Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: bEKRcLUZ95o+LPt2ZQuv4YySHT4zOl82ZbbwRWqCysM=
Subject key identifier: BD:D4:44:6A:A4:29:C9:E9:38:99:E0:E7:24:FD:89:9F:5E:84:B2:92
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 019FAB99F005A9BB1E5E063A2DA7FBFD9350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 1618
Signing time: Wed 29 Jul 2026 02:00:19 +0000
Manifest this update: Wed 29 Jul 2026 02:00:19 +0000
Manifest next update: Thu 30 Jul 2026 02:00:19 +0000
Files and hashes: 1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: XCux2/iK5zE/4EzhxjjyCLdtNmdvrgOYjblf3WIuU2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:f0:05:a9:bb:1e:5e:06:3a:2d:a7:fb:fd:93:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Jul 29 02:00:19 2026 GMT
Not After : Jul 30 02:00:19 2026 GMT
Subject: CN=bdd4446aa429c9e93899e0e724fd899f5e84b292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:98:81:28:e1:94:da:28:44:c5:34:54:85:
fd:4a:dc:43:52:46:b1:46:e9:a0:64:0b:a4:df:d6:
f6:0e:53:36:53:1e:16:37:7c:ab:fc:73:1b:b7:f7:
75:78:34:05:8e:a4:e0:7d:03:1a:f2:53:6e:e3:ab:
c5:b5:cb:d9:c6:91:ff:15:61:50:a2:6e:95:56:0e:
ba:02:7a:76:75:55:99:21:28:2c:f9:55:10:59:05:
91:3e:7a:bc:ed:f0:1b:2f:df:1e:62:14:91:4e:5b:
78:d7:93:37:31:92:2f:e4:ac:7b:b0:59:eb:30:35:
70:ec:7b:c8:f8:fc:3d:3b:19:17:d8:83:b7:be:4c:
b1:8a:af:a3:cf:26:3a:14:da:14:4a:9d:75:5e:ae:
bc:b0:c6:68:b6:c8:0c:fb:5d:92:28:f2:f4:a2:20:
ba:22:89:43:94:4c:08:10:a5:8f:42:5a:39:7d:ab:
bc:9a:62:61:c2:4f:34:98:39:cf:91:f1:ca:27:70:
4b:3d:b4:78:7f:8f:97:fc:47:af:e5:30:55:af:ee:
c0:c3:c6:85:50:c9:de:5b:44:c9:21:07:67:1c:50:
01:dd:ca:d7:ae:aa:e6:c7:43:04:88:5d:40:10:7d:
fd:30:0b:c6:b0:79:52:af:80:75:8c:9f:e4:7d:4e:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D4:44:6A:A4:29:C9:E9:38:99:E0:E7:24:FD:89:9F:5E:84:B2:92
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:55:63:59:f4:9e:9f:87:34:46:54:de:4b:cb:85:38:81:e6:
36:64:4c:cc:ac:84:65:b6:db:be:a4:19:40:f3:66:cb:67:62:
d6:13:13:a4:47:25:c9:9f:44:e6:cf:ab:7b:43:8f:5b:41:ce:
77:a6:62:11:3b:d0:fa:09:5f:d8:93:04:e7:31:91:2f:3c:b3:
5f:c1:54:6c:4b:d7:fa:ed:c8:ca:74:5b:81:e6:74:43:60:5a:
bb:9a:f6:2a:94:23:a3:4e:d9:01:7a:c4:f4:01:28:8f:27:46:
c1:0a:b9:8f:e7:bc:63:9f:ee:4b:11:07:de:cb:45:e5:42:b7:
8d:b4:aa:9d:a4:eb:37:3d:3b:04:69:ec:59:30:f2:ba:8a:1f:
eb:ef:17:75:20:1c:71:9a:61:ec:98:90:96:a2:b5:e5:f2:54:
51:c7:29:dd:c8:87:76:2b:0b:a0:8d:3b:89:59:6b:1a:ff:fc:
51:82:b1:8b:87:3a:a1:ad:ed:70:96:42:e1:cc:89:08:22:c8:
7b:c7:42:a3:a7:ea:b5:09:63:fd:4f:9b:76:82:ac:6c:32:88:
dc:ce:a1:88:12:96:b4:41:16:1e:9a:ac:09:f0:eb:fb:62:c3:
73:c7:81:1e:d9:7c:e0:48:24:ce:14:27:72:88:93:65:aa:a6:
59:ad:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:08:48 2026 by rpki-client