Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier: W3NxCjmZC2prPQOWsjG9PrYaGhB0tq9z6T99mHOH0BA=
Subject key identifier: 90:0A:51:D9:2F:23:C1:08:22:68:12:86:E3:23:59:47:8E:96:D5:6D
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 01A08AC3C6AD450991CABF79B291EEBBBDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number: 1836
Signing time: Thu 10 Sep 2026 10:01:21 +0000
Manifest this update: Thu 10 Sep 2026 10:01:21 +0000
Manifest next update: Fri 11 Sep 2026 10:01:21 +0000
Files and hashes: 1: 4fOq63K4mopVemaQ-HBzroQGjhI.roa (hash: Z6rN8qev8RuWEorQigHIpRaBPMJqDPOqrkN3PeNATMs=)
2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: DqODtFkUuHqXyX6N/ZX6J3xd5g9L91mAf1k0Ma6BffY=)
3: bS-3WMJ6trSXUQQ2QseYp1ckPmk.roa (hash: 1o5QP1lg7Qvj3p2KPzx+G8MOKCcn1rBG+1ZUO/A8sgQ=)
4: hxASy4hLGBeWH_MryyaHO1lrPJA.roa (hash: C24hogDjQa5JypWfgjKzLJBRFrw8zGfTt/8PL+XGJDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:c6:ad:45:09:91:ca:bf:79:b2:91:ee:bb:bd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Sep 10 10:01:21 2026 GMT
Not After : Sep 11 10:01:21 2026 GMT
Subject: CN=900a51d92f23c10822681286e32359478e96d56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:9f:09:a8:30:5d:48:93:a4:0d:66:83:2b:
d6:6a:46:e5:0c:00:dc:85:3d:45:af:02:4c:45:0f:
0e:03:9c:b6:08:61:83:98:cc:cc:7b:cb:70:d6:7a:
b2:a5:6b:38:e9:d7:5e:94:66:bb:31:8a:70:02:90:
a9:b4:25:03:bb:36:90:57:6e:dd:61:af:36:90:f1:
6a:6c:75:85:98:ec:9b:ed:d7:ca:05:56:bf:3c:1b:
02:12:44:a5:5d:f6:14:a9:40:8f:74:07:45:8f:1f:
90:52:50:ce:af:6d:c8:14:86:75:e2:d7:94:a1:7c:
bd:c2:94:10:d8:ce:e9:9f:07:8a:0b:60:f8:ac:12:
79:e0:10:9e:d9:af:22:8d:4a:c8:6a:a3:ba:31:bb:
29:03:48:3f:06:73:21:96:fb:9f:50:e3:06:30:a9:
ef:48:76:03:f0:6a:f0:fc:3a:c2:1c:5d:4c:88:ef:
af:f9:cc:6d:2c:0e:25:e9:a1:63:7d:02:ee:d1:9d:
03:e0:71:5e:1b:36:7d:9c:c5:2f:5d:58:37:86:c3:
82:2f:50:de:d4:8c:87:91:23:83:2e:96:6b:dd:75:
36:1b:4f:37:ea:f4:39:5c:73:61:e9:19:61:8c:1f:
4c:21:45:22:32:a5:dd:24:80:dc:44:f0:9d:bc:a3:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0A:51:D9:2F:23:C1:08:22:68:12:86:E3:23:59:47:8E:96:D5:6D
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:88:b0:1a:77:50:89:98:e2:e1:78:8f:33:e1:7c:f4:df:89:
3e:e8:d1:be:14:94:be:48:05:11:e9:72:81:48:86:a3:8c:e3:
a8:1f:1f:c0:8e:9a:e3:41:bf:99:aa:cf:19:33:7e:38:0e:57:
b7:a1:0c:ca:4a:6e:2e:ee:98:20:ea:cc:2e:21:7b:1e:17:e5:
b6:50:7f:17:a7:2d:30:ea:92:5d:17:26:a5:84:35:ae:fb:55:
4f:2f:7f:6b:2d:b7:18:cf:b9:3d:db:f8:e7:05:85:3b:df:7e:
3b:3a:0d:c5:2c:9e:a2:b0:cb:39:0d:7f:08:b1:7e:db:0e:cd:
5d:de:7e:e7:5d:ca:3b:d6:ff:6e:f1:25:4f:82:e0:a1:ab:c7:
67:f8:01:24:a6:19:69:32:7d:da:41:ce:8b:03:8d:0c:2f:f9:
ca:36:0d:e0:cb:04:1c:0b:01:5a:0e:da:d3:0d:74:e1:0a:72:
dc:c0:41:70:89:9f:52:a1:b1:04:28:f5:85:55:39:08:7b:5f:
84:36:d3:1c:5c:f2:42:44:c5:39:6a:1e:16:5f:a7:67:58:01:
70:80:e5:c9:fb:ef:f4:81:78:2f:3f:54:d0:07:0e:96:3f:67:
03:56:0f:df:9f:c3:2b:fe:bc:e2:4c:b5:24:fc:85:f5:d9:70:
65:24:8b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:16:11 2026 by rpki-client