4:cb:63:ca:58:02:89:d3:9b:d7:dc:90:ea:34:0e:
d5:0d:3a:57:6b:9c:c7:18:4a:5e:51:47:e5:c8:d1:19:7b:e7:
ea:20:ff:c6:f4:e8:fd:f9:f9:f2:3d:83:06:17:b8:a5:98:97:
41:f0:15:7d:d6:f2:b5:3d:43:a2:49:f3:cf:dd:e1:45:13:bb:
dd:29:3e:5d:92:3f:5e:a1:dc:e3:9b:3e:0b:53:c2:62:81:9c:
77:34:5b:fd:a6:2b:90:ee:62:ed:06:65:49:ce:6d:f6:2e:a4:
3d:29:61:26:ba:d1:4e:d7:6b:02:34:e2:b3:56:d3:63:42:33:
c9:7e:30:3d:8c:11:39:ec:a5:83:94:7a:af:a4:3f:a3:96:98:
cc:a8:8a:bd:d3:47:7b:25:0e:dd:b2:fa:3d:3e:6c:49:d3:30:
b2:4c:c8:44:21:b0:f6:22:ef:cd:aa:8e:02:e6:50:1c:d5:0b:
6e:66:83:5d:af:ee:40:56:c8:3f:d1:ae:48:48:49:13:04:bb:
5c:5d:a3:a1:fc:74:56:5e:f7:ff:63:e8:89:34:44:4c:be:59:
c0:08:af:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039xYrmM34p8hr6TrdHt/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZGEwMTk2MDk2YzExYzIzMWU0OWJiMzA4OTY3MGI5NGRi
ZjVlODAwHhcNMjYwMzI5MDUwMDMzWhcNMjYwMzMwMDUwMDMzWjAzMTEwLwYDVQQD
Eyg4MjY5ZWY2ZjZjYTE1MmM0ZmVlZWU1MTU3MWM4NzQyZThiZDQ1OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhYdwrCMGy5CAt4kCyq3+z+9dYmE
rF1pJ1cHTW/TP/CFVTO59pyOPkb6TFgxT8o4iujj86MPRdPo5olo/SHXtzTvHM7J
eo+LqvHjvou9wKyB+JiIBRXDVoDSMLPqoGWwdGTE/GyrjdQsgEq2J9WjwTbySwJj
YpvkoXvh+MVfgaP5ztpaCYk8vwLH2r+MGVGjimNZf9489+PEg6WLQnR/1/fqqU2A
iznFc1BgvBAptZlvYiByI8hEvINtVXodFQk0XwCHp6knacoAd9Ywb17c/8Z0lcmw
LcIPZbCUYk8jBfPeY64PVonMjGG95k+dJE21Sr79Dcnf9JSAhhpOLmUpwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJp729soVLE/u7lFXHIdC6L1FliMB8GA1UdIwQY
MBaAFKPaAZYJbBHCMeSbswiWcLlNv16AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYt
YTMwMmY2YTc0YjA4LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYtYTMwMmY2YTc0YjA4
LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+ElRRXI
DE0QGZUgxMdbxoRpNaPgW7++6GlqzHB58/oRciFsHfmXtMtjylgCidOb19yQ6jQO
1Q06V2ucxxhKXlFH5cjRGXvn6iD/xvTo/fn58j2DBhe4pZiXQfAVfdbytT1Doknz
z93hRRO73Sk+XZI/XqHc45s+C1PCYoGcdzRb/aYrkO5i7QZlSc5t9i6kPSlhJrrR
TtdrAjTis1bTY0IzyX4wPYwROeylg5R6r6Q/o5aYzKiKvdNHeyUO3bL6PT5sSdMw
skzIRCGw9iLvzaqOAuZQHNULbmaDXa/uQFbIP9GuSEhJEwS7XF2jofx0Vl73/2Po
iTRETL5ZwAiv1g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:07 2026 by rpki-client