Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: kcEicaSfG0pm+gViY2ArYVzGmUMEWYhEmk8cYb/tqUA=
Subject key identifier: 7A:16:83:0C:19:6B:5C:65:8C:EB:09:16:20:5A:8E:BF:CE:C0:7E:2B
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 01A0E8F6B0F46ED392CB9EA02FA94E6F0101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 15C2
Signing time: Mon 28 Sep 2026 17:01:16 +0000
Manifest this update: Mon 28 Sep 2026 17:01:16 +0000
Manifest next update: Tue 29 Sep 2026 17:01:16 +0000
Files and hashes: 1: 1-XNUwWKzbev3eBkOpcFm2xBkpoQ.roa (hash: /XJqAINdnXXDOWVdvq7kHAw4+acFhC/fD2KcJxKL5nQ=)
2: Bi5LXJXtXaqWu85feTd5MY6-MmU.roa (hash: j5lYG+Y4b77KtRu85Ljxo9pZvkjx9vw5hisZYWyAQ2I=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: UBUGRYccrL7+VwfgIQIJRx/epagrfdld8bGrAGMnREY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:b0:f4:6e:d3:92:cb:9e:a0:2f:a9:4e:6f:01:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Sep 28 17:01:16 2026 GMT
Not After : Sep 29 17:01:16 2026 GMT
Subject: CN=7a16830c196b5c658ceb0916205a8ebfcec07e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b7:66:ba:4d:6f:3d:23:54:75:28:59:05:ac:
43:0d:91:ba:e1:80:f7:4c:a3:e6:5f:62:76:20:f3:
0c:02:46:9e:13:65:fa:52:ae:92:ce:cd:33:3e:25:
7b:88:05:c2:96:e6:6a:0f:17:a0:d6:b1:2f:42:d3:
87:07:3e:57:4c:ff:fb:c4:be:96:2a:6a:21:33:a9:
39:10:3a:70:cb:ae:75:30:d3:83:de:66:d0:03:fd:
48:a2:d4:1c:5c:f8:e7:a2:a6:df:91:96:ea:42:90:
f6:4f:d4:8b:70:d8:e0:97:c2:fd:30:e3:bc:d3:aa:
db:06:89:45:d0:90:b8:34:16:cb:9d:7f:3e:89:c9:
1c:14:6d:1d:8f:e2:f5:8a:2f:33:42:65:9c:48:c9:
de:97:52:d5:a7:f7:fa:8c:35:c3:a1:af:ed:63:c9:
5b:34:c7:0a:45:d5:6e:1f:a5:0f:2d:31:80:d9:c2:
ff:d7:7c:9a:62:bb:11:43:aa:2e:1a:a9:62:32:a5:
3c:33:21:6d:0c:d5:ee:24:3e:ce:ac:7a:44:42:d3:
ef:be:79:73:cc:70:7e:2b:4b:2e:c7:22:26:2a:de:
9b:40:35:9d:45:85:69:f7:3e:02:0a:4f:e9:21:53:
0c:8b:e4:fe:40:b0:cc:de:f2:f1:15:16:07:e1:0f:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:16:83:0C:19:6B:5C:65:8C:EB:09:16:20:5A:8E:BF:CE:C0:7E:2B
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d1:bb:e3:0e:45:55:7e:dd:37:0f:44:f3:c2:15:ab:a8:31:
aa:62:53:9a:c6:d2:41:fa:78:7b:70:12:4e:50:f1:0e:4a:2d:
a5:33:51:f5:36:96:3e:3e:9a:99:cf:dc:ff:bc:34:86:93:2a:
40:93:21:a0:5d:43:dd:1e:7e:fe:60:b4:99:61:9c:8d:c1:83:
fb:c9:a7:3d:63:fa:13:14:45:de:40:d3:99:f0:22:3e:00:0b:
34:ce:87:14:4c:18:7d:b3:32:c0:27:01:7c:e7:7b:57:6d:36:
0f:f5:aa:43:3f:45:06:c1:99:5f:2e:cd:83:0c:42:7b:3b:4d:
58:dd:35:8e:05:f0:3a:2a:c5:99:dc:d1:32:c8:13:48:74:bc:
56:a7:d1:37:79:ca:af:71:cc:e4:08:c6:fd:d4:0e:79:de:e2:
94:7e:28:8a:b7:44:0e:53:b6:69:bc:f4:61:0c:51:3c:e9:28:
9a:c5:09:12:e4:24:22:a8:d7:8c:60:9d:ad:30:38:27:e0:83:
92:d4:82:3a:05:87:f8:4b:1c:e5:fe:61:0b:ef:4a:bc:9e:95:
68:5d:13:66:ba:74:ab:f5:14:99:17:44:5c:83:98:a3:97:cc:
3a:15:03:bc:9b:98:f0:cb:c4:e4:29:bc:6b:d7:b2:55:63:88:
a7:b1:4e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:34:53 2026 by rpki-client