Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: roJq2SrLsYbjK9pDse+orxPpT6mL+G5VQR6gp+RFODk=
Subject key identifier: 2B:2F:87:24:9B:D4:B4:73:5C:A3:36:3F:01:14:D3:55:C2:BC:AC:71
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 019D2928E3D1E76C52733F342D0B8ACFDA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 13D1
Signing time: Thu 26 Mar 2026 08:00:38 +0000
Manifest this update: Thu 26 Mar 2026 08:00:38 +0000
Manifest next update: Fri 27 Mar 2026 08:00:38 +0000
Files and hashes: 1: 1-XNUwWKzbev3eBkOpcFm2xBkpoQ.roa (hash: /XJqAINdnXXDOWVdvq7kHAw4+acFhC/fD2KcJxKL5nQ=)
2: Bi5LXJXtXaqWu85feTd5MY6-MmU.roa (hash: j5lYG+Y4b77KtRu85Ljxo9pZvkjx9vw5hisZYWyAQ2I=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: x66vvUeckvrWNGdOPfZtgeovSI5Juc/bzQEw7+bmtTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:e3:d1:e7:6c:52:73:3f:34:2d:0b:8a:cf:da:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Mar 26 08:00:38 2026 GMT
Not After : Mar 27 08:00:38 2026 GMT
Subject: CN=2b2f87249bd4b4735ca3363f0114d355c2bcac71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:93:9c:1b:0f:42:f3:a6:c6:ea:79:ff:0b:
cd:4e:61:44:45:1c:61:f7:50:81:28:76:25:9a:8d:
28:e8:62:97:88:6b:6a:45:c1:7d:96:f3:1a:98:00:
6a:fe:ea:99:48:e1:6d:e0:99:ea:e3:f2:2c:e2:06:
df:d5:07:6b:b2:ed:5a:89:cd:b1:a9:04:46:b4:68:
4c:06:ef:e7:61:2e:39:22:89:79:c1:f2:ad:4f:bc:
29:7f:c0:42:e9:fc:91:1a:a0:f5:59:ba:e3:9b:4e:
e9:80:a8:df:1b:3e:c3:e0:db:50:5e:d3:51:b8:bd:
41:f2:e8:0b:bf:78:40:e8:72:bc:b1:0e:cf:af:67:
92:48:a9:d0:2b:f1:68:7d:dc:1c:5b:f8:28:fa:85:
0d:86:de:44:e6:a9:29:a1:5f:e1:3c:3c:90:d3:29:
48:47:85:97:1d:a1:77:ca:f7:a9:08:c4:d5:6f:f5:
9f:cf:e6:d6:11:df:ea:3b:7e:55:df:31:2c:78:d7:
13:de:5e:c3:ae:c8:dc:77:9c:ef:d3:c1:b7:87:35:
8c:16:a2:2f:20:75:5d:61:c4:02:40:40:df:dd:a8:
a2:3e:13:a3:5b:e1:f8:67:7b:1a:14:e7:13:97:ab:
ee:09:0c:6f:38:b2:56:71:96:26:95:0f:cd:1e:e5:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2F:87:24:9B:D4:B4:73:5C:A3:36:3F:01:14:D3:55:C2:BC:AC:71
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fc:2c:c1:3a:9d:db:a2:14:6a:0f:c0:8d:47:51:61:ed:70:
06:d1:2c:1e:85:d4:a7:b2:b9:d1:ff:00:68:6b:92:e1:6d:a7:
a0:8e:91:e8:3c:76:0e:0c:1a:8c:a2:26:60:b0:01:02:e4:67:
b9:1d:76:80:7e:76:d9:47:da:60:03:2d:d8:10:da:73:e2:58:
a2:71:6f:a4:f2:54:d2:93:b9:87:45:97:72:a6:3e:a8:e5:17:
fb:62:2c:f0:6c:c3:c4:74:0e:e9:06:80:b0:59:9b:48:26:0c:
ac:64:a7:d9:4f:49:22:a2:43:f7:84:6b:06:f2:ca:d6:fd:c4:
b3:ef:25:d5:2c:25:7f:00:d4:42:2a:97:af:55:ea:51:3e:a8:
eb:78:ac:21:26:50:eb:5c:09:49:7b:2e:83:76:b6:00:36:02:
88:a2:c2:82:71:1b:55:48:86:dc:78:df:29:e7:b4:b6:76:f7:
e8:d8:d2:48:f3:01:7a:c3:0f:65:2c:73:fc:5f:45:bc:04:7e:
36:87:41:fb:62:d0:5d:a2:a0:d5:48:3f:ab:20:71:a6:4e:18:
6a:e6:38:33:b7:40:70:b1:43:4c:81:9c:d1:61:0b:b7:59:b3:
1b:16:41:e1:ed:9a:2d:74:99:52:9a:1e:04:57:fb:ee:81:9f:
87:62:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:04 2026 by rpki-client