Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: iLUQbgKSm5u+Zo8/lT2S0Qnr/iuG26yeOXQ1lq7rnBQ=
Subject key identifier: B4:65:21:99:BA:5D:30:15:3C:79:0D:AF:DF:F6:66:20:42:B5:7B:2B
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 019EB845F8920D466A82EE7ACCA54A899DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 159A
Signing time: Thu 11 Jun 2026 20:00:53 +0000
Manifest this update: Thu 11 Jun 2026 20:00:53 +0000
Manifest next update: Fri 12 Jun 2026 20:00:53 +0000
Files and hashes: 1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: m4MIScwnX8Q9NjayAQy1/b7VooxP2cHF1KgbM4vzWhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:f8:92:0d:46:6a:82:ee:7a:cc:a5:4a:89:9d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Jun 11 20:00:53 2026 GMT
Not After : Jun 12 20:00:53 2026 GMT
Subject: CN=b4652199ba5d30153c790dafdff6662042b57b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:28:9e:cf:dd:39:ea:5d:f8:4f:7b:3d:67:
e2:2e:0d:da:87:75:c8:7e:89:f1:92:9c:e2:2b:f8:
22:5a:a8:3f:1f:21:6f:c5:35:6d:7d:db:8e:cb:2b:
ed:25:e2:cf:7b:9d:07:cf:62:38:87:8e:aa:b5:24:
f2:8b:5b:17:c0:82:02:4c:dc:e4:94:05:16:ad:09:
f5:89:85:e5:fb:c2:d3:bc:63:48:03:1a:f5:cb:aa:
86:89:10:a4:be:58:92:fb:fe:69:13:4d:5c:59:7e:
5d:98:66:52:08:b6:5d:9f:eb:be:0e:fc:53:8b:19:
39:fc:7b:9b:dc:42:c4:42:bd:35:3d:42:75:cd:53:
dc:39:67:0d:6f:60:56:94:14:5a:b8:cd:7b:06:7b:
2c:8a:4d:3a:b2:76:68:6f:b1:9e:78:88:5b:e9:30:
28:67:3c:4f:cc:ae:cf:42:9f:78:49:d6:cc:50:a2:
a9:e2:67:f1:63:27:b4:77:41:49:cc:62:7f:89:78:
e9:d6:49:61:8f:cc:77:a7:8c:8d:47:bb:1b:35:c2:
8b:d0:20:b2:37:6f:91:1b:f8:83:ef:45:96:28:8c:
f7:57:b2:53:aa:fc:bf:39:57:52:db:4f:a7:2a:39:
c9:76:7a:0e:d1:f2:00:5d:9c:2a:3a:84:ad:b5:70:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:21:99:BA:5D:30:15:3C:79:0D:AF:DF:F6:66:20:42:B5:7B:2B
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:51:b7:26:01:3e:52:91:c8:04:33:2b:7d:b3:a1:4d:95:ce:
c2:6a:56:d8:51:47:8d:83:cc:0e:97:de:27:8f:74:81:9e:56:
b6:c3:8d:1a:b8:c0:5d:89:d0:56:1e:e5:82:ea:20:a0:e5:b7:
4c:76:de:0c:df:a2:c0:20:ed:74:b2:d8:7c:77:23:00:4e:92:
23:11:3a:ad:55:8e:1b:e9:b5:2a:1d:ab:e3:bd:42:63:cd:ed:
3e:f8:c2:98:fb:c9:09:33:37:c2:2f:37:3b:be:4e:83:2d:10:
03:6f:08:c1:24:d9:b7:23:2e:04:01:dc:49:86:a2:1a:40:31:
57:d9:18:b6:6f:d0:29:48:20:89:a7:33:86:98:85:ac:d2:3d:
fd:f6:60:db:da:2d:2d:ac:3a:d4:4a:53:d6:10:fe:81:9b:0e:
28:c1:2b:cd:17:9e:d6:9a:60:ec:16:e5:67:c6:cc:e4:89:d9:
d0:95:75:2d:03:45:57:50:79:2a:eb:6a:f4:75:a8:5d:43:60:
a6:7e:90:31:da:0a:3e:f5:d0:f0:19:c6:9f:9a:17:6b:ad:52:
d5:cf:49:b2:87:7a:01:c3:2d:49:81:8d:b1:f3:97:e5:b1:4e:
dd:b0:5a:b1:8c:f8:1d:60:7c:30:a4:ae:95:7a:bd:bb:da:75:
c9:ae:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:02:13 2026 by rpki-client