Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: K56i+YKW/T4cDVXdWVvCffC2aKR4pJl8CO9V5Z4XVVE=
Subject key identifier: 83:B6:33:59:61:84:C7:AF:6F:B0:A3:44:24:63:5D:58:6D:90:D5:01
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 01A105EE62651CB9891B8FAECF1813F16589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 15D1
Signing time: Sun 04 Oct 2026 08:01:11 +0000
Manifest this update: Sun 04 Oct 2026 08:01:11 +0000
Manifest next update: Mon 05 Oct 2026 08:01:11 +0000
Files and hashes: 1: 1-XNUwWKzbev3eBkOpcFm2xBkpoQ.roa (hash: /XJqAINdnXXDOWVdvq7kHAw4+acFhC/fD2KcJxKL5nQ=)
2: Bi5LXJXtXaqWu85feTd5MY6-MmU.roa (hash: j5lYG+Y4b77KtRu85Ljxo9pZvkjx9vw5hisZYWyAQ2I=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: Yf+zc3mbwVXisj2WOkOe0qVcs77thui69Tbnc3quAOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:62:65:1c:b9:89:1b:8f:ae:cf:18:13:f1:65:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Oct 4 08:01:11 2026 GMT
Not After : Oct 5 08:01:11 2026 GMT
Subject: CN=83b633596184c7af6fb0a34424635d586d90d501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:79:0f:e3:46:1e:e1:9a:67:76:f8:c5:37:
4b:a9:84:cc:80:cd:02:fc:fe:6e:76:85:b3:30:ec:
ba:dc:7a:ee:d3:bc:1d:50:3b:ec:e5:89:0e:a2:cd:
0b:15:7b:dc:45:e1:2d:1f:32:31:12:c2:a1:df:f9:
7e:27:d6:78:25:61:33:fa:47:70:cf:05:74:aa:10:
4d:04:a3:a6:2b:16:fe:7a:31:d4:13:91:ca:71:bb:
bb:c3:78:2f:5b:30:a2:84:34:6c:32:05:52:ff:b8:
c3:25:0a:6e:2c:96:72:05:20:37:d9:eb:10:21:00:
4b:9a:51:eb:13:4a:fc:5d:f0:b3:ff:f5:ab:10:27:
cc:21:42:6c:09:a1:54:ab:e1:88:9f:c5:fa:8f:be:
00:4c:2e:e2:69:b9:ea:e7:19:a3:51:13:c8:11:16:
16:c3:4e:50:f8:47:1b:a4:93:21:f2:6b:e1:72:33:
35:cd:54:22:6e:26:1e:35:19:47:c3:78:26:0f:48:
73:dd:66:30:28:b9:f3:4f:5f:1d:22:f8:20:a8:d8:
75:98:e1:1e:d8:3c:68:0b:c4:d1:91:85:71:4d:f5:
cf:df:95:18:b7:88:f3:23:8b:78:5c:1c:08:eb:a5:
d1:1a:55:ec:11:fc:ce:aa:48:e4:1a:13:40:8f:bc:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B6:33:59:61:84:C7:AF:6F:B0:A3:44:24:63:5D:58:6D:90:D5:01
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b8:23:ab:36:49:54:56:fe:f9:1d:5a:b3:fe:00:3e:85:0d:
1b:5f:7b:01:f6:d0:f9:23:af:51:c7:af:90:90:52:ab:ba:aa:
c6:58:3e:a2:30:b6:cf:4e:61:64:49:29:bd:3e:5c:7c:df:35:
ac:69:48:39:64:9d:26:77:77:77:78:7e:c1:2f:8e:d9:3b:27:
ae:e3:75:04:b4:85:4d:0d:12:58:6f:b4:80:f9:71:00:cc:95:
da:40:1d:2f:8c:41:b3:82:35:2f:5a:22:96:3a:9e:ad:61:45:
18:ed:a2:40:c0:26:85:a3:92:cc:c8:8c:26:84:88:c2:3b:e9:
15:7f:0a:10:c4:05:c1:30:22:22:41:96:29:25:4f:a2:ee:11:
0e:62:00:58:20:11:f4:a9:cb:55:49:d8:9e:aa:f4:07:1b:e5:
64:c0:1c:26:84:e6:51:90:93:2c:62:7e:81:00:7e:e6:69:7c:
af:d7:23:3f:ac:3a:b6:1a:29:ce:d3:61:99:49:8c:94:fe:65:
40:2d:39:a5:a4:ed:67:fd:c0:70:4c:c2:24:ba:b4:73:1f:ff:
d0:e4:85:7b:86:d6:11:63:d9:1b:20:a0:46:47:f7:ac:9e:a8:
10:d2:c4:89:74:d6:8c:fa:54:4a:58:7e:fa:45:54:21:47:5b:
38:92:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:33:13 2026 by rpki-client