Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: 2Gn3cD+eJWcZwFMWQhuDq3fP0018GXRQ6sGWP0vmjH4=
Subject key identifier: AB:45:A4:7A:D0:D4:81:FE:0E:C0:41:1B:0A:CF:93:80:1F:1F:6D:58
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 01A1547771EDB075FB644D91C5907F21C2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 14EB
Signing time: Mon 19 Oct 2026 14:01:16 +0000
Manifest this update: Mon 19 Oct 2026 14:01:16 +0000
Manifest next update: Tue 20 Oct 2026 14:01:16 +0000
Files and hashes: 1: GPPevbImSvGjVqWAzYGvcpc3FOs.roa (hash: MHorAz/UCfb7aKgx7pKoBAkAFlLncJNyaH/wm4EHMOY=)
2: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: 98oJ5hw1YXalJpNGLA0PUZ+XFU72JpazWHXoOgZ8PvQ=)
3: XD7uuC6NUKDza7PfKtc_jHz7EnA.roa (hash: RPYu/+kKueNaM8YfpMGx6Mxi+JGMI3A7i1eBXpiVPd4=)
4: ntt8oBWCvDCUpNDHjPuie_5MUck.roa (hash: Yy1s4qDW987rNxjvZEbp1rZR84GXQU0RB/faIrx/grE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:77:71:ed:b0:75:fb:64:4d:91:c5:90:7f:21:c2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Oct 19 14:01:16 2026 GMT
Not After : Oct 20 14:01:16 2026 GMT
Subject: CN=ab45a47ad0d481fe0ec0411b0acf93801f1f6d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:8b:cc:ea:25:aa:e4:f1:e0:eb:85:c3:bc:
65:14:52:10:05:32:76:c5:4b:19:05:8a:a9:e9:a9:
6f:c2:85:5f:00:03:df:8d:00:32:eb:e3:1a:7b:17:
74:73:fe:fe:04:a7:c9:30:c2:a5:8c:53:8f:7e:dd:
e8:b8:cc:7f:a5:91:ae:f2:94:68:15:08:24:0f:12:
f0:3a:e7:7d:2b:ba:0b:5d:18:aa:76:85:d4:e3:53:
8e:9e:f5:10:74:01:42:f2:c9:f9:ab:3b:b4:23:1c:
13:db:c3:ec:60:d1:11:22:92:cd:c7:8d:01:ac:5b:
9a:8a:c8:e7:a3:da:5b:d6:11:20:7d:f4:3c:b3:c3:
71:f9:af:88:a8:0b:37:eb:14:6f:11:b6:b7:6d:83:
4c:a5:e8:61:2c:dc:37:07:88:c2:c4:0c:8e:4b:37:
ed:95:7d:9e:bf:96:99:c7:52:f7:63:88:ab:9e:65:
5d:b8:8e:a5:60:f3:41:66:ec:d4:2b:38:45:9f:16:
7c:bf:0d:3c:0d:7e:3c:59:1c:c0:be:4f:22:e9:50:
b4:5a:c4:91:21:92:6f:7f:c9:7c:3b:03:ea:77:b5:
f8:a4:f2:ad:dd:a6:00:87:98:63:a8:f7:6f:e8:ed:
54:14:95:7a:4d:67:6e:6d:db:e6:42:fa:c1:a0:ea:
80:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:A4:7A:D0:D4:81:FE:0E:C0:41:1B:0A:CF:93:80:1F:1F:6D:58
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5e:2d:da:3e:8f:84:a7:a1:6e:3b:e4:b7:2d:5f:09:56:7f:
88:93:21:84:49:42:6e:ca:67:23:64:b6:9d:5e:f2:1b:28:39:
26:cc:81:b2:bd:73:fd:2e:86:77:7d:6f:d4:81:6d:6d:26:ac:
d8:93:5e:74:41:ef:95:29:a0:f7:c7:07:49:70:d3:8e:e6:e8:
e3:1a:11:67:70:25:f9:46:a1:31:4d:67:aa:b4:72:c5:9c:ea:
06:c6:3e:6e:a9:d0:5b:93:22:49:d2:f2:97:e7:14:9c:b8:17:
93:b4:5b:f2:1b:b2:4e:57:13:58:bc:07:14:e1:2b:d6:ab:6e:
4c:f3:c6:f5:41:07:f1:02:b6:bd:f0:f4:50:49:b2:94:89:30:
12:90:18:85:6c:8d:dc:67:96:7e:eb:1d:1c:72:7b:59:cf:22:
7f:fd:29:17:40:58:6e:f0:28:b6:a5:82:3c:98:30:43:a9:7a:
35:c2:9f:2e:a3:f9:09:7c:83:fa:db:8c:27:61:3d:03:4d:dd:
8b:c1:de:64:7d:2e:68:dc:ee:7f:ea:98:70:47:cb:fc:e4:f0:
b1:e5:1f:9b:45:f3:ba:cf:8b:f2:e2:9e:4a:66:cd:4a:97:22:
13:ce:8b:28:4f:b1:19:99:2d:38:70:8d:04:e2:66:bb:1a:bb:
03:30:2d:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFUd3HtsHX7ZE2RxZB/IcLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDU0M2QwNDY1ZWEyZjZmZWI4MjhmMTg1MDRiMDNmNDAz
YWM2NjkwHhcNMjYxMDE5MTQwMTE2WhcNMjYxMDIwMTQwMTE2WjAzMTEwLwYDVQQD
EyhhYjQ1YTQ3YWQwZDQ4MWZlMGVjMDQxMWIwYWNmOTM4MDFmMWY2ZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJqLzOolquTx4OuFw7xlFFIQBTJ2
xUsZBYqp6alvwoVfAAPfjQAy6+Maexd0c/7+BKfJMMKljFOPft3ouMx/pZGu8pRo
FQgkDxLwOud9K7oLXRiqdoXU41OOnvUQdAFC8sn5qzu0IxwT28PsYNERIpLNx40B
rFuaisjno9pb1hEgffQ8s8Nx+a+IqAs36xRvEba3bYNMpehhLNw3B4jCxAyOSzft
lX2ev5aZx1L3Y4irnmVduI6lYPNBZuzUKzhFnxZ8vw08DX48WRzAvk8i6VC0WsSR
IZJvf8l8OwPqd7X4pPKt3aYAh5hjqPdv6O1UFJV6TWdubdvmQvrBoOqA1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtFpHrQ1IH+DsBBGwrPk4AfH21YMB8GA1UdIwQY
MBaAFDvVQ9BGXqL2/rgo8YUEsD9AOsZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmIt
ZGY0NTA1NGRkOTM0LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmItZGY0NTA1NGRkOTM0
LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV4t2j6P
hKehbjvkty1fCVZ/iJMhhElCbspnI2S2nV7yGyg5JsyBsr1z/S6Gd31v1IFtbSas
2JNedEHvlSmg98cHSXDTjubo4xoRZ3Al+UahMU1nqrRyxZzqBsY+bqnQW5MiSdLy
l+cUnLgXk7Rb8huyTlcTWLwHFOEr1qtuTPPG9UEH8QK2vfD0UEmylIkwEpAYhWyN
3GeWfusdHHJ7Wc8if/0pF0BYbvAotqWCPJgwQ6l6NcKfLqP5CXyD+tuMJ2E9A03d
i8HeZH0uaNzuf+qYcEfL/OTwseUfm0Xzus+L8uKeSmbNSpciE86LKE+xGZktOHCN
BOJmuxq7AzAtPQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:45:19 2026 by rpki-client