Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: p3IR6ast8I1oisFxrfFTZ/fXgACDht5FpausYClANLY=
Subject key identifier: 44:D2:63:08:39:9F:8C:DB:54:93:E7:6E:9D:0B:5C:7E:BC:3E:25:61
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 01A18A89C625E8B5976BB5ED806936B7FB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 1710
Signing time: Fri 30 Oct 2026 02:00:47 +0000
Manifest this update: Fri 30 Oct 2026 02:00:47 +0000
Manifest next update: Sat 31 Oct 2026 02:00:47 +0000
Files and hashes: 1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: IKeltmdC/xcOQBlucZNaWGRND4ry3HV0x3VeiyXFebU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:89:c6:25:e8:b5:97:6b:b5:ed:80:69:36:b7:fb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Oct 30 02:00:47 2026 GMT
Not After : Oct 31 02:00:47 2026 GMT
Subject: CN=44d26308399f8cdb5493e76e9d0b5c7ebc3e2561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:7c:7e:2b:ff:e0:07:9a:b5:06:83:50:4e:
24:2a:11:19:1d:c3:44:7d:6c:7b:26:4e:15:ae:7e:
c9:6b:a7:ab:57:d0:0d:cb:99:39:4a:b1:21:68:48:
34:6b:03:30:ef:04:0d:ca:0d:7f:50:6b:31:a1:5a:
47:db:28:d0:f0:89:0c:52:96:70:4a:e4:10:2c:5c:
5f:8f:02:a5:1a:74:c5:44:f7:06:f9:6b:dd:0f:cf:
7f:9d:d8:d3:3d:0a:59:3f:f8:92:3b:34:ef:43:f4:
28:39:5d:80:32:67:bd:51:9e:45:a5:14:1b:5a:dd:
78:a7:6b:b4:89:dd:c3:bf:dd:01:70:45:44:35:62:
79:19:cc:d5:98:10:4d:c4:ea:a7:40:97:31:7a:69:
13:cd:4d:9f:8a:34:43:43:07:54:18:82:8e:c0:8a:
6c:ec:10:d4:d6:41:d6:1b:f9:e5:2a:3a:5a:9a:0b:
0d:b4:54:27:78:28:ae:ed:c5:99:5d:8a:75:29:ba:
7a:ca:c6:08:50:8a:df:78:b7:61:f4:fe:35:43:41:
72:74:09:81:a6:17:85:89:0d:4e:25:6e:93:37:1d:
33:ee:1c:e2:4f:d1:82:37:f1:e5:da:74:99:57:bf:
c1:af:66:1c:14:7e:74:0c:86:1c:e0:5e:c2:4b:a5:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:63:08:39:9F:8C:DB:54:93:E7:6E:9D:0B:5C:7E:BC:3E:25:61
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b8:72:d0:ba:04:fa:00:83:4e:ec:f9:cc:dd:5e:34:39:87:
70:c3:ba:17:d3:26:d5:32:e1:79:e6:fb:d9:84:c0:12:8f:8a:
36:4e:4c:ec:52:60:b9:92:f1:8a:b2:4e:53:86:f0:65:67:ee:
29:01:bc:e9:c4:b6:fe:5a:2e:6c:37:cc:55:5b:bd:ff:5b:78:
dc:4f:c0:14:3a:d0:3f:f3:17:9e:57:f8:93:02:f6:0a:0f:ed:
83:47:6a:66:da:73:0e:2b:e9:48:2e:73:3e:62:ac:b8:08:b2:
6e:44:af:f2:78:be:91:3e:b5:5f:5a:ee:60:f0:7d:b6:fa:f4:
19:f1:4b:06:de:af:24:0f:c4:85:e7:68:c7:69:96:9c:83:9a:
f4:24:74:da:a1:38:eb:0e:76:df:08:ae:60:56:cb:6f:a8:15:
31:40:1a:e4:74:74:92:df:fb:d0:e0:0c:5f:61:80:86:3c:c0:
bd:73:d8:35:f2:72:be:ba:69:92:3e:64:8d:6b:e0:c3:b0:24:
66:d7:5e:ab:fb:20:76:4f:81:01:9c:f7:92:7a:23:21:b5:6e:
39:42:e7:fc:d8:f4:53:41:eb:6b:d2:30:96:d6:7f:53:7e:99:
43:d6:b8:39:7a:45:1d:15:30:8d:5d:61:b6:53:8f:9a:35:f2:
56:c9:05:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:12:40 2026 by rpki-client