Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
File: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json)
Hash identifier: TTe7BtYtA3Rnc3HHE8t89HEKPJ8K06sL00ftmCVbUJ4=
Subject key identifier: CC:B3:9F:F4:59:0F:5D:72:53:1C:E7:09:7C:F3:0D:B5:A8:96:6C:2A
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 01A0C77D464674349C2B45240EF4D9C913BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
Manifest number: 158A
Signing time: Tue 22 Sep 2026 05:01:10 +0000
Manifest this update: Tue 22 Sep 2026 05:01:10 +0000
Manifest next update: Wed 23 Sep 2026 05:01:10 +0000
Files and hashes: 1: E0FhH7aNsDOMh5ZSlQ4FDkv-nU0.roa (hash: q/8wfiJe6Z5yCg6R7Ws4sjAshSjQMW+hXl1C4xiGP+U=)
2: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: Qc5YrfmJ6JwdLnmwdTpPvCWg81+ME65/BaeW8JhMXC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7d:46:46:74:34:9c:2b:45:24:0e:f4:d9:c9:13:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Sep 22 05:01:10 2026 GMT
Not After : Sep 23 05:01:10 2026 GMT
Subject: CN=ccb39ff4590f5d72531ce7097cf30db5a8966c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:19:0f:cd:83:28:48:15:8b:2a:10:26:25:a2:
dc:64:39:42:38:60:af:d0:db:85:52:e4:de:d1:88:
c1:7f:e5:4a:91:64:dd:7b:0d:e7:51:cd:23:de:40:
92:13:00:92:6f:97:0f:bb:14:56:33:69:88:3d:e2:
4f:a9:63:1b:6f:d9:64:db:62:59:a0:8b:98:89:85:
af:ca:83:2c:54:63:a5:79:d1:b9:0b:4b:43:12:c8:
63:4e:6c:93:c4:60:44:34:59:4d:c6:8d:6b:cc:b4:
15:25:12:c2:92:e7:8b:de:f4:96:b6:a4:6f:d0:8b:
40:26:fe:7a:0b:56:8c:bb:af:df:5e:49:82:5b:eb:
19:42:21:60:62:0c:87:e1:0c:3b:84:a7:24:ff:e5:
d3:f8:95:1a:54:de:6c:80:19:b3:41:08:c4:18:50:
48:4e:07:94:73:64:f0:6d:e1:9f:7d:44:0e:23:dd:
08:09:77:d2:fd:8f:6f:1b:79:d8:9a:54:91:bb:45:
ab:e4:86:ce:fb:5e:94:dd:03:79:dc:66:b2:f0:97:
eb:e0:35:9b:79:96:64:7c:59:1e:b0:75:c8:2f:e5:
f9:f2:81:28:76:66:4d:05:fe:e6:e9:65:f0:c5:2d:
38:23:5a:25:b5:d0:9f:1f:41:ae:3a:f0:27:97:e6:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B3:9F:F4:59:0F:5D:72:53:1C:E7:09:7C:F3:0D:B5:A8:96:6C:2A
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:10:d5:1d:15:dd:a6:7d:da:f6:c6:fb:21:00:0b:ef:73:ee:
46:fb:a7:5a:d7:fa:fe:3b:55:9f:65:ef:f1:e5:8a:ae:92:28:
0c:a1:e4:f9:68:d0:46:6c:3f:22:32:8e:7e:be:4c:57:78:e6:
d9:bf:3f:96:39:0d:fd:6d:c5:08:02:42:f1:ab:40:3f:43:ff:
c3:aa:dc:9a:ce:d1:30:0e:a8:12:00:e0:a7:97:c7:0f:56:5f:
cd:13:d8:16:c1:bc:65:e8:c2:50:1b:8d:d3:56:82:9f:fb:2c:
c1:7e:74:60:81:fa:ad:89:6e:11:df:4e:66:1c:19:12:66:57:
71:e7:d2:35:d9:b9:93:d4:3a:87:a2:fe:49:6c:b2:8e:74:9f:
55:6d:3b:b3:01:7d:61:5d:77:cc:cf:ff:76:1b:1b:c5:c8:4b:
52:92:49:02:f9:60:61:ce:d6:70:22:a0:e7:c2:10:91:df:4f:
42:65:9e:01:82:fc:e7:af:7d:28:15:ba:72:1e:41:04:ad:18:
67:dd:f4:48:3c:df:53:34:c9:d8:87:4f:b3:9e:58:e5:b7:d4:
15:d7:88:23:e5:43:16:cb:04:8d:69:6e:57:f8:5c:79:92:55:
d6:c1:d9:1c:f8:93:ec:cc:7e:d9:f6:bc:af:af:64:6d:99:bc:
89:c5:40:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfUZGdDScK0UkDvTZyRO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz
ZWNiNjAwHhcNMjYwOTIyMDUwMTEwWhcNMjYwOTIzMDUwMTEwWjAzMTEwLwYDVQQD
EyhjY2IzOWZmNDU5MGY1ZDcyNTMxY2U3MDk3Y2YzMGRiNWE4OTY2YzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xkPzYMoSBWLKhAmJaLcZDlCOGCv
0NuFUuTe0YjBf+VKkWTdew3nUc0j3kCSEwCSb5cPuxRWM2mIPeJPqWMbb9lk22JZ
oIuYiYWvyoMsVGOledG5C0tDEshjTmyTxGBENFlNxo1rzLQVJRLCkueL3vSWtqRv
0ItAJv56C1aMu6/fXkmCW+sZQiFgYgyH4Qw7hKck/+XT+JUaVN5sgBmzQQjEGFBI
TgeUc2TwbeGffUQOI90ICXfS/Y9vG3nYmlSRu0Wr5IbO+16U3QN53Gay8Jfr4DWb
eZZkfFkesHXIL+X58oEodmZNBf7m6WXwxS04I1oltdCfH0GuOvAnl+YoRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyzn/RZD11yUxznCXzzDbWolmwqMB8GA1UdIwQY
MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct
ZTBkN2RkNWUyZTZmLzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm
LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhDVHRXd
pn3a9sb7IQAL73PuRvunWtf6/jtVn2Xv8eWKrpIoDKHk+WjQRmw/IjKOfr5MV3jm
2b8/ljkN/W3FCAJC8atAP0P/w6rcms7RMA6oEgDgp5fHD1ZfzRPYFsG8ZejCUBuN
01aCn/sswX50YIH6rYluEd9OZhwZEmZXcefSNdm5k9Q6h6L+SWyyjnSfVW07swF9
YV13zM//dhsbxchLUpJJAvlgYc7WcCKg58IQkd9PQmWeAYL85699KBW6ch5BBK0Y
Z930SDzfUzTJ2IdPs55Y5bfUFdeII+VDFssEjWluV/hceZJV1sHZHPiT7Mx+2fa8
r69kbZm8icVAWw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:39:52 2026 by rpki-client