Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: lC4r/PzTD0JW7GOnXm9F9uJ6BkwYvFti3DBrjopLBIQ=
Subject key identifier: F6:AB:09:3F:31:5B:0E:AA:14:65:66:84:BD:E1:5C:B9:83:74:F1:98
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 01A0C39FF2FE5CC0D5C7DCBACC218FFF636E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 14A0
Signing time: Mon 21 Sep 2026 11:00:34 +0000
Manifest this update: Mon 21 Sep 2026 11:00:34 +0000
Manifest next update: Tue 22 Sep 2026 11:00:34 +0000
Files and hashes: 1: GPPevbImSvGjVqWAzYGvcpc3FOs.roa (hash: MHorAz/UCfb7aKgx7pKoBAkAFlLncJNyaH/wm4EHMOY=)
2: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: S5aKrjHAQ9YnuBH8xwdm5kZdZnpQ4+YmqOgPkGWkFVw=)
3: XD7uuC6NUKDza7PfKtc_jHz7EnA.roa (hash: RPYu/+kKueNaM8YfpMGx6Mxi+JGMI3A7i1eBXpiVPd4=)
4: ntt8oBWCvDCUpNDHjPuie_5MUck.roa (hash: Yy1s4qDW987rNxjvZEbp1rZR84GXQU0RB/faIrx/grE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:f2:fe:5c:c0:d5:c7:dc:ba:cc:21:8f:ff:63:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Sep 21 11:00:34 2026 GMT
Not After : Sep 22 11:00:34 2026 GMT
Subject: CN=f6ab093f315b0eaa14656684bde15cb98374f198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:84:fe:27:84:80:04:5c:78:64:96:d3:7e:
96:38:6e:c1:e5:4b:33:b6:f8:7f:a4:92:51:fa:f9:
1d:5a:f8:3f:fb:a7:ae:31:46:9d:5a:05:fd:cc:73:
b7:b5:53:e0:be:d4:98:39:63:13:8d:84:3a:76:c3:
d1:36:9e:89:aa:4d:e6:3d:e9:26:00:41:57:c8:1d:
1f:41:22:12:3e:cd:e6:36:8f:9e:9c:c6:55:22:a9:
44:13:36:13:62:f2:f3:4a:f9:06:00:70:a8:9a:37:
db:77:3b:dc:f6:84:87:fd:18:12:87:0c:88:c1:87:
ab:1d:3a:28:dc:4c:3c:9c:75:94:f7:eb:e8:f5:5c:
c8:ac:ad:4f:4b:42:73:63:91:c2:06:f9:ee:a0:04:
de:1f:91:8f:0e:f1:f9:12:04:ee:24:17:40:82:dd:
4d:d0:a5:1a:7e:b4:c7:ed:75:fb:55:6e:23:69:12:
ec:a2:f5:6b:6d:2b:6b:0c:cb:9a:d9:e3:a5:0d:1b:
86:2a:ec:02:ca:a9:33:6f:e8:df:1c:a0:4f:dd:e8:
fa:9a:89:ec:9b:b5:37:75:3d:ee:5f:ff:23:0c:4b:
12:1c:98:04:5b:8b:88:ae:cb:5f:cb:23:25:b9:2f:
8d:5c:08:ad:93:61:c0:66:63:1c:cd:f9:bf:90:d7:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AB:09:3F:31:5B:0E:AA:14:65:66:84:BD:E1:5C:B9:83:74:F1:98
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:63:87:a0:72:ff:3f:ad:7e:26:b9:32:b6:f3:28:a0:6c:4e:
08:c5:e9:77:7b:03:38:fb:3c:2c:c7:5b:eb:ec:9b:41:1a:c8:
ce:7b:51:5c:f9:0d:41:3a:28:82:3f:ca:6c:11:de:54:0e:da:
a4:d9:35:b3:2d:2a:cc:39:cd:90:e3:a6:22:5a:ad:a5:8b:b9:
62:fe:33:e7:f3:76:30:a6:3b:e7:d1:a5:46:f4:a8:65:2e:02:
09:cc:fc:d3:3c:5f:33:78:ef:4b:4f:62:85:18:6b:e2:e7:a1:
f2:47:d2:20:4f:aa:af:5c:7e:9f:3c:18:a8:97:e9:64:0a:e9:
5f:c7:ad:ff:79:98:69:c1:c2:57:c3:3f:89:28:d3:cd:c3:ac:
d4:e7:ad:4a:fd:4e:c2:d9:b6:3e:63:a7:04:36:1e:b3:ef:1c:
26:32:0e:78:32:63:6e:28:16:dd:a8:57:67:31:8e:24:64:7a:
1a:d4:98:ab:0c:5f:a7:43:f6:b8:c7:98:5e:b0:22:ca:61:e0:
f7:0e:34:20:5d:ca:15:2c:74:2f:d1:c6:e6:ba:37:0a:72:bd:
23:9e:a1:0c:17:98:c8:85:f9:af:de:1c:eb:28:02:cf:33:10:
7a:81:4f:01:de:1f:b9:0d:a5:95:b5:d1:41:9e:9e:8a:fc:48:
f9:24:41:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:50:33 2026 by rpki-client