Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: 7EDjm3RHjXlY5SRQ5X5KY/+Qe37mOY/jBsoNdrazqJk=
Subject key identifier: 1D:DD:0B:4C:CB:39:F2:F0:6A:FB:C2:BC:A6:C4:F6:54:32:68:48:C9
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 019CE77FFD7C2E5D6017F796C3307FD1DDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 13AF
Signing time: Fri 13 Mar 2026 14:00:50 +0000
Manifest this update: Fri 13 Mar 2026 14:00:50 +0000
Manifest next update: Sat 14 Mar 2026 14:00:50 +0000
Files and hashes: 1: 1-XNUwWKzbev3eBkOpcFm2xBkpoQ.roa (hash: /XJqAINdnXXDOWVdvq7kHAw4+acFhC/fD2KcJxKL5nQ=)
2: Bi5LXJXtXaqWu85feTd5MY6-MmU.roa (hash: j5lYG+Y4b77KtRu85Ljxo9pZvkjx9vw5hisZYWyAQ2I=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: 0EmK22sHsWpxON3mt4A/zACNk5YotmYVIYUEXATFAyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:7f:fd:7c:2e:5d:60:17:f7:96:c3:30:7f:d1:dd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Mar 13 14:00:50 2026 GMT
Not After : Mar 14 14:00:50 2026 GMT
Subject: CN=1ddd0b4ccb39f2f06afbc2bca6c4f654326848c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fa:8b:1c:c2:60:db:13:1b:b3:77:47:6a:49:
29:f7:3f:32:ae:1a:3d:fa:b9:60:22:d1:53:01:71:
de:37:75:a7:67:91:be:b7:73:4c:73:06:83:ef:79:
7c:ff:b2:d6:03:3b:9e:fa:fe:bc:c5:a9:93:31:30:
80:4b:68:6a:0b:2f:e6:16:0e:7d:e3:a7:9a:4b:96:
91:cc:85:a0:98:34:31:b5:25:85:6c:ab:52:38:a0:
ab:98:2b:24:29:cd:9e:7f:bc:14:4e:36:fe:22:2f:
33:f5:d9:5d:b9:78:0b:2c:d9:14:e1:00:3a:6b:6a:
5a:cd:38:f6:f4:f5:a7:48:c6:c0:4f:b9:07:a9:f3:
8e:f7:f1:cd:e1:00:9f:07:67:cc:7e:5d:b0:6a:f9:
b2:5b:7e:a8:9e:53:ca:4d:52:a0:5d:98:28:20:e7:
64:46:d0:60:bd:3c:3c:bd:d3:d4:b7:fa:60:cb:42:
df:cd:80:2a:63:f5:d5:39:a9:4d:03:6c:a4:4f:35:
eb:7c:d3:28:fd:ab:05:50:6c:bd:7f:3c:58:69:a6:
c4:76:e2:d2:97:1d:76:7f:55:dd:7c:7e:38:ea:b7:
6b:12:a5:9e:a3:4e:d1:26:30:01:97:a3:d4:3e:6a:
6f:76:d6:1e:56:3c:bb:94:c2:ed:a7:78:64:7c:49:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DD:0B:4C:CB:39:F2:F0:6A:FB:C2:BC:A6:C4:F6:54:32:68:48:C9
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1e:f4:bc:05:34:6f:19:d2:22:01:22:36:ac:9f:56:52:65:
81:7d:ba:6c:cc:aa:b0:9d:62:53:17:a4:ab:40:1a:81:ee:bf:
8a:21:13:2c:a2:28:1b:7b:c4:e6:97:04:a0:b4:ca:82:90:eb:
61:d2:76:cb:db:41:56:d0:1a:f6:11:de:66:32:f4:f5:fc:0e:
05:f7:20:d8:c2:0d:9b:23:37:a5:fe:ae:8a:58:76:c8:0e:3e:
64:4e:43:f8:30:ea:63:1d:82:54:ae:fe:46:5e:e3:66:f4:3e:
d9:9c:0a:bb:04:65:aa:ff:8f:07:a8:fd:82:7a:89:bf:cc:87:
a0:b9:a9:53:74:fa:45:0b:6d:a1:5e:93:21:f4:15:5b:2b:37:
8e:89:ba:bf:36:88:5e:d2:c5:4a:15:72:19:07:ee:00:fc:8f:
b4:6f:f0:cb:b4:20:b5:13:0c:92:d2:16:7b:ce:64:6d:c7:57:
f5:24:de:0b:16:74:6b:33:53:c3:c0:02:74:59:c5:6a:12:81:
12:45:b2:99:2f:a7:a6:c2:55:c7:54:d4:a1:ea:9f:45:d7:03:
10:c9:10:93:f2:90:95:b5:1e:d6:91:98:a4:0b:29:df:ef:12:
05:48:d9:1c:65:12:c8:17:af:03:70:17:6c:e6:6f:81:5b:b4:
5d:f6:d6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:24:19 2026 by rpki-client