Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: GszafrG98zoS8uMUVknu5o65Kyzk/DLj7YhATqSNTCw=
Subject key identifier: 7B:8C:46:4B:90:AD:37:70:A6:6C:3F:2B:0B:A3:83:0C:8E:D0:98:C3
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 01A1894053E926453EF96E4C25625D10BAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 1615
Signing time: Thu 29 Oct 2026 20:00:56 +0000
Manifest this update: Thu 29 Oct 2026 20:00:56 +0000
Manifest next update: Fri 30 Oct 2026 20:00:56 +0000
Files and hashes: 1: 1-XNUwWKzbev3eBkOpcFm2xBkpoQ.roa (hash: /XJqAINdnXXDOWVdvq7kHAw4+acFhC/fD2KcJxKL5nQ=)
2: Bi5LXJXtXaqWu85feTd5MY6-MmU.roa (hash: j5lYG+Y4b77KtRu85Ljxo9pZvkjx9vw5hisZYWyAQ2I=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: WwDOr2j8vOHbUmyitcgPDuWQIvB4nZADbFzUv2We4hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:40:53:e9:26:45:3e:f9:6e:4c:25:62:5d:10:ba:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Oct 29 20:00:56 2026 GMT
Not After : Oct 30 20:00:56 2026 GMT
Subject: CN=7b8c464b90ad3770a66c3f2b0ba3830c8ed098c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:f4:86:e3:e4:8d:68:54:f7:ca:b5:d4:a6:
4c:f4:62:6a:a2:fd:b2:e1:ce:ab:8c:50:a8:aa:1d:
43:ec:df:53:5b:45:0e:cc:87:67:1c:d9:28:93:46:
09:75:33:98:54:ee:65:b0:b8:2d:4a:2f:f8:e3:bb:
ce:fd:ca:8a:20:10:1b:ad:9f:5f:08:44:61:e5:5b:
92:58:1a:44:41:67:53:d8:e3:7d:6e:a0:73:05:65:
b6:15:ca:f4:9e:03:3a:52:9c:5b:9d:85:d4:4d:35:
60:1b:84:60:79:61:5f:df:cc:b6:8c:f6:9f:f8:bb:
23:da:1f:a5:97:7e:a5:10:5e:87:0b:44:44:7b:2c:
7f:78:37:ae:e5:79:31:f9:5d:e1:d5:53:53:2f:eb:
72:40:be:2b:e9:2f:2e:b2:e2:82:aa:ed:6f:68:78:
65:64:df:48:ae:44:12:80:1c:65:60:ac:b5:e3:e7:
21:84:45:20:78:1b:28:b6:78:09:a3:34:dc:cd:64:
ce:b0:60:06:37:09:e6:36:00:c8:88:40:d0:f7:26:
3a:50:b4:f3:e9:82:37:29:9e:48:3e:a3:ae:73:a4:
bf:de:06:dd:59:86:6e:6b:e5:ea:76:0d:d1:27:0c:
29:cd:c0:9e:91:da:1a:68:c1:dd:78:46:01:96:3d:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8C:46:4B:90:AD:37:70:A6:6C:3F:2B:0B:A3:83:0C:8E:D0:98:C3
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6a:a7:fb:71:57:d4:d2:c5:c3:1b:52:b8:56:e6:4d:89:34:
a9:09:c9:d4:a0:7f:5d:50:03:0d:03:02:e8:f8:02:f6:5c:6d:
e5:95:21:b3:a0:9f:57:2c:c7:6e:02:2d:3f:05:0e:3e:9c:04:
78:a7:34:cd:b4:55:a7:53:22:6e:af:6e:ba:6b:3a:36:41:5c:
03:d0:34:85:4e:70:38:9b:8c:09:8c:19:7c:11:ea:6e:4a:ce:
f1:38:1b:01:12:c9:6b:5c:77:34:5a:ae:54:3f:3c:9a:94:66:
b8:37:ce:7a:36:33:bd:6f:8b:5b:ba:df:75:ac:f4:c9:38:49:
45:88:b1:ea:13:fb:0c:d5:6f:a7:e0:92:ba:d4:be:a9:5c:ab:
36:dc:ed:17:89:ce:bf:6c:56:5f:df:b8:16:54:7b:9a:7a:ca:
e0:7a:0a:85:dd:11:e4:ea:ca:06:3b:6e:de:6d:cf:ab:20:f4:
1f:a5:26:5a:f3:18:d5:84:c6:ac:c7:16:69:c8:f4:24:b2:a5:
0b:d6:3a:0b:4d:be:4a:d5:cf:f2:db:09:e9:fe:dd:e7:8a:9b:
6e:34:14:a4:18:76:c9:9e:20:3d:bc:e4:2c:2d:d6:52:77:25:
21:f4:20:5b:41:f0:0c:d9:14:75:55:e0:fa:8f:14:81:48:e7:
20:ea:90:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:55:02 2026 by rpki-client