Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
File: o9lcuYDUNnAPka6ld_Chw9EBOFE.mft (raw, json)
Hash identifier: uJHjnb4BNr6ceqYkySJA2U09FFEK+CcBsHyrloDa0xg=
Subject key identifier: 96:E9:A2:87:47:53:23:7E:17:FC:20:D8:30:6F:CB:C0:CA:19:F9:E7
Authority key identifier: A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
Certificate issuer: /CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Certificate serial: 01A1DE7029D66DCC6A205F271647EA137237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:00:55 +0000
Manifest this update: Sun 15 Nov 2026 09:00:55 +0000
Manifest next update: Mon 16 Nov 2026 09:00:55 +0000
Files and hashes: 1: W--PYm95WmPyMK8dgSgV_MgjMDs.roa (hash: R9ZHpGeHyDL8BzmrmuurqwX+rq5/d11mCwkWHYGA13Y=)
2: o9lcuYDUNnAPka6ld_Chw9EBOFE.crl (hash: Jm7yq+FHva92ToxRqAGOh89ESBugOzMTXiNhG37qd1w=)
3: wyVwViD6OFO9yJjbf0h1g5cFqQY.roa (hash: CrQ4iuhyJ0oAhIIFh/rkGOWZ0gSsnx159Ihl2XxcKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:29:d6:6d:cc:6a:20:5f:27:16:47:ea:13:72:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Validity
Not Before: Nov 15 09:00:55 2026 GMT
Not After : Nov 16 09:00:55 2026 GMT
Subject: CN=96e9a2874753237e17fc20d8306fcbc0ca19f9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:11:d6:37:40:12:28:5b:f2:50:97:7f:5a:
af:30:ce:59:74:69:93:0e:f5:9d:26:d5:fe:47:19:
27:6a:c7:8e:17:6c:76:ce:a7:06:bc:55:f6:cf:c0:
b5:67:82:0a:db:f0:9d:7a:26:0d:62:ab:65:d4:29:
e5:ec:e0:33:73:63:d6:9a:8e:b1:4f:24:32:ba:d2:
be:35:12:68:6d:70:5f:b2:c1:bc:7a:8f:06:5e:27:
69:e2:2a:30:03:61:78:a7:cc:66:2a:76:70:2b:a5:
04:c4:d2:50:e9:c0:62:3c:b7:65:25:a3:71:91:72:
c4:1f:f0:5a:63:9b:2e:42:7c:05:f2:a6:94:e6:d8:
7c:62:8b:c3:d9:6b:b8:93:86:32:f6:d0:16:88:b1:
65:73:24:c2:b7:5b:23:89:33:86:f9:f9:fa:d0:7b:
6f:60:b1:3f:49:de:b2:fd:49:1e:d8:4a:f0:a3:fc:
1a:04:c8:b9:79:c8:2d:d3:fd:83:2b:b3:70:3d:7c:
6d:c3:0b:74:06:68:d0:eb:fa:3b:9f:1d:c1:48:1b:
4c:a2:f4:8e:9c:59:54:38:62:e8:67:3d:8c:7e:1a:
c5:d5:87:87:80:4a:d4:68:e2:77:05:6e:a9:e2:2b:
72:17:48:d5:14:ab:e3:a4:1f:25:3c:7b:cc:01:06:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E9:A2:87:47:53:23:7E:17:FC:20:D8:30:6F:CB:C0:CA:19:F9:E7
X509v3 Authority Key Identifier:
keyid:A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c3:9e:ca:e5:32:a5:90:50:eb:7f:98:c8:df:34:83:dd:a5:
db:a5:1c:52:9b:7b:76:a9:fb:84:62:d0:d9:c3:26:dc:ff:83:
23:c2:82:2f:64:95:f1:2e:f5:0d:62:c2:75:5f:61:a2:8b:f1:
32:e6:e8:9c:6e:1c:ec:1c:9b:99:2f:f2:91:16:63:91:3f:d7:
c7:6e:ad:bf:9f:b4:37:ca:36:29:9a:61:01:6b:a0:e0:e5:bc:
04:82:6d:f4:45:b3:f9:e0:fa:8b:61:08:bc:32:fb:17:15:fb:
6a:4e:36:d0:a4:9f:32:b9:a3:ef:59:59:3a:a1:76:29:11:81:
c8:c8:e3:1c:ee:1e:f6:9a:f3:3d:c5:9b:d9:b4:a8:2f:57:88:
ce:b8:e0:d8:cb:46:cf:ec:6e:18:66:61:9c:62:5a:61:33:41:
cf:7f:1e:72:36:e3:89:e0:2d:d5:02:fd:0c:db:bf:ec:91:5e:
c2:86:59:a2:3b:5d:ab:54:19:0c:2e:9a:81:c6:e2:40:59:9e:
78:0a:62:32:b6:55:b3:b6:16:ab:ec:d2:df:f6:fa:9f:05:37:
ba:d1:54:10:9e:9b:7c:0e:9e:da:2b:00:10:1a:4d:ac:4b:eb:
c0:33:ef:29:ca:2f:ad:b9:d1:33:ed:3e:4a:f8:1b:b6:0d:54:
b7:36:1a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:12:15 2026 by rpki-client