Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier: tkeVO/qn6ohvFdFIQsa8/8oYGsG6R4ifamjFrJoDaog=
Subject key identifier: 5B:04:F8:63:AF:AB:F3:6B:EA:2E:F5:EC:CF:F4:1D:38:0D:A5:C1:69
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 019DCE2BEB7A3180285E527B360D0ED706B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number: 16C3
Signing time: Mon 27 Apr 2026 09:01:17 +0000
Manifest this update: Mon 27 Apr 2026 09:01:17 +0000
Manifest next update: Tue 28 Apr 2026 09:01:17 +0000
Files and hashes: 1: L2VyPx5ZvpU5RN459OVpFdGEzTI.roa (hash: q4E7mZNnPKZTyFhGeFOu6dBopK+4PcrNRvByumhCm4I=)
2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: gWBn4UptGc888SEUBaN/zKenabfd6WqsactzkmHF950=)
3: TJBNmpOs8INt5hscYvO24ZrUkg4.roa (hash: ccL8Nmo2+hfQcGN76XZ7Htt8PEnEJD9VPV3ept5h6/g=)
4: y-uuMFXf-Scx2MN6BDbVIftk3xk.roa (hash: yfvMu66uv7Lal8MVr9Vgy1IUkLDBtyoLNZxuu1dTKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:eb:7a:31:80:28:5e:52:7b:36:0d:0e:d7:06:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Apr 27 09:01:17 2026 GMT
Not After : Apr 28 09:01:17 2026 GMT
Subject: CN=5b04f863afabf36bea2ef5eccff41d380da5c169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:66:04:92:bf:0b:54:ff:22:c6:36:a7:6c:6d:
c8:1e:dc:51:21:23:98:ad:a1:ca:07:77:28:73:44:
88:14:9a:bb:ce:49:64:44:f2:e9:d6:dc:22:15:b5:
77:30:0c:a2:cb:a2:08:9b:0d:45:53:d1:d9:d5:2f:
43:1d:5e:cb:13:37:f6:65:2f:62:da:00:3e:bf:01:
5b:7a:2e:50:5f:38:b9:67:85:47:84:87:72:18:2c:
2d:50:bf:08:5c:72:50:f8:3c:69:d0:fc:3a:94:d8:
d1:e3:18:9a:2f:e7:7e:66:e1:6f:a0:c3:6b:24:fd:
88:1d:ae:e7:d0:8c:11:0c:5e:61:e7:4f:ed:cf:9a:
c3:46:3e:ea:72:87:96:1b:9a:d5:52:c5:16:85:7e:
90:43:3b:5f:04:ed:62:fd:8b:97:9c:d0:ac:32:ef:
ba:7e:f3:a8:fe:30:ec:3f:a7:76:19:32:e5:21:5c:
65:7d:96:28:f3:a1:11:0f:54:59:5c:f9:dd:9e:c8:
ba:46:dd:58:5e:01:c1:b0:74:31:e8:08:7c:63:6e:
f7:28:44:5e:d1:0a:30:ac:46:2a:45:b2:55:b8:d3:
fb:8f:bd:ee:de:15:8f:2b:eb:96:bc:d9:60:ac:94:
95:c0:68:15:86:2e:36:6d:3b:25:7c:7e:be:5f:8c:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:04:F8:63:AF:AB:F3:6B:EA:2E:F5:EC:CF:F4:1D:38:0D:A5:C1:69
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8b:f1:40:2f:17:c1:c3:4a:71:67:f3:9f:82:b2:29:15:70:
49:21:95:40:a8:e2:f3:e2:b7:65:87:05:1a:15:05:cb:15:9c:
e1:2a:cb:0f:2d:50:41:b6:9e:ee:5f:fa:71:9c:c1:f9:21:3d:
05:79:d5:bb:f4:c1:53:1c:57:13:de:9e:95:84:66:26:4a:d0:
61:85:cc:fc:bf:39:63:63:46:71:e8:a2:ec:c4:10:90:6c:c9:
77:e0:e1:4a:8f:5a:6d:c4:66:aa:61:14:1a:66:e8:6a:07:df:
36:37:02:00:e5:74:e1:9b:e9:57:1b:ed:04:a0:49:44:18:88:
4b:33:af:f4:53:50:cf:e9:c3:60:79:30:bc:04:65:15:25:d8:
7a:f0:a1:3c:e4:6b:d1:6b:da:9d:91:1e:d5:44:5d:86:2b:9e:
1b:8d:45:28:31:fd:22:7c:e9:b8:b6:90:23:ed:ad:93:92:67:
df:26:ce:97:a7:f2:90:b4:af:53:a3:ad:55:b0:08:c8:11:50:
67:5c:36:0d:57:02:b2:f3:70:cd:1d:05:43:16:3b:e9:2d:53:
66:43:2c:32:68:06:65:62:cc:5d:43:87:bc:07:f8:5b:6a:19:
58:1b:0b:6a:b9:c4:72:12:0a:36:14:48:ac:0a:83:04:85:26:
47:ea:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:38 2026 by rpki-client