Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: W5yqXLbcr8lOVpBC+uEHVVUJYYMItKHAjiIs0lz4mIU=
Subject key identifier: E6:1B:39:D0:08:B8:5C:75:5F:0F:F6:B2:27:B0:C7:6B:88:D5:38:63
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 019DD12CA8C917A3B6A556E6360CDE2C74CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 1428
Signing time: Mon 27 Apr 2026 23:00:58 +0000
Manifest this update: Mon 27 Apr 2026 23:00:58 +0000
Manifest next update: Tue 28 Apr 2026 23:00:58 +0000
Files and hashes: 1: 1-XNUwWKzbev3eBkOpcFm2xBkpoQ.roa (hash: /XJqAINdnXXDOWVdvq7kHAw4+acFhC/fD2KcJxKL5nQ=)
2: Bi5LXJXtXaqWu85feTd5MY6-MmU.roa (hash: j5lYG+Y4b77KtRu85Ljxo9pZvkjx9vw5hisZYWyAQ2I=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: z1k3DyV8k56W8qbECrhhTl8i+o+CNX/kCOFBYOo6W4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:a8:c9:17:a3:b6:a5:56:e6:36:0c:de:2c:74:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Apr 27 23:00:58 2026 GMT
Not After : Apr 28 23:00:58 2026 GMT
Subject: CN=e61b39d008b85c755f0ff6b227b0c76b88d53863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:f6:18:50:21:fc:62:6f:9c:7b:65:5c:83:
d3:18:26:c7:26:b6:8f:5c:5f:53:9d:2c:9a:7d:0d:
04:27:5e:39:32:4c:dd:da:ad:0a:0d:66:d1:22:39:
1b:1b:86:cf:a6:6e:17:ec:a4:00:8e:13:66:f3:d8:
02:e2:20:7d:a8:14:be:50:7a:9d:2c:3a:d8:8e:93:
44:38:99:78:c9:86:11:b7:a8:7d:e8:71:d5:ee:ea:
8c:c1:05:d0:70:e0:69:c3:8b:de:02:8e:71:ed:5e:
19:da:db:30:90:6e:58:44:dd:14:3a:7c:fc:13:51:
a3:ad:1a:6e:29:5c:1f:82:7e:ea:39:63:27:f6:b2:
1e:35:32:fa:39:e8:a0:70:46:3f:c1:cd:b4:be:49:
92:10:21:f8:10:52:9f:4d:9b:c6:9c:ef:93:86:db:
c5:7f:cd:b3:f7:e3:02:35:82:8c:ba:e2:61:f2:49:
a2:25:ac:f9:5e:2e:6b:a4:4a:f1:12:b6:b1:b9:b0:
04:0c:ad:32:f1:a4:ed:b3:43:e0:99:15:81:7a:39:
4b:fb:63:46:ae:1f:ad:ab:d2:ea:7d:cb:ac:8e:b9:
a8:97:0c:93:7c:2c:0d:30:a6:b2:83:96:17:56:e6:
8e:d4:8b:cf:44:2e:8c:5a:17:b5:f1:64:c4:ab:3e:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1B:39:D0:08:B8:5C:75:5F:0F:F6:B2:27:B0:C7:6B:88:D5:38:63
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:32:91:e4:d9:74:ee:93:16:32:ed:49:94:6d:04:04:47:e1:
55:6e:d9:6b:f3:d6:37:dd:8a:39:2d:35:fb:22:99:55:54:0e:
0f:0b:63:07:9b:53:19:38:c6:58:10:ae:2f:79:7d:17:73:54:
10:0c:37:f8:02:e0:91:86:3f:d4:10:6d:a3:50:08:d0:e2:b1:
35:41:0a:57:7a:4a:47:9b:0a:9f:34:af:89:eb:4e:fc:a6:ee:
a0:57:33:e9:57:2a:f7:cc:65:3a:fb:6c:2f:97:03:ca:19:89:
85:28:69:35:c0:51:87:07:46:e3:2d:c2:3d:97:f7:af:5e:dc:
84:d2:fa:b9:a2:d8:41:ae:84:1a:63:77:75:15:e9:37:b5:2b:
09:62:bc:30:e7:d5:04:09:a3:d3:98:47:2d:f1:87:23:50:a6:
0b:fa:f8:03:5f:ce:41:40:41:3f:02:2f:a1:45:59:cb:81:a8:
54:09:13:4e:a3:0b:e6:b0:57:bd:84:65:93:c0:4d:2f:26:d8:
bc:97:83:d8:ad:c0:c9:79:aa:b7:25:9c:cd:02:ca:d0:c9:a2:
d6:68:c6:5d:50:80:e3:6f:28:f1:6b:56:0c:c7:84:39:b2:91:
8b:e9:a8:bf:70:cd:9c:f6:92:11:ca:b7:c2:4a:36:94:d5:ca:
a5:24:a1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:23:33 2026 by rpki-client