Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: ft92h2O3t5xcEkTC8ETRvd13WFfJFbA5ph9LNGNuvxk=
Subject key identifier: 4A:3C:45:94:E9:E3:1C:7F:95:2A:EB:C8:87:2C:74:7D:B7:F1:9E:31
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 01A190FA4C273668A87D559F596113D1A5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 1619
Signing time: Sat 31 Oct 2026 08:01:24 +0000
Manifest this update: Sat 31 Oct 2026 08:01:24 +0000
Manifest next update: Sun 01 Nov 2026 08:01:24 +0000
Files and hashes: 1: 1-XNUwWKzbev3eBkOpcFm2xBkpoQ.roa (hash: /XJqAINdnXXDOWVdvq7kHAw4+acFhC/fD2KcJxKL5nQ=)
2: Bi5LXJXtXaqWu85feTd5MY6-MmU.roa (hash: j5lYG+Y4b77KtRu85Ljxo9pZvkjx9vw5hisZYWyAQ2I=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: QXZ5p82DyrcAKZXx9k+x5gVAA9zin+uE8YLz6vJwpYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:fa:4c:27:36:68:a8:7d:55:9f:59:61:13:d1:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Oct 31 08:01:24 2026 GMT
Not After : Nov 1 08:01:24 2026 GMT
Subject: CN=4a3c4594e9e31c7f952aebc8872c747db7f19e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2f:f2:36:1d:06:b0:f0:5b:22:8d:a7:b8:60:
76:c3:88:ac:f0:11:f2:19:ac:d7:80:16:1b:66:6b:
b1:66:48:dc:d8:11:04:8b:12:12:be:e3:2a:7e:3d:
84:8f:54:12:a1:3d:b9:2e:1a:56:da:80:77:5a:54:
e9:7a:69:b3:8e:39:b1:ef:2a:cd:d8:4f:b0:a1:fe:
3e:a4:cf:40:12:da:12:05:1c:1d:08:a0:02:0c:e5:
82:86:af:5e:a4:42:8c:24:05:c9:16:85:6c:14:24:
11:71:96:00:bb:dc:2e:5d:7c:f3:76:5e:e6:46:37:
b2:18:58:4a:84:aa:f6:24:0e:8e:d4:53:f8:19:cd:
78:7f:60:71:6f:a4:9f:68:da:c6:b1:09:19:ee:0f:
8b:8d:40:46:4f:8d:ce:54:40:db:63:e4:9d:25:e4:
f8:3a:af:b7:b9:aa:32:3b:73:79:83:b7:44:25:2b:
63:a9:d1:b3:79:9a:51:27:75:7d:bd:fb:8e:9b:d4:
84:39:ff:16:9d:35:75:f1:76:35:69:31:4f:3d:56:
a2:aa:d9:88:d8:3d:8c:5a:3f:6c:38:b2:9f:63:e3:
e8:e1:96:66:45:34:5b:f2:85:fa:77:11:ec:54:a7:
cd:67:41:f8:1f:ca:bb:f8:57:b4:3c:36:a9:40:16:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3C:45:94:E9:E3:1C:7F:95:2A:EB:C8:87:2C:74:7D:B7:F1:9E:31
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d0:e5:e4:d8:78:32:64:fd:90:fc:d7:6b:bb:98:39:5a:79:
b3:87:a7:a7:c0:8f:0b:c8:a3:ac:20:56:06:9d:ea:7a:f1:99:
e0:58:e4:17:68:f2:04:bd:49:a3:c9:15:87:5b:20:e4:8e:e2:
ee:b8:84:27:30:e3:77:66:5e:84:f0:13:9b:41:a7:94:56:ef:
a7:87:b0:fa:d1:b3:42:f4:73:1c:b8:73:d3:7b:73:7f:43:fb:
ef:ba:a4:04:2e:5b:f8:c6:4f:84:e5:dc:42:54:2a:98:10:dc:
54:3f:5d:21:37:e8:bc:81:b1:ee:e6:62:62:24:f7:eb:25:cd:
6f:ba:a4:38:5c:72:7a:1f:3f:53:73:f3:a1:22:72:06:49:9a:
bb:1a:b3:cc:9a:67:53:31:01:7d:b3:cd:48:f5:9f:53:1b:76:
dd:36:b7:c0:b4:0e:03:92:5f:48:57:a8:39:ee:e4:44:c7:c5:
ef:b6:db:a1:8a:37:ea:59:e2:e6:da:52:d2:33:d2:01:89:83:
25:7a:f2:c1:44:46:bd:a6:8f:00:c8:84:72:81:2f:9c:8a:84:
03:ab:f1:18:d2:34:63:1b:5d:67:5d:6a:94:ef:e9:95:ea:0a:
b8:d8:bc:01:27:11:0c:47:32:41:4f:f9:56:b4:8f:02:d8:d9:
63:82:41:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGQ+kwnNmiofVWfWWET0aXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDlhMTc3YmI1ZGZiNmVhYmU0Y2FkNzlkZWY4ZjhiMDA1
ZGY2NTYwHhcNMjYxMDMxMDgwMTI0WhcNMjYxMTAxMDgwMTI0WjAzMTEwLwYDVQQD
Eyg0YTNjNDU5NGU5ZTMxYzdmOTUyYWViYzg4NzJjNzQ3ZGI3ZjE5ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S/yNh0GsPBbIo2nuGB2w4is8BHy
GazXgBYbZmuxZkjc2BEEixISvuMqfj2Ej1QSoT25LhpW2oB3WlTpemmzjjmx7yrN
2E+wof4+pM9AEtoSBRwdCKACDOWChq9epEKMJAXJFoVsFCQRcZYAu9wuXXzzdl7m
RjeyGFhKhKr2JA6O1FP4Gc14f2Bxb6SfaNrGsQkZ7g+LjUBGT43OVEDbY+SdJeT4
Oq+3uaoyO3N5g7dEJStjqdGzeZpRJ3V9vfuOm9SEOf8WnTV18XY1aTFPPVaiqtmI
2D2MWj9sOLKfY+Po4ZZmRTRb8oX6dxHsVKfNZ0H4H8q7+Fe0PDapQBaIjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo8RZTp4xx/lSrryIcsdH238Z4xMB8GA1UdIwQY
MBaAFDvZoXe7Xftuq+TK153vj4sAXfZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUt
ZTM4MDMwYjY5ZDVhLzEvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUtZTM4MDMwYjY5ZDVh
LzEvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdDl5Nh4
MmT9kPzXa7uYOVp5s4enp8CPC8ijrCBWBp3qevGZ4FjkF2jyBL1Jo8kVh1sg5I7i
7riEJzDjd2ZehPATm0GnlFbvp4ew+tGzQvRzHLhz03tzf0P777qkBC5b+MZPhOXc
QlQqmBDcVD9dITfovIGx7uZiYiT36yXNb7qkOFxyeh8/U3PzoSJyBkmauxqzzJpn
UzEBfbPNSPWfUxt23Ta3wLQOA5JfSFeoOe7kRMfF77bboYo36lni5tpS0jPSAYmD
JXrywURGvaaPAMiEcoEvnIqEA6vxGNI0YxtdZ11qlO/pleoKuNi8AScRDEcyQU/5
VrSPAtjZY4JBJQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:19:52 2026 by rpki-client