Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: dVBc+d9FC7HsoPI16jC0q947NDWVnOqnXgpJkW/p9pU=
Subject key identifier: DE:EE:79:05:D6:DA:76:36:64:C9:8F:AF:1E:51:96:8A:CF:CE:FA:AA
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 019FAB9A3D54C052275150B5C1129D33D605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 140F
Signing time: Wed 29 Jul 2026 02:00:39 +0000
Manifest this update: Wed 29 Jul 2026 02:00:39 +0000
Manifest next update: Thu 30 Jul 2026 02:00:39 +0000
Files and hashes: 1: GPPevbImSvGjVqWAzYGvcpc3FOs.roa (hash: MHorAz/UCfb7aKgx7pKoBAkAFlLncJNyaH/wm4EHMOY=)
2: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: DS9tCOq6TFOQZnNuy/koeoWFn8z/lWIytYXhXvNaykk=)
3: XD7uuC6NUKDza7PfKtc_jHz7EnA.roa (hash: RPYu/+kKueNaM8YfpMGx6Mxi+JGMI3A7i1eBXpiVPd4=)
4: ntt8oBWCvDCUpNDHjPuie_5MUck.roa (hash: Yy1s4qDW987rNxjvZEbp1rZR84GXQU0RB/faIrx/grE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:3d:54:c0:52:27:51:50:b5:c1:12:9d:33:d6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Jul 29 02:00:39 2026 GMT
Not After : Jul 30 02:00:39 2026 GMT
Subject: CN=deee7905d6da763664c98faf1e51968acfcefaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:32:c2:3b:32:d9:51:5a:b2:b3:fe:47:78:
0d:d8:9f:b2:6c:92:52:cb:43:62:df:ef:95:19:c5:
9a:12:73:df:e8:43:fa:e2:65:86:c5:80:61:84:99:
5c:ce:9a:71:6c:86:4f:a4:31:25:13:f0:3e:50:29:
e3:33:ca:93:e8:63:e1:52:73:c1:ba:0b:34:6c:f8:
80:3d:2c:df:42:2a:ba:4a:61:14:9d:b0:62:fa:38:
17:2b:37:5a:e5:46:d7:3a:ba:9a:b3:df:e3:bb:31:
f1:1c:64:cd:f8:35:cf:00:75:c2:c2:20:4a:7b:5b:
62:e9:a9:44:3a:ac:1a:40:04:54:8f:9d:33:15:0e:
59:3f:7a:d3:e6:f4:5d:ff:54:65:0d:9e:8b:a1:05:
77:c7:ce:19:66:d7:02:13:6a:c3:00:d9:12:bc:51:
94:2f:c4:fb:db:01:7d:9f:09:7b:28:7d:87:a6:b7:
e1:e7:ce:42:e0:21:bc:a9:2e:11:a0:af:b6:bd:79:
94:ab:d6:6c:11:49:7a:8a:e0:57:ab:13:eb:6d:2d:
80:25:9f:b1:87:0c:40:8b:10:09:bf:bc:e2:7f:19:
e1:ee:2f:81:54:c3:fd:c5:2f:79:7e:7f:b6:df:5b:
51:f9:84:22:02:fa:5a:6b:49:5e:6c:82:f1:55:b9:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EE:79:05:D6:DA:76:36:64:C9:8F:AF:1E:51:96:8A:CF:CE:FA:AA
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ee:a2:2d:58:1c:37:35:2e:28:31:40:33:2d:d7:3d:a9:b1:
67:bc:e6:5c:13:95:cc:bf:6d:89:8e:0a:a7:94:3d:b8:b7:73:
80:24:c0:33:a6:44:37:b0:a4:f4:1f:46:7f:4a:35:06:6c:b2:
8c:d6:00:c8:a4:fc:27:77:5f:b1:4e:57:22:46:83:66:52:66:
8f:2b:4f:6c:b7:d0:f0:27:aa:ba:ea:1e:97:aa:d8:4b:14:b2:
60:52:4d:28:27:fa:45:15:04:4d:df:2e:cf:df:21:2a:20:59:
eb:b3:ab:50:71:5e:a1:97:af:50:44:ed:fe:0f:b0:9e:b5:55:
95:fe:02:97:59:c0:4b:f8:b4:b9:d0:de:0d:d8:20:f9:15:35:
63:c9:f8:81:69:d5:53:4e:0b:67:83:fc:6f:0b:79:a2:35:aa:
d8:12:8c:24:58:d7:c3:7b:a6:6c:1e:98:82:d5:6c:6d:2b:b2:
34:0f:14:3c:e3:98:ea:e9:0a:84:02:ca:33:b4:70:a7:2a:5a:
52:c8:0c:ce:e7:a3:3d:26:42:a6:99:c5:e5:cc:0e:02:6b:5c:
8b:0d:5e:1b:36:ff:bc:20:eb:b4:9c:44:11:c6:a3:30:12:59:
32:d5:99:eb:29:a9:29:2c:63:59:73:af:fe:9c:a5:28:4f:aa:
1b:5f:d4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:47:50 2026 by rpki-client