Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: NwNwvwxnZvyEb7ZIsV2eUzgobiLDSqkEcjFftvF11Ik=
Subject key identifier: 66:96:79:67:A7:27:E2:08:07:C8:F3:5B:02:C8:8F:20:0E:4D:97:B2
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 019F9324856E670AD7D6228849D4B8FFDF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 1511
Signing time: Fri 24 Jul 2026 08:01:11 +0000
Manifest this update: Fri 24 Jul 2026 08:01:11 +0000
Manifest next update: Sat 25 Jul 2026 08:01:11 +0000
Files and hashes: 1: 1-XNUwWKzbev3eBkOpcFm2xBkpoQ.roa (hash: /XJqAINdnXXDOWVdvq7kHAw4+acFhC/fD2KcJxKL5nQ=)
2: Bi5LXJXtXaqWu85feTd5MY6-MmU.roa (hash: j5lYG+Y4b77KtRu85Ljxo9pZvkjx9vw5hisZYWyAQ2I=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: /Av69A2qRNQkyicQPJpUY6OTmY660YRpLZLVjXyYx6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:85:6e:67:0a:d7:d6:22:88:49:d4:b8:ff:df:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Jul 24 08:01:11 2026 GMT
Not After : Jul 25 08:01:11 2026 GMT
Subject: CN=66967967a727e20807c8f35b02c88f200e4d97b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:61:0f:08:07:74:d7:b6:9f:55:1f:3e:eb:
bc:38:aa:bd:8f:c3:14:59:f8:d4:33:1c:0d:d1:7c:
17:53:47:ad:da:b7:d7:50:ee:56:aa:09:d0:81:38:
3c:37:6e:68:bd:29:7f:83:b2:58:aa:95:77:06:9b:
88:45:ca:7d:61:47:ef:df:64:15:dd:1e:54:13:f8:
f7:1f:40:7b:24:26:3b:11:fc:1c:36:27:eb:df:58:
f4:d5:1f:29:10:8c:0f:63:e4:bf:ef:07:c3:19:46:
9f:28:33:d6:20:d2:cb:6d:ee:fb:bd:55:e5:17:5b:
14:d3:63:92:4b:63:08:6b:95:cd:56:7e:c9:bb:9d:
68:1b:ec:d9:c5:40:75:73:cf:5b:9d:3a:03:40:59:
a7:19:44:48:e9:a8:26:13:d9:c4:00:f6:97:bd:b4:
98:8c:cb:e6:6f:1b:86:7e:f4:8d:b9:42:1c:be:95:
2d:22:4c:cb:99:5f:c6:84:21:3b:d0:99:34:a8:dd:
73:f4:75:eb:ee:aa:cd:5c:e5:c6:5f:ac:e8:77:3c:
60:ea:d3:d1:ae:03:72:69:6f:5b:6c:a9:23:7f:6d:
77:3f:95:84:8c:26:01:71:67:f2:d6:ca:f8:40:63:
3b:69:27:d0:16:39:9f:2e:4e:d8:c8:ad:15:f8:b1:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:79:67:A7:27:E2:08:07:C8:F3:5B:02:C8:8F:20:0E:4D:97:B2
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e3:15:8e:a7:89:24:7a:d5:bd:32:07:91:23:1e:c0:6d:8f:
98:2a:9f:da:ca:3f:19:b8:87:35:40:db:80:65:5e:c7:c5:9c:
20:71:9d:34:80:83:59:ff:17:36:de:26:40:e2:40:94:ec:8b:
22:8a:c6:57:63:fb:43:ec:c9:de:43:98:51:87:e8:f5:db:db:
52:67:5a:a6:e6:49:4d:19:aa:10:87:2e:fd:2a:c9:82:ac:4c:
4d:65:5d:69:b0:9f:bf:f3:05:98:ea:74:9b:f1:9f:1a:5e:a4:
33:66:14:eb:64:cb:ca:d5:ae:15:87:57:39:16:26:4e:6d:d5:
08:9a:49:fa:d1:40:c5:d9:00:84:2b:d1:e8:26:fe:35:62:74:
5a:34:73:75:69:c0:0d:cf:2c:79:79:c1:03:0b:39:15:42:fc:
4f:55:41:db:c6:8f:4b:4c:4b:77:ac:91:be:bf:e4:f0:2b:b1:
d5:55:cf:02:4c:8d:64:1f:81:ef:a1:dc:33:c4:b2:bb:d7:51:
f3:5d:a3:f2:ea:bb:93:7a:62:d4:72:37:69:a2:e6:8a:a9:7b:
87:e4:41:81:2d:66:94:91:d5:41:72:2f:6d:28:f6:5f:32:af:
dd:c9:19:ba:ea:53:15:00:4f:a5:d3:25:32:13:a4:03:60:15:
86:07:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:04:53 2026 by rpki-client