
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: qOU2QbEoWeeAk7x+YCuesQ1Ur60VgiimPZzhwdGc/+k=
Subject key identifier: F9:84:9B:72:9F:3F:04:0C:FB:FC:43:15:92:05:E0:23:12:4E:ED:DF
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 019F90909822F4C1980A4148E53A458C3F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 1401
Signing time: Thu 23 Jul 2026 20:00:22 +0000
Manifest this update: Thu 23 Jul 2026 20:00:22 +0000
Manifest next update: Fri 24 Jul 2026 20:00:22 +0000
Files and hashes: 1: GPPevbImSvGjVqWAzYGvcpc3FOs.roa (hash: MHorAz/UCfb7aKgx7pKoBAkAFlLncJNyaH/wm4EHMOY=)
2: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: NszEtHhjk0mwTv4Z3gTEG2vgNfkxt5iLDqRlTPvr37g=)
3: XD7uuC6NUKDza7PfKtc_jHz7EnA.roa (hash: RPYu/+kKueNaM8YfpMGx6Mxi+JGMI3A7i1eBXpiVPd4=)
4: ntt8oBWCvDCUpNDHjPuie_5MUck.roa (hash: Yy1s4qDW987rNxjvZEbp1rZR84GXQU0RB/faIrx/grE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:98:22:f4:c1:98:0a:41:48:e5:3a:45:8c:3f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Jul 23 20:00:22 2026 GMT
Not After : Jul 24 20:00:22 2026 GMT
Subject: CN=f9849b729f3f040cfbfc43159205e023124eeddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:ba:f9:da:66:8f:75:71:8f:75:fb:b1:e1:
29:18:c0:4c:cd:1b:76:92:05:25:a1:58:0e:52:b1:
ac:b1:75:d5:f3:97:8d:56:6d:ce:80:1f:5e:6c:49:
38:3b:a6:1f:17:36:e5:e8:b3:22:8a:36:f4:51:69:
5d:a6:c6:51:26:5c:4a:30:e5:a1:9f:c2:e3:d8:47:
f5:ec:80:ec:cd:af:d0:68:e5:4b:b9:66:2b:58:15:
2f:68:fb:a5:30:e0:c2:a5:64:23:5f:6d:dc:b1:94:
ff:76:2c:50:2e:de:0b:0a:49:e5:e2:b1:20:f9:0d:
b3:48:3f:2f:b9:8e:bf:26:d1:cb:aa:9d:d1:67:f0:
14:cd:5d:0b:1b:66:8e:68:df:12:b1:bb:56:5c:fd:
15:c3:86:cc:21:d5:1d:df:9e:6e:4d:c7:fc:8f:00:
2b:b3:98:d6:47:91:09:bd:4b:18:8d:92:73:eb:25:
1a:b2:ed:d1:80:98:b2:a1:81:fe:c2:7c:a1:d2:d8:
92:17:20:df:4f:c8:c2:2b:60:31:a0:59:86:66:6c:
83:7c:5a:02:61:71:90:eb:9c:12:f9:59:0c:02:73:
3a:f9:06:5e:cb:d9:bc:86:51:86:4f:80:12:82:d3:
1e:bc:fd:bb:85:0b:e8:91:56:9a:d0:87:92:a7:4b:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:84:9B:72:9F:3F:04:0C:FB:FC:43:15:92:05:E0:23:12:4E:ED:DF
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:15:a6:ae:28:55:34:06:93:10:81:6f:93:55:0a:39:99:3f:
b2:d9:03:b2:85:95:7f:a5:4d:c2:34:26:c4:48:8e:fe:9e:92:
c2:fa:3d:71:b8:40:98:28:3f:c9:b8:1b:52:e2:f9:a2:13:40:
4c:5e:be:3d:ec:e1:4a:be:53:69:c4:0f:7e:82:b3:f2:26:43:
91:d2:e0:99:6f:55:10:aa:ee:ab:04:17:a7:59:e1:de:22:b5:
56:b6:4d:43:b1:f4:f3:fc:d3:a9:74:6a:8d:9b:36:04:76:9d:
fb:1c:5e:a3:85:ae:71:ed:c3:57:b0:33:02:b0:ab:1e:a3:a9:
81:11:ab:e9:5d:5c:de:36:17:c9:b1:9d:b3:6d:b0:a1:fc:a2:
5e:30:97:7f:6d:05:6a:c3:eb:b5:35:d6:c7:08:b4:38:09:25:
87:8e:76:a7:90:1a:96:c4:43:d0:0e:71:6b:0a:1f:b7:71:b8:
24:28:99:5c:20:a9:32:d1:e4:97:3a:13:3b:57:27:5e:e2:d8:
98:a0:b6:4e:cb:c1:11:89:ad:90:fc:d4:13:de:d1:ba:d8:63:
d1:3e:1f:b0:b1:07:e7:29:b2:f2:a9:6b:76:65:97:b1:de:e9:
0e:47:3c:29:d7:e7:06:d9:1e:14:8e:70:a5:1b:ed:5a:27:87:
20:08:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:21 2026 by rpki-client