Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: LbFJudK+W0R8hJ43A7PEG7rwW4vLwlKowAZWlWtSTwE=
Subject key identifier: 1F:D5:FE:A3:E4:B2:2E:1E:7C:3A:EE:30:DD:D7:DB:4D:03:20:DE:C8
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 019D37F7937CAEEB3641C6672F0DE730F475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 12CA
Signing time: Sun 29 Mar 2026 05:01:05 +0000
Manifest this update: Sun 29 Mar 2026 05:01:05 +0000
Manifest next update: Mon 30 Mar 2026 05:01:05 +0000
Files and hashes: 1: GPPevbImSvGjVqWAzYGvcpc3FOs.roa (hash: MHorAz/UCfb7aKgx7pKoBAkAFlLncJNyaH/wm4EHMOY=)
2: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: Ok1aZ2A8I8T8LYep8t7d+bv7zds+J6jO09nKx0pKd+E=)
3: XD7uuC6NUKDza7PfKtc_jHz7EnA.roa (hash: RPYu/+kKueNaM8YfpMGx6Mxi+JGMI3A7i1eBXpiVPd4=)
4: ntt8oBWCvDCUpNDHjPuie_5MUck.roa (hash: Yy1s4qDW987rNxjvZEbp1rZR84GXQU0RB/faIrx/grE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:93:7c:ae:eb:36:41:c6:67:2f:0d:e7:30:f4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Mar 29 05:01:05 2026 GMT
Not After : Mar 30 05:01:05 2026 GMT
Subject: CN=1fd5fea3e4b22e1e7c3aee30ddd7db4d0320dec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:cd:4c:4f:a1:3a:1e:eb:b2:bf:e4:bb:97:
7a:56:d2:90:9f:2f:41:f3:51:a4:80:5d:cd:fe:f3:
37:16:66:03:8a:a9:ab:d8:4c:a1:88:91:46:5a:d6:
63:13:86:8f:87:70:30:dc:d9:e0:cf:c1:35:a0:3b:
3a:94:99:ad:fc:87:64:d4:53:90:c9:bd:5c:14:fa:
7b:ee:0b:b3:bf:bb:03:59:7b:a2:13:fa:62:b5:d5:
51:e1:2c:84:0f:b0:33:47:1c:e6:dc:bf:a1:c2:f3:
5b:8a:49:74:36:87:a6:de:ad:08:8d:9f:6c:85:8a:
66:a3:b2:61:fb:a4:c1:2c:da:0a:89:06:4f:bc:3d:
7e:25:56:cc:78:d1:75:4c:a1:6f:13:b1:6d:ef:9f:
56:af:66:c3:bf:0f:c3:ac:a5:af:8d:00:d2:2f:5b:
e7:aa:f3:12:02:ef:0b:f3:91:e6:24:8c:3c:ab:1a:
1a:df:1c:82:d8:17:0c:a4:b6:ab:ce:42:6f:7e:fe:
c9:55:62:47:73:9e:d6:1d:ee:54:9a:21:17:00:4a:
28:9a:e2:db:20:55:fb:60:e0:23:8e:94:25:d7:83:
0d:fd:db:a8:1f:f5:bb:cf:2f:f6:46:79:ac:8e:58:
8c:2a:e9:da:c7:86:fe:d4:8d:92:a6:26:64:da:8c:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D5:FE:A3:E4:B2:2E:1E:7C:3A:EE:30:DD:D7:DB:4D:03:20:DE:C8
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e4:ef:eb:73:46:4d:b6:7a:11:aa:c8:3c:98:b9:34:b4:1f:
c9:93:20:b1:ca:e2:27:57:55:9e:be:79:ea:23:03:fc:dd:3f:
bd:99:23:cc:80:f2:26:e1:f0:66:54:a0:8f:64:d4:bc:9a:1c:
c6:48:20:ec:e2:02:ab:da:75:11:d8:1f:95:e3:e2:82:d3:f3:
1e:df:57:1d:03:14:c2:3f:2a:ca:7e:3b:ba:3f:cd:8d:46:11:
56:50:e5:ac:48:01:27:f0:2b:2b:5d:63:0d:14:56:9c:47:53:
bb:74:b0:4e:a8:8e:82:60:71:45:2a:dd:70:3c:e6:4b:b9:94:
e8:33:49:24:31:11:1f:67:9b:95:56:f0:ae:bc:c1:df:7f:e0:
6f:c8:97:58:f3:74:9c:f0:35:74:97:fd:04:81:c1:6e:1c:5e:
32:39:c1:4b:d7:f3:81:b0:f3:ed:d3:4d:8a:e5:55:1f:03:b9:
cb:38:39:ca:a0:c5:86:ef:a3:a1:1b:77:21:07:36:2d:45:1e:
3c:f9:64:dc:8b:48:36:0f:fe:59:a3:ac:76:3d:1e:3d:ae:63:
a9:b1:8a:ad:05:c4:09:04:15:e5:d7:c2:24:9e:90:8f:82:c0:
22:16:db:54:2c:75:98:39:62:0d:36:97:34:55:f9:96:8d:7a:
00:d5:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:47 2026 by rpki-client