Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
File: o9lcuYDUNnAPka6ld_Chw9EBOFE.mft (raw, json)
Hash identifier: oikt4cZhU++UBITM234vxtqZlRKzMTaT5sGBGEk/mFE=
Subject key identifier: 46:C1:EE:42:C4:0F:2C:50:73:8D:1D:61:97:AA:85:F4:9A:B0:B5:71
Authority key identifier: A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
Certificate issuer: /CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Certificate serial: 01A0C66B0F2A7C668D6C7C2C545C6F364D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:39 +0000
Manifest this update: Tue 22 Sep 2026 00:01:39 +0000
Manifest next update: Wed 23 Sep 2026 00:01:39 +0000
Files and hashes: 1: W--PYm95WmPyMK8dgSgV_MgjMDs.roa (hash: R9ZHpGeHyDL8BzmrmuurqwX+rq5/d11mCwkWHYGA13Y=)
2: o9lcuYDUNnAPka6ld_Chw9EBOFE.crl (hash: TtiueMiH5/USmq+u50k7+T86xROX2ca5MXpxsc0Cah8=)
3: wyVwViD6OFO9yJjbf0h1g5cFqQY.roa (hash: CrQ4iuhyJ0oAhIIFh/rkGOWZ0gSsnx159Ihl2XxcKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:0f:2a:7c:66:8d:6c:7c:2c:54:5c:6f:36:4d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Validity
Not Before: Sep 22 00:01:39 2026 GMT
Not After : Sep 23 00:01:39 2026 GMT
Subject: CN=46c1ee42c40f2c50738d1d6197aa85f49ab0b571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:b7:04:fb:34:38:2c:63:20:74:44:e3:f5:
3f:ad:b8:9b:fe:f4:7a:27:c1:f8:2d:87:34:7c:be:
83:a8:7a:99:20:4b:18:0d:5b:89:6f:9a:27:f0:37:
f5:84:22:fe:6a:e1:0a:fe:9c:38:57:0b:01:9c:88:
61:b2:35:69:6e:66:fd:39:95:1e:2c:74:f0:e1:3b:
42:17:15:41:a8:69:b4:fc:b5:e4:63:06:04:0a:41:
40:96:7f:1f:f6:7f:f4:5c:f4:f5:1d:7c:23:82:e0:
ee:71:cf:49:c1:17:31:c6:4f:ed:2e:99:9f:01:31:
f8:e1:95:b1:da:7c:51:9e:2d:5b:63:40:b3:85:32:
07:32:c8:f9:c1:8f:78:d2:52:41:3e:71:c3:73:23:
7f:00:f0:40:80:9c:2d:6b:de:e8:ab:48:d1:3f:ad:
44:9c:f5:41:4c:79:a0:4b:fb:12:29:75:ca:6e:47:
af:4d:30:92:78:da:66:31:f3:a6:d1:79:d1:8e:81:
27:c0:7a:36:2b:e3:0d:1d:df:d8:77:81:23:12:3b:
26:d0:92:6c:b0:27:44:ca:66:70:2c:6c:13:69:58:
32:05:8d:3e:53:7d:96:f8:75:33:86:a6:48:13:ae:
9f:7e:24:bb:16:01:05:9f:e1:9c:1d:3c:98:6a:2f:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C1:EE:42:C4:0F:2C:50:73:8D:1D:61:97:AA:85:F4:9A:B0:B5:71
X509v3 Authority Key Identifier:
keyid:A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d8:28:69:3c:e9:21:98:59:64:8c:9b:c2:cd:db:22:87:d5:
b4:90:73:b3:bf:5e:15:2e:3a:4f:a9:7b:07:1b:fa:d9:2b:a2:
e9:78:f2:49:fc:9d:d1:56:06:1c:d1:21:04:ad:0b:c0:3f:d5:
90:0a:87:7c:ee:92:ca:db:d6:a1:f2:08:96:b3:5b:55:08:8b:
a4:f5:7e:d5:a8:3e:5c:51:fc:13:50:a4:9d:b6:e9:a8:3e:64:
47:84:1d:2e:03:38:bc:83:51:3e:c1:f9:cc:5b:8c:9a:2b:ce:
5e:72:5b:1c:ef:6b:2d:2d:ee:22:e0:a3:52:f5:98:f2:02:81:
2f:13:d4:27:a7:4d:98:0d:ff:ba:f5:08:77:91:7f:91:e2:d3:
e1:ab:cd:94:9c:11:2b:fd:7e:ac:e5:68:b5:48:90:25:de:93:
d7:e5:2b:8a:4a:bb:4a:2b:9b:f8:90:fd:75:56:59:5a:81:c2:
c4:ce:4c:0c:40:3c:be:13:1f:ef:ca:01:f4:58:bf:c6:d4:f5:
63:a9:c4:6a:79:34:83:03:35:67:a0:f4:9e:6d:e8:da:ee:c2:
33:74:6e:5d:09:02:30:1c:d3:a1:4c:23:f6:27:3b:4d:a3:e7:
5a:91:b7:44:69:87:1f:c1:20:37:8c:b4:a6:f6:6e:fb:d8:c1:
48:a2:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:16:22 2026 by rpki-client