Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: e8hPS+O3L2WRD4xi1+rMeneeQEvJjqP+z8y7znK/lAQ=
Subject key identifier: D3:7D:70:A3:B6:05:27:0C:31:41:7A:19:26:31:9D:1C:D3:58:14:35
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 01A0DCBBB84722B7D19E9A79948CB6CE8791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 14AD
Signing time: Sat 26 Sep 2026 08:01:24 +0000
Manifest this update: Sat 26 Sep 2026 08:01:24 +0000
Manifest next update: Sun 27 Sep 2026 08:01:24 +0000
Files and hashes: 1: GPPevbImSvGjVqWAzYGvcpc3FOs.roa (hash: MHorAz/UCfb7aKgx7pKoBAkAFlLncJNyaH/wm4EHMOY=)
2: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: hSLTOk+9QdQUfVe6nf9AvH8uKkyFRv7EuhyN5TZ9oOo=)
3: XD7uuC6NUKDza7PfKtc_jHz7EnA.roa (hash: RPYu/+kKueNaM8YfpMGx6Mxi+JGMI3A7i1eBXpiVPd4=)
4: ntt8oBWCvDCUpNDHjPuie_5MUck.roa (hash: Yy1s4qDW987rNxjvZEbp1rZR84GXQU0RB/faIrx/grE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:b8:47:22:b7:d1:9e:9a:79:94:8c:b6:ce:87:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Sep 26 08:01:24 2026 GMT
Not After : Sep 27 08:01:24 2026 GMT
Subject: CN=d37d70a3b605270c31417a1926319d1cd3581435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:7f:51:1c:4a:b1:90:9e:a8:c4:d0:a2:2c:
57:46:e8:a7:dd:a7:55:35:94:4b:7f:07:2f:5b:65:
ee:5f:eb:42:d2:da:8d:20:d9:9d:81:49:6f:93:b4:
5f:ad:9d:7d:0d:f7:63:ff:bc:27:43:3b:6f:9b:69:
be:59:8c:13:8b:37:df:4d:d6:43:84:7c:20:b1:d7:
8f:8e:8d:07:2f:2d:c4:f4:79:a7:be:d2:f5:85:3e:
66:9f:88:7d:3a:c0:e0:8a:43:74:77:f7:79:5f:c8:
57:ff:84:6e:04:bf:6d:79:36:0a:24:4b:41:c4:df:
2d:a7:0e:73:ca:aa:be:83:ef:bf:af:0f:ad:d0:21:
dc:8b:85:f3:96:6a:3f:20:50:81:de:37:ed:84:9c:
84:28:28:d5:3d:ed:e3:e4:ca:c1:7c:1a:b7:76:44:
9c:37:63:bc:af:3a:ed:a6:6a:cc:c1:ab:c2:13:b2:
24:52:81:bd:57:f6:06:9b:36:c7:bb:bb:02:38:0c:
e2:f6:26:6f:85:4e:79:aa:f7:79:4d:71:11:a6:7e:
ba:ac:d2:e2:1f:77:cb:8d:0b:c3:58:71:76:cf:6f:
4c:d2:a7:9f:5c:8b:e3:4b:bd:80:a5:27:d8:83:ee:
79:fd:f6:9b:47:c7:b1:c6:ad:44:d1:43:8e:34:00:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7D:70:A3:B6:05:27:0C:31:41:7A:19:26:31:9D:1C:D3:58:14:35
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7b:6a:b2:25:c2:34:c1:69:ef:06:d0:22:32:12:4d:dd:a6:
7b:8e:0d:52:a4:9f:2d:61:04:20:17:a2:6b:2e:d9:01:8c:83:
f5:73:d9:25:dd:86:3e:50:13:97:c5:db:d5:f3:79:08:20:b0:
fe:80:2a:8f:5d:c0:28:0d:3c:66:81:c0:ee:a6:7c:6f:97:58:
f6:1d:7d:ef:39:54:78:a4:31:c0:23:1a:00:a6:6d:9a:4c:4d:
37:8b:f1:47:d5:1c:f4:27:97:f9:b7:1d:54:b9:ba:d2:ca:e5:
d0:41:f9:78:37:38:b9:ed:43:2d:7e:e7:51:36:64:61:ea:ea:
23:62:51:43:d8:2d:27:69:83:f4:54:08:40:97:78:8d:62:c9:
f7:d0:d0:47:97:8f:06:71:b2:3b:e4:60:67:c4:8a:b2:b3:a0:
98:18:b9:49:89:63:f4:e5:8e:8f:d7:3d:1a:e1:5b:00:c7:bb:
3c:81:fd:79:20:88:25:08:5a:9b:50:92:2d:d0:6c:0c:23:25:
2f:a5:c7:25:62:01:da:df:ce:77:ed:84:e9:0e:37:10:ad:69:
6b:8e:e2:08:94:6e:3b:c3:5a:4d:67:4b:16:12:97:46:25:e3:
fb:0c:7b:c7:89:ee:02:75:8b:83:5b:b5:25:32:d5:94:a2:96:
f7:7b:f8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:42:21 2026 by rpki-client