Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: W0QwS1GEDWvjS+9Y7P9UWKNle5HIapsf9Ls86IzZQiA=
Subject key identifier: 90:F6:E3:BC:16:A4:F1:B9:CC:96:A8:8B:27:2A:8F:DE:18:A5:45:90
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 019A73388C1C40D43CF406929DFD1C4E9BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 1260
Signing time: Tue 11 Nov 2025 14:01:16 +0000
Manifest this update: Tue 11 Nov 2025 14:01:16 +0000
Manifest next update: Wed 12 Nov 2025 14:01:16 +0000
Files and hashes: 1: 4n60dmESH0S_t55G5kL7m5-9nPQ.roa (hash: 8Yl7mPdCOASLn21jFFZtRnqVACPq2IcHgd8DlOM4RfQ=)
2: BibofgsXi1m02E0sydv0lSzcS6M.roa (hash: 6kPi5tOuSZ0eERv1ZZd/XUAaafp/Tbm9N/8PWSqizA4=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: x4erGlN5iRb9x9sHaqbmrZE5ei8uavVIBx5j8WcRPyI=)
4: zOvi4tvGqA3pjzv5kT1FkiWDZmc.roa (hash: 434rv4cRKqLcMYo5GvbFFeFDY6XbKZly6Jd8xQdtOsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:8c:1c:40:d4:3c:f4:06:92:9d:fd:1c:4e:9b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Nov 11 14:01:16 2025 GMT
Not After : Nov 12 14:01:16 2025 GMT
Subject: CN=90f6e3bc16a4f1b9cc96a88b272a8fde18a54590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:9e:67:20:1b:2c:ba:82:2b:1a:74:5b:6c:
65:0d:ff:26:35:d9:48:fc:9e:af:fb:e6:3a:70:27:
9a:39:9a:97:ce:b6:bd:7a:58:d5:fb:6d:8f:85:e4:
dc:b0:b2:c3:77:bb:14:46:15:cc:13:ca:23:2c:22:
69:9c:13:b6:5e:b8:d7:e9:47:0c:43:8e:8f:a2:4f:
7c:36:e4:61:65:1b:46:0e:45:b0:4c:96:5a:a0:77:
ab:cb:c2:29:32:cc:8f:68:9b:69:71:21:d9:4a:cd:
16:6e:c6:22:f7:c2:8f:ec:53:66:8c:a8:9a:e3:6b:
4a:60:8d:d8:e0:c7:57:a8:29:be:c9:89:22:af:21:
eb:f3:a0:d2:c9:5e:8b:60:20:06:9d:e1:e9:7e:39:
95:e2:f6:f4:9d:f2:1e:23:51:27:51:a0:37:21:cc:
8a:2a:48:f0:83:b2:b4:67:c9:ea:71:03:28:37:17:
d9:a1:ea:ff:a7:3b:a9:4c:90:98:9b:08:50:68:44:
45:f9:b0:03:db:96:fa:47:5d:29:16:9c:e1:c2:6d:
5a:75:8a:09:ec:bd:42:c8:b3:d6:ae:90:a1:e6:46:
50:12:2f:31:d3:56:7e:fb:f0:30:c0:88:79:c4:39:
e2:05:f0:ff:75:75:ce:ea:9e:77:c1:25:03:3a:ac:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F6:E3:BC:16:A4:F1:B9:CC:96:A8:8B:27:2A:8F:DE:18:A5:45:90
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3e:4d:49:f5:f9:1c:d9:7c:cd:31:d8:71:8c:5a:9f:a8:e4:
ff:45:30:0c:e1:99:92:b4:8c:a3:3c:4a:b1:10:74:fb:3f:b6:
34:aa:0b:5f:5a:bb:7a:02:16:14:45:f8:f6:10:3c:54:9a:c5:
db:b1:dd:1f:b0:4a:00:08:0d:c1:f7:88:cb:88:16:b2:80:47:
4d:4f:43:47:49:75:a7:e1:be:64:76:5c:8e:18:0b:52:43:48:
cd:47:1c:90:ef:34:77:95:42:30:f0:f4:0d:08:58:38:35:06:
f2:e4:ae:fd:13:16:ed:3e:4a:fc:6c:41:f5:19:74:8d:77:ef:
f6:a2:92:82:44:e7:6c:d8:59:f8:2c:09:5a:04:20:55:88:8b:
4f:95:79:5b:cd:00:68:2e:5f:fb:5d:a8:a5:c5:60:93:fc:4b:
2b:26:63:44:97:6f:77:88:b1:f4:de:cb:54:8a:43:13:e6:40:
7b:23:cd:9e:ce:76:7a:e3:56:6f:48:1f:12:ff:28:43:5e:ed:
93:e6:fa:0d:96:68:76:0d:c6:bc:1c:00:ad:3c:2e:b3:c0:d7:
70:6b:b0:4d:74:5e:4a:73:01:ce:c5:f3:9b:b5:39:90:0e:85:
37:42:a2:9f:5c:99:c4:1a:d0:b3:57:a0:47:dd:b2:07:0d:9e:
3b:66:46:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOIwcQNQ89AaSnf0cTpvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDlhMTc3YmI1ZGZiNmVhYmU0Y2FkNzlkZWY4ZjhiMDA1
ZGY2NTYwHhcNMjUxMTExMTQwMTE2WhcNMjUxMTEyMTQwMTE2WjAzMTEwLwYDVQQD
Eyg5MGY2ZTNiYzE2YTRmMWI5Y2M5NmE4OGIyNzJhOGZkZTE4YTU0NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTueZyAbLLqCKxp0W2xlDf8mNdlI
/J6v++Y6cCeaOZqXzra9eljV+22PheTcsLLDd7sURhXME8ojLCJpnBO2XrjX6UcM
Q46Pok98NuRhZRtGDkWwTJZaoHery8IpMsyPaJtpcSHZSs0WbsYi98KP7FNmjKia
42tKYI3Y4MdXqCm+yYkiryHr86DSyV6LYCAGneHpfjmV4vb0nfIeI1EnUaA3IcyK
Kkjwg7K0Z8nqcQMoNxfZoer/pzupTJCYmwhQaERF+bAD25b6R10pFpzhwm1adYoJ
7L1CyLPWrpCh5kZQEi8x01Z++/AwwIh5xDniBfD/dXXO6p53wSUDOqyPHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJD247wWpPG5zJaoiycqj94YpUWQMB8GA1UdIwQY
MBaAFDvZoXe7Xftuq+TK153vj4sAXfZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUt
ZTM4MDMwYjY5ZDVhLzEvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUtZTM4MDMwYjY5ZDVh
LzEvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHT5NSfX5
HNl8zTHYcYxan6jk/0UwDOGZkrSMozxKsRB0+z+2NKoLX1q7egIWFEX49hA8VJrF
27HdH7BKAAgNwfeIy4gWsoBHTU9DR0l1p+G+ZHZcjhgLUkNIzUcckO80d5VCMPD0
DQhYODUG8uSu/RMW7T5K/GxB9Rl0jXfv9qKSgkTnbNhZ+CwJWgQgVYiLT5V5W80A
aC5f+12opcVgk/xLKyZjRJdvd4ix9N7LVIpDE+ZAeyPNns52euNWb0gfEv8oQ17t
k+b6DZZodg3GvBwArTwus8DXcGuwTXReSnMBzsXzm7U5kA6FN0Kin1yZxBrQs1eg
R92yBw2eO2ZG5g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:45 2025 by rpki-client