Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
File: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft (raw, json)
Hash identifier: 1cnond8Sfe/9gg8OL9YvyOdd+da4tCodNQxVqlYWFK4=
Subject key identifier: 87:BF:AD:85:08:C2:7F:1A:7F:EC:84:EE:38:78:FB:19:23:E7:FE:E4
Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
Certificate issuer: /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Certificate serial: 019E284AC1373BBB3D5752E7DFE6EC5B3F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
Manifest number: 0133
Signing time: Thu 14 May 2026 21:00:48 +0000
Manifest this update: Thu 14 May 2026 21:00:48 +0000
Manifest next update: Fri 15 May 2026 21:00:48 +0000
Files and hashes: 1: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (hash: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g=)
2: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl (hash: z08+tLUZzweG5H7qRF313B43rmG63L6krkkwfqG+sLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4a:c1:37:3b:bb:3d:57:52:e7:df:e6:ec:5b:3f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Validity
Not Before: May 14 21:00:48 2026 GMT
Not After : May 15 21:00:48 2026 GMT
Subject: CN=87bfad8508c27f1a7fec84ee3878fb1923e7fee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:13:17:63:a2:70:ee:8e:72:d8:d1:cc:90:
26:51:41:1c:51:6d:a3:2f:e9:a0:5d:7c:d0:ef:31:
f3:63:96:3e:8b:25:7f:19:75:32:99:9e:7b:a0:4f:
d4:9f:ba:9f:2d:b2:cc:e6:29:0b:67:aa:9f:36:60:
7d:97:fb:55:7a:61:57:64:39:09:7c:6a:51:d0:41:
3e:ba:92:3f:0f:2c:ed:73:60:d3:96:03:7b:c7:2f:
d0:59:35:1d:e7:e5:f8:35:f0:37:c6:5a:4e:5f:d9:
0c:07:d3:be:de:9c:3d:18:9d:70:35:c2:a1:bd:b2:
ac:7e:08:59:2a:98:96:35:8e:d5:13:a0:c3:07:64:
c1:bf:30:a5:99:cd:06:d1:40:a2:bc:8e:d3:dc:e5:
a0:4b:e5:df:6e:ae:32:fc:ea:60:95:b7:5b:2d:76:
5e:7f:9a:5d:be:43:78:2c:1a:b1:33:0c:1c:27:f2:
8b:a3:12:15:1b:ff:5f:91:52:75:59:e0:67:19:ee:
e5:17:7a:6c:c9:21:81:b2:80:37:d5:6a:29:bd:22:
db:92:82:ef:60:f3:85:18:9f:01:9e:53:8c:58:6a:
11:37:16:ca:79:53:80:06:0d:33:45:f0:a7:2c:68:
f5:02:b1:db:e3:fb:0f:8f:da:78:c6:a3:61:e6:5c:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BF:AD:85:08:C2:7F:1A:7F:EC:84:EE:38:78:FB:19:23:E7:FE:E4
X509v3 Authority Key Identifier:
keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:86:1c:06:89:7c:5e:43:74:ad:5a:f1:86:6f:41:e4:ae:eb:
e8:7c:d6:e9:3e:67:6b:37:80:5b:f7:29:ef:a0:a5:82:17:64:
05:7c:4e:71:8a:61:c7:f4:bc:3c:4d:af:95:a0:2f:f6:bc:22:
3d:e2:f5:3c:6c:24:69:65:4d:9e:33:7b:e5:24:23:8a:fa:a5:
9d:2a:3d:d1:bc:87:b4:ae:c7:8e:21:f4:7b:b9:0d:6e:93:71:
fc:8c:47:a1:e0:52:bf:b2:5b:52:66:75:db:b5:55:ee:35:35:
b1:f9:c4:34:a7:cf:9c:74:56:7f:9d:82:59:0c:f6:8c:9e:d7:
11:7b:ff:0d:cc:1c:a7:02:10:57:18:ba:57:29:6c:1e:0c:74:
a5:23:91:1b:ce:74:06:1f:b9:05:6f:07:8a:a6:61:96:de:84:
f9:30:b4:f6:48:aa:89:6c:91:e8:70:fb:0e:f3:ae:34:cb:15:
f9:89:f1:a5:79:60:0f:ca:5f:8a:78:39:27:af:96:1b:12:f4:
4c:58:6c:d1:ec:e3:13:7f:10:5d:96:c7:6c:49:e9:79:11:39:
f0:35:2e:fb:00:a4:0c:eb:a5:33:43:ed:56:4b:48:00:fb:75:
0d:de:d1:d3:cd:68:8f:a0:3b:de:25:1b:38:8d:4e:85:95:24:
ce:e4:ee:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4oSsE3O7s9V1Ln3+bsWz9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZWY2MGQ5ZmE2YWEwYWMwM2JhMTY3ZGIwMWZjMTgyYjU4
NTYzZGEwHhcNMjYwNTE0MjEwMDQ4WhcNMjYwNTE1MjEwMDQ4WjAzMTEwLwYDVQQD
Eyg4N2JmYWQ4NTA4YzI3ZjFhN2ZlYzg0ZWUzODc4ZmIxOTIzZTdmZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBMTF2OicO6OctjRzJAmUUEcUW2j
L+mgXXzQ7zHzY5Y+iyV/GXUymZ57oE/Un7qfLbLM5ikLZ6qfNmB9l/tVemFXZDkJ
fGpR0EE+upI/Dyztc2DTlgN7xy/QWTUd5+X4NfA3xlpOX9kMB9O+3pw9GJ1wNcKh
vbKsfghZKpiWNY7VE6DDB2TBvzClmc0G0UCivI7T3OWgS+Xfbq4y/OpglbdbLXZe
f5pdvkN4LBqxMwwcJ/KLoxIVG/9fkVJ1WeBnGe7lF3psySGBsoA31WopvSLbkoLv
YPOFGJ8BnlOMWGoRNxbKeVOABg0zRfCnLGj1ArHb4/sPj9p4xqNh5lx9NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIe/rYUIwn8af+yE7jh4+xkj5/7kMB8GA1UdIwQY
MBaAFPzvYNn6aqCsA7oWfbAfwYK1hWPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kOGY5YTEtMGE4OS00ZGRlLWEzMWEt
MGY0NzViZjE0NjAzLzEvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kOGY5YTEtMGE4OS00ZGRlLWEzMWEtMGY0NzViZjE0NjAz
LzEvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoYcBol8
XkN0rVrxhm9B5K7r6HzW6T5nazeAW/cp76ClghdkBXxOcYphx/S8PE2vlaAv9rwi
PeL1PGwkaWVNnjN75SQjivqlnSo90byHtK7HjiH0e7kNbpNx/IxHoeBSv7JbUmZ1
27VV7jU1sfnENKfPnHRWf52CWQz2jJ7XEXv/DcwcpwIQVxi6VylsHgx0pSORG850
Bh+5BW8HiqZhlt6E+TC09kiqiWyR6HD7DvOuNMsV+YnxpXlgD8pfing5J6+WGxL0
TFhs0ezjE38QXZbHbEnpeRE58DUu+wCkDOulM0PtVktIAPt1Dd7R081oj6A73iUb
OI1OhZUkzuTu5w==
-----END CERTIFICATE-----
Generated at Fri May 15 06:20:05 2026 by rpki-client