Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: Oz/3q2dY7Xk7ZL0/20v1fZjWe0Y4o4eUi2hyiQWJCEg=
Subject key identifier: 68:39:43:F9:A5:13:01:63:76:DB:25:6A:AE:12:BF:73:B0:8A:FF:B1
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 01A08C43EA1A2DF2AB4D384EC08055DF4380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 1592
Signing time: Thu 10 Sep 2026 17:00:56 +0000
Manifest this update: Thu 10 Sep 2026 17:00:56 +0000
Manifest next update: Fri 11 Sep 2026 17:00:56 +0000
Files and hashes: 1: 1-XNUwWKzbev3eBkOpcFm2xBkpoQ.roa (hash: /XJqAINdnXXDOWVdvq7kHAw4+acFhC/fD2KcJxKL5nQ=)
2: Bi5LXJXtXaqWu85feTd5MY6-MmU.roa (hash: j5lYG+Y4b77KtRu85Ljxo9pZvkjx9vw5hisZYWyAQ2I=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: RO3GOjV5/JHa03Ya3zwKDPHnQSjG3gUMvMaeRIlOBDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:ea:1a:2d:f2:ab:4d:38:4e:c0:80:55:df:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Sep 10 17:00:56 2026 GMT
Not After : Sep 11 17:00:56 2026 GMT
Subject: CN=683943f9a513016376db256aae12bf73b08affb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:26:d7:76:b2:e3:b8:90:5f:c0:f7:6c:9f:
95:15:b5:28:ee:8c:1f:a4:98:a2:8a:4e:4c:c5:6d:
e5:74:db:2e:c0:fc:90:12:b2:2b:53:f7:9f:ee:2a:
8d:93:bf:79:dc:2d:f6:28:77:42:cf:47:44:64:3c:
66:e0:99:90:dd:4f:48:bb:13:72:57:4b:cd:0b:21:
53:08:1c:d3:fd:bc:50:04:a7:14:47:dc:e0:52:57:
32:35:32:fd:08:e4:63:fd:67:b7:c0:90:6c:55:a9:
67:d0:ae:a9:01:47:bb:ac:bc:d3:29:eb:3f:e4:5f:
41:33:a2:63:78:f5:de:e9:39:21:2f:7e:5f:44:6d:
2a:d0:0d:d7:c2:89:23:8d:37:1e:e8:d4:17:58:0c:
b2:41:51:e1:5d:24:3f:cc:ab:b4:ae:d4:c3:88:ca:
50:1d:57:54:8d:22:a7:85:e2:87:4d:7b:8a:48:40:
ba:2f:96:42:86:c1:3c:d9:05:ed:56:fd:38:de:25:
b6:47:cc:a0:82:9d:d5:1b:e2:c5:53:d4:cd:04:b9:
b1:7f:62:5a:db:ec:86:fd:5a:0c:79:27:f3:3d:b7:
35:16:41:46:75:a0:e1:00:7d:0e:5a:6f:52:69:43:
e9:6a:e4:ce:aa:74:f2:c8:d3:4e:56:b2:1c:d7:f3:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:39:43:F9:A5:13:01:63:76:DB:25:6A:AE:12:BF:73:B0:8A:FF:B1
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f3:18:d4:8d:43:ec:46:2c:db:67:30:5c:e1:f2:c1:30:8e:
ef:86:b3:a9:1c:d2:84:2a:46:e2:14:73:9f:ae:98:3b:f1:28:
f0:2a:8f:36:0d:52:af:d5:61:e2:71:e3:58:be:f8:8c:ff:b6:
30:54:15:5b:b1:3f:19:c2:f6:fc:0c:3e:b2:95:9b:fd:c6:e6:
29:8c:fe:48:00:c4:5f:a8:2c:bd:bc:03:86:e7:73:b8:79:0b:
4e:4f:4d:86:15:f1:ad:b5:f9:46:1f:21:15:81:a6:a2:6d:51:
85:90:5e:56:83:1c:1e:ad:07:da:4a:e4:02:0a:e6:d1:7b:fe:
af:b3:6a:7f:5e:24:85:f7:19:fa:4e:37:79:c4:e2:91:89:cc:
98:32:97:a7:98:0b:8d:37:d9:6c:4b:22:81:12:eb:c7:af:ed:
82:ce:6d:c4:f7:fe:65:52:1e:fb:5f:9d:b5:34:ef:c3:ee:91:
6e:1e:79:ad:51:15:b2:3f:0b:12:67:52:78:9b:80:85:e3:de:
4e:6a:62:ae:09:bc:7c:9d:f5:47:7c:66:bb:36:7a:02:7e:46:
07:93:70:bd:f6:26:b5:0e:ac:5d:3f:f3:53:4a:ee:97:d1:7e:
ec:bf:26:a5:ce:d5:c9:87:ee:ef:7f:94:bc:a2:46:21:1d:f2:
bb:46:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:34:21 2026 by rpki-client