Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: mZXsLRFYYZMCgazd8SBZEr8WDTfGhbrLdGR6Uj56gpo=
Subject key identifier: C4:CC:63:D0:8D:B4:E6:07:48:A0:9F:67:FB:BF:ED:66:E7:36:67:D6
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 01A00281A9EC04549D9625BBEDBE6F9C8B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 143C
Signing time: Fri 14 Aug 2026 23:00:47 +0000
Manifest this update: Fri 14 Aug 2026 23:00:47 +0000
Manifest next update: Sat 15 Aug 2026 23:00:47 +0000
Files and hashes: 1: GPPevbImSvGjVqWAzYGvcpc3FOs.roa (hash: MHorAz/UCfb7aKgx7pKoBAkAFlLncJNyaH/wm4EHMOY=)
2: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: NpxdeMZ+16TmMEDP/bXXbJffhCdIukwsgieIveoQIDA=)
3: XD7uuC6NUKDza7PfKtc_jHz7EnA.roa (hash: RPYu/+kKueNaM8YfpMGx6Mxi+JGMI3A7i1eBXpiVPd4=)
4: ntt8oBWCvDCUpNDHjPuie_5MUck.roa (hash: Yy1s4qDW987rNxjvZEbp1rZR84GXQU0RB/faIrx/grE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:a9:ec:04:54:9d:96:25:bb:ed:be:6f:9c:8b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Aug 14 23:00:47 2026 GMT
Not After : Aug 15 23:00:47 2026 GMT
Subject: CN=c4cc63d08db4e60748a09f67fbbfed66e73667d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:1d:ba:7b:64:63:6e:17:8c:00:18:51:fe:
f3:38:89:e1:99:21:1f:7d:70:34:a6:97:bb:3a:3a:
43:ec:20:8d:c1:63:ad:79:c1:e2:09:14:14:93:80:
51:01:dc:72:9b:00:a7:ad:2e:14:6f:8c:4d:6b:4b:
5e:2d:f3:a1:6d:6f:e1:62:2b:91:17:83:27:02:75:
d8:0b:81:02:cc:4d:8c:b4:e5:03:21:e3:94:20:00:
08:2b:07:0d:0c:fe:56:95:0d:b1:9d:0b:6f:5c:34:
b3:16:60:89:3e:3c:e1:a9:70:dc:c3:a7:03:03:e3:
eb:1b:1c:70:77:29:e3:02:97:7e:98:5c:5d:36:07:
49:68:1d:b6:b7:d0:0f:e4:f3:24:ca:f3:b3:fc:41:
36:58:a6:e2:97:3a:58:1c:6f:f4:93:27:ee:ec:ce:
91:90:b9:15:b0:66:f6:65:4c:15:f8:02:83:f6:a6:
89:aa:54:fa:97:5f:d6:3f:8c:d6:6d:e6:f6:a0:65:
9c:30:34:ca:15:2e:14:1b:db:1e:fa:c7:c0:7e:e5:
70:a2:de:5f:43:a7:06:1f:0a:29:f9:a3:9a:3c:e7:
af:e8:fd:3f:82:4e:a4:49:de:6f:8d:cd:10:43:7b:
5e:86:e2:5b:ce:e1:de:7e:ee:df:85:1b:db:de:72:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CC:63:D0:8D:B4:E6:07:48:A0:9F:67:FB:BF:ED:66:E7:36:67:D6
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:77:af:f7:5e:29:e2:f4:3c:6d:64:39:ea:23:c8:02:23:a2:
f5:e5:89:61:fb:d9:df:1b:3b:58:90:ad:9f:89:23:91:e7:91:
0e:da:08:f3:d6:42:b4:4c:65:0a:73:10:f1:82:f7:93:2f:f8:
93:d4:58:e8:da:57:3e:e3:9c:f2:af:5f:c1:6e:5e:43:e5:fd:
f6:e5:92:68:58:49:7c:b0:49:0a:59:fd:66:f1:7b:09:16:b0:
a6:17:ae:d8:a9:f1:40:72:3f:49:98:4c:17:41:6d:e9:1b:f9:
bf:e5:3d:f7:d7:a6:92:c4:90:66:58:2f:f7:6c:21:fc:1c:57:
b1:5e:27:fc:88:ae:4a:b3:86:aa:df:85:9e:74:49:4b:c1:6e:
59:ed:fe:de:84:84:ce:31:a8:64:ce:33:88:50:25:dd:07:8f:
70:0c:ca:79:7a:b9:49:ae:58:71:ad:df:bb:a6:32:49:a7:c5:
2b:aa:32:0b:ac:94:e9:7e:cb:7d:cf:e0:3b:82:4c:98:4f:60:
59:27:9a:13:03:6e:33:30:f3:70:aa:fb:c3:f8:9e:5a:a8:fe:
30:25:aa:02:8a:4b:4c:6a:50:ef:cf:43:7a:22:06:ef:64:ab:
76:3c:f9:56:51:0d:83:27:e5:df:85:aa:b7:c7:36:89:16:26:
cf:9f:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:36:12 2026 by rpki-client