Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: sWIqi4dVY9+GqkImgCm0K11iSGWPxiwxRuPBJlCcx3c=
Subject key identifier: 13:37:73:54:FC:1A:CE:1D:CA:62:8C:4B:92:EA:DE:38:80:36:0F:A7
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 01A08B9F2DA7DDDF67845C57AF54E2D8B331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 168C
Signing time: Thu 10 Sep 2026 14:00:59 +0000
Manifest this update: Thu 10 Sep 2026 14:00:59 +0000
Manifest next update: Fri 11 Sep 2026 14:00:59 +0000
Files and hashes: 1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: IomrqirZg5rzldj/ZeoIQW2CVo/5+QX0ME3V65htUNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:2d:a7:dd:df:67:84:5c:57:af:54:e2:d8:b3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Sep 10 14:00:59 2026 GMT
Not After : Sep 11 14:00:59 2026 GMT
Subject: CN=13377354fc1ace1dca628c4b92eade3880360fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:49:f4:e9:7f:c8:6e:17:b5:40:d1:27:0f:
9e:e4:fa:56:47:58:79:05:4c:14:4f:de:3f:63:f4:
52:aa:50:cc:b2:5e:49:78:21:79:a9:11:09:ac:95:
12:ad:df:5a:46:4b:01:bc:d1:26:e9:3a:ca:e5:70:
58:65:fb:54:81:f0:e2:f9:f8:6c:82:98:80:0b:e0:
81:aa:09:fe:80:ef:fc:1c:74:0b:b4:59:65:eb:ee:
42:d7:7b:b0:fa:95:31:98:c0:76:26:6f:88:0a:5b:
9b:ac:a2:a4:8c:97:a4:35:67:54:65:be:0f:2c:41:
9f:61:e3:75:4f:c4:bc:42:55:c5:5f:5a:6d:16:ab:
0a:26:48:e0:48:76:47:ed:fb:cb:e4:9f:56:ec:0e:
5e:d6:c7:da:a2:f7:14:6d:7d:93:64:a1:83:ca:f7:
f0:7e:50:95:7d:df:36:85:2c:85:2c:5f:42:31:7a:
21:52:6b:d6:03:26:fe:d5:a3:95:46:5a:dd:5f:6b:
e2:b2:9f:08:ee:b3:23:76:a9:0c:c3:59:80:b7:54:
7b:f1:da:43:d7:8d:19:17:03:ec:38:68:78:12:f3:
99:86:1e:b4:c1:f2:ff:5e:0a:fc:41:7f:8f:1d:aa:
ac:55:dd:53:e0:c0:ed:51:44:1f:ce:32:eb:83:46:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:37:73:54:FC:1A:CE:1D:CA:62:8C:4B:92:EA:DE:38:80:36:0F:A7
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:79:38:ae:b3:04:58:e0:0c:75:9d:7f:ac:90:a2:97:f1:e2:
86:2e:3a:c2:94:1c:64:df:1c:89:a7:5f:0a:3a:53:f2:22:6e:
e3:78:f6:d0:93:31:3f:ea:e7:e0:b1:19:bd:f5:8d:44:04:74:
4a:2b:30:dc:d6:ae:00:1f:da:91:94:c4:5c:e7:a5:9c:ed:2c:
ca:b5:51:76:51:11:1c:08:2e:97:04:b7:2a:a2:03:19:cb:f4:
da:a8:64:80:8d:26:b8:7b:48:e6:37:f9:43:61:a3:31:18:9e:
9b:9d:bb:81:ae:5d:5e:2f:e4:38:a1:c3:9e:c0:ad:e5:61:25:
f1:ca:40:63:da:57:d2:0f:06:b3:ae:56:90:35:6f:11:16:91:
39:97:50:0a:33:7e:3a:65:5c:dd:a8:e1:c3:1f:f6:84:7b:c2:
88:ac:c3:bb:97:5c:95:6b:60:17:30:1e:99:71:a8:ee:58:30:
05:68:84:7f:65:d9:d3:4e:6a:10:dd:a6:40:05:6c:18:0d:c6:
3e:1d:22:e9:98:4d:d7:0d:9e:d3:d8:30:95:7d:04:73:fa:0f:
fe:01:a0:1f:2b:da:3a:78:13:52:2a:3a:c6:80:13:3b:21:26:
9e:32:8f:05:39:ec:3e:63:96:b0:83:57:72:ec:2e:81:0c:ac:
f0:be:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:18:44 2026 by rpki-client