Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: mjOFmyKKUgq9O/vrpcknQX2KQXDi1BSwZwQRkhKdEh8=
Subject key identifier: E9:06:DC:80:D0:97:52:01:30:36:B6:DE:9E:71:4F:B4:FA:9D:2A:9F
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 019D9A74D2DAF59B6E9CE5813E57A52EC277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 1506
Signing time: Fri 17 Apr 2026 08:00:40 +0000
Manifest this update: Fri 17 Apr 2026 08:00:40 +0000
Manifest next update: Sat 18 Apr 2026 08:00:40 +0000
Files and hashes: 1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: 1FbtzvOjBYZ2zfsw2pyNV40XxIbM6c56XN/3Zxt/NaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d2:da:f5:9b:6e:9c:e5:81:3e:57:a5:2e:c2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Apr 17 08:00:40 2026 GMT
Not After : Apr 18 08:00:40 2026 GMT
Subject: CN=e906dc80d09752013036b6de9e714fb4fa9d2a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:5a:ff:76:ca:63:98:74:f8:f6:e9:d8:95:
5e:73:d1:7a:95:d7:c6:31:c0:13:b3:41:cc:41:ef:
6e:fa:2c:76:48:f8:dd:c0:e6:d6:60:e3:84:c6:65:
e1:67:0d:50:83:ee:6c:3d:93:fc:fb:da:da:4f:2c:
50:bf:4b:00:eb:8d:31:a0:50:18:00:db:9b:28:e3:
7c:dc:79:da:fc:96:fc:28:a7:10:d6:3d:76:82:90:
86:b3:e1:78:b9:bf:98:d0:37:2a:7d:1b:82:a5:91:
4e:17:58:c4:a2:e8:40:a1:96:43:9a:cd:be:3a:52:
bd:78:7c:d8:4d:0b:c4:c9:79:ed:1a:5b:68:c4:4b:
44:6d:a4:bb:db:d9:e9:71:40:b2:8c:dc:95:00:37:
8e:64:ba:b1:21:a2:9e:69:7e:39:95:a1:05:a9:04:
50:d4:61:8c:d8:f6:34:f2:83:6e:78:de:c8:25:97:
90:fb:21:6c:3d:0e:76:72:33:35:ca:72:93:72:17:
6e:05:25:f3:d3:5a:a0:8d:a1:94:88:37:31:ee:f3:
86:69:8d:c5:da:c0:fa:6d:ce:ca:1c:9c:80:97:3f:
d4:a1:e7:2c:ed:c7:21:cc:66:1a:df:91:bb:91:a1:
5a:60:3a:fb:07:f3:6d:2e:6a:ed:2f:28:47:4f:dd:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:06:DC:80:D0:97:52:01:30:36:B6:DE:9E:71:4F:B4:FA:9D:2A:9F
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:72:79:90:0a:05:3b:bc:ea:db:97:d5:1f:83:8b:33:23:2b:
43:2f:ab:85:70:6b:4f:15:e1:64:94:c6:1b:f9:07:c2:49:1d:
83:ff:29:c8:76:b6:28:33:07:60:92:7d:09:4f:c7:56:f3:cc:
29:f9:c9:bf:62:27:46:52:c8:4f:a4:4d:39:1b:55:06:16:03:
cf:73:37:ed:9a:bc:85:8c:ff:28:31:0a:15:97:76:67:07:28:
18:06:86:e9:63:33:6e:a6:20:4d:8d:92:ef:63:24:77:45:e3:
8c:2b:92:f9:8b:23:9f:5e:56:a4:69:36:a3:57:e6:e5:b5:0f:
28:92:f8:28:74:4d:1e:c1:9c:db:42:bb:94:80:8d:ae:fa:0b:
e4:41:38:29:ed:1d:86:69:92:1a:d9:11:04:73:71:99:33:1d:
88:41:ef:95:da:17:3c:2a:56:5d:49:d5:30:f3:e3:d9:79:53:
44:5d:18:59:cb:8b:97:3b:46:21:49:92:f7:47:8e:de:65:99:
f5:e2:7d:0a:5b:8a:42:2c:c8:0d:bd:28:07:ac:5d:06:44:33:
ea:9a:e0:24:64:be:72:6d:12:3e:22:2b:2a:ff:2e:70:7d:ea:
d2:65:d5:c1:37:33:0a:f4:50:06:c2:01:69:44:b3:65:de:fa:
e7:97:ba:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:16 2026 by rpki-client