Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: yNOmM43tSI+MYkIENzVbgNn6gLRX1KqR12kac+209W4=
Subject key identifier: 76:E8:F9:2E:B2:3F:EC:F5:06:67:72:54:68:8F:0B:73:77:AA:DF:13
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 019FAC3F5D84BC5B03FF5300B868BFAA0108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 151E
Signing time: Wed 29 Jul 2026 05:01:01 +0000
Manifest this update: Wed 29 Jul 2026 05:01:01 +0000
Manifest next update: Thu 30 Jul 2026 05:01:01 +0000
Files and hashes: 1: 1-XNUwWKzbev3eBkOpcFm2xBkpoQ.roa (hash: /XJqAINdnXXDOWVdvq7kHAw4+acFhC/fD2KcJxKL5nQ=)
2: Bi5LXJXtXaqWu85feTd5MY6-MmU.roa (hash: j5lYG+Y4b77KtRu85Ljxo9pZvkjx9vw5hisZYWyAQ2I=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: yR1vkuNxyuMmnU+NBhxfyj0oBktmqCu89kjkVsjUF9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:5d:84:bc:5b:03:ff:53:00:b8:68:bf:aa:01:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Jul 29 05:01:01 2026 GMT
Not After : Jul 30 05:01:01 2026 GMT
Subject: CN=76e8f92eb23fecf506677254688f0b7377aadf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:71:3c:28:13:b4:d6:84:c5:a8:2a:2b:88:
48:16:44:f5:07:fe:db:ad:ce:03:46:d2:b4:e0:17:
49:6b:71:cc:c6:17:44:70:2d:59:3a:67:cb:fe:a3:
ef:98:27:84:5d:2c:51:c8:a8:79:57:05:0a:2a:8f:
5a:22:03:cd:6d:f7:53:e0:17:70:98:5b:e2:0f:47:
d9:bd:4b:d7:ba:96:1c:52:84:b1:4a:9f:26:c2:dd:
5f:be:cf:e8:73:57:30:eb:fe:1a:6b:7a:7b:b2:7a:
0e:ac:ec:a2:89:a3:f0:00:0e:8c:71:e7:36:f5:2c:
50:01:63:3e:dc:54:01:3d:22:e0:6c:d8:49:d4:95:
dc:bd:98:cf:2e:3b:42:1a:7b:b3:42:23:02:8a:1e:
72:b2:d7:68:d3:2f:38:d8:4a:7f:9b:a7:b2:00:de:
84:0b:d6:48:48:61:ac:d8:46:49:7e:f3:be:0e:eb:
8c:26:41:46:04:50:fb:7e:df:4f:51:ed:af:b5:92:
55:c9:3d:d1:26:f3:3f:d0:cf:6c:d8:23:c1:a0:41:
5b:f6:a0:98:7d:f0:5b:eb:cc:5a:8d:19:ce:2a:97:
eb:b7:9c:06:0d:a4:19:66:15:7e:98:d9:ef:34:05:
17:7d:55:e1:78:a3:18:9c:fa:33:71:95:6d:43:aa:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E8:F9:2E:B2:3F:EC:F5:06:67:72:54:68:8F:0B:73:77:AA:DF:13
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6d:81:b5:d8:0c:f5:8a:c7:21:7a:6a:31:1f:05:e5:ea:48:
6d:72:88:13:02:dc:20:04:b6:0e:cf:0a:f7:2c:b9:ea:15:92:
40:01:8b:4e:a5:f7:f0:09:d5:d0:dd:41:a8:a8:50:ea:29:a4:
8f:d5:4a:92:9c:f8:bf:2c:74:bd:7e:67:d3:ec:25:11:87:37:
ef:64:ab:f7:0f:a1:78:1a:67:11:ca:44:5b:b7:2b:99:ea:cf:
74:3b:07:d0:b9:17:be:d4:fa:09:2a:6a:af:bb:a0:23:9d:b0:
4d:14:97:21:86:89:26:cd:19:aa:57:25:a6:80:33:14:a6:10:
06:ba:1d:cc:fa:fb:d8:54:35:fd:36:5a:d3:e9:af:1e:06:cb:
58:40:86:37:9d:28:07:97:61:3d:9d:a5:ea:e4:4d:4d:f9:2e:
6b:3c:85:26:cf:72:f5:c1:29:18:38:41:82:13:f0:01:88:67:
c1:15:55:57:77:17:5b:b4:31:8a:c9:01:a5:13:03:e6:7d:42:
76:72:50:44:95:d2:3d:81:fc:52:fb:bb:8f:26:45:93:4d:09:
1c:12:b3:c9:0a:1e:0a:fc:df:8a:f9:7f:4f:cb:ae:cf:44:42:
eb:0d:de:60:fc:4e:e8:bb:bf:dd:c2:8e:b8:67:3d:3f:d2:75:
77:be:cb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:49 2026 by rpki-client