Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: EGQI+Z4BExm+dwm9cAHg2T56nfWn8AButa1wCjtDzJM=
Subject key identifier: 55:F5:74:41:6B:42:D5:82:AB:52:36:58:49:18:CB:E6:57:29:22:D9
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 01A12BE8D22CB3E76D2AF695262DBEF9E4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 16DF
Signing time: Sun 11 Oct 2026 17:00:40 +0000
Manifest this update: Sun 11 Oct 2026 17:00:40 +0000
Manifest next update: Mon 12 Oct 2026 17:00:40 +0000
Files and hashes: 1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: 8YgvZWJ3Wy5ItFQ5wseUaX4ebnvm/vB6rXdmCKnuvOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e8:d2:2c:b3:e7:6d:2a:f6:95:26:2d:be:f9:e4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Oct 11 17:00:40 2026 GMT
Not After : Oct 12 17:00:40 2026 GMT
Subject: CN=55f574416b42d582ab5236584918cbe6572922d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:0b:81:e3:75:8f:64:6b:b5:e6:e1:80:bc:
01:b9:5a:43:cc:bc:09:0e:f2:cf:46:bc:36:ff:2e:
e4:f4:36:59:cf:80:20:40:76:0f:0b:23:19:fc:d9:
78:a9:ec:b2:9b:72:77:e9:ca:6d:e2:6b:85:ec:6c:
18:70:04:23:d0:20:98:0e:d8:7f:e7:bd:5b:8b:c5:
4e:45:e7:e7:29:68:18:92:39:44:94:a5:e5:0f:0d:
96:a3:6e:a3:01:4a:0c:e6:ea:4b:96:8e:25:ad:64:
85:0d:da:76:e6:c3:70:e8:85:37:b0:af:82:00:32:
d2:d9:32:d2:a6:19:33:a0:d3:4c:6e:0f:bd:05:df:
69:26:a6:2a:79:cd:b7:79:46:5c:3d:31:1a:48:d7:
ca:d7:01:2a:5b:5f:a1:7f:61:09:37:37:e6:17:2e:
fe:ff:df:5e:92:4d:5e:c8:aa:31:84:b4:d3:d1:dc:
c2:e6:2b:4a:fc:13:58:40:f1:0d:d6:46:36:b9:94:
22:c0:3a:1c:1c:9c:58:e6:15:6e:54:89:89:e2:c7:
83:a6:da:ca:9c:0e:74:4d:35:3c:7c:74:27:fb:31:
24:13:97:4d:b1:70:20:50:9d:78:41:c4:95:15:be:
b2:91:72:1d:ec:ea:65:bf:83:5e:ef:82:c6:fd:58:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F5:74:41:6B:42:D5:82:AB:52:36:58:49:18:CB:E6:57:29:22:D9
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:20:ef:fc:54:b6:46:fb:14:25:34:e1:7c:b3:60:cb:7d:10:
0c:14:fd:6a:89:f0:ee:f9:fe:9b:0c:10:95:ef:67:41:f1:7d:
ea:0d:30:b1:06:2f:d3:75:b2:65:5c:bc:b8:12:38:02:0b:d5:
54:55:84:3b:69:ba:3b:7e:55:ff:b1:69:82:00:57:3a:18:a2:
84:d8:09:2f:dd:18:c7:16:a7:53:10:8b:6a:2a:35:71:88:05:
3c:16:82:54:6c:a7:59:aa:9d:28:77:73:c7:f2:04:ff:3d:10:
ab:14:9f:00:af:24:fa:28:6b:76:1c:b3:a8:83:e5:0f:f1:ea:
1e:d7:37:83:7e:77:df:a7:32:ce:df:3e:01:92:a6:1a:a4:0e:
d9:0e:df:2b:1d:e6:b7:56:d6:10:e5:40:c2:e0:4a:c4:78:80:
59:fb:93:fc:a4:2b:9f:01:59:69:a7:56:35:b2:14:5a:01:39:
ba:40:02:91:17:cc:eb:41:d9:a0:c1:ae:04:a4:eb:ae:e4:08:
64:3f:28:1a:b5:42:7d:5c:e1:4f:7f:7a:8e:d8:0d:80:c6:a1:
0b:ce:f7:d5:63:53:c9:ae:fc:15:77:7b:0b:f8:fe:8d:fd:fd:
9b:1c:15:68:c7:c9:68:96:b5:6a:0a:87:b5:61:99:a6:e2:9d:
6a:c4:de:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:30:07 2026 by rpki-client