Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier: JgzTzY3tR1nG50+ycBHbbG1Qn0cnjkCk82Ztze7fL1E=
Subject key identifier: 83:C8:20:87:B9:29:5C:23:7D:30:66:76:81:C1:D2:3B:1A:19:E3:55
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 019D2816EE59AF83B7348BC45FFE934D2738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number: 166D
Signing time: Thu 26 Mar 2026 03:01:24 +0000
Manifest this update: Thu 26 Mar 2026 03:01:24 +0000
Manifest next update: Fri 27 Mar 2026 03:01:24 +0000
Files and hashes: 1: L2VyPx5ZvpU5RN459OVpFdGEzTI.roa (hash: q4E7mZNnPKZTyFhGeFOu6dBopK+4PcrNRvByumhCm4I=)
2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: XnwPDfyiPK5OlnTcDf/5ZCldcjB3Y6PHtMIHaK+QT98=)
3: TJBNmpOs8INt5hscYvO24ZrUkg4.roa (hash: ccL8Nmo2+hfQcGN76XZ7Htt8PEnEJD9VPV3ept5h6/g=)
4: y-uuMFXf-Scx2MN6BDbVIftk3xk.roa (hash: yfvMu66uv7Lal8MVr9Vgy1IUkLDBtyoLNZxuu1dTKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ee:59:af:83:b7:34:8b:c4:5f:fe:93:4d:27:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Mar 26 03:01:24 2026 GMT
Not After : Mar 27 03:01:24 2026 GMT
Subject: CN=83c82087b9295c237d30667681c1d23b1a19e355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:96:3c:c5:6f:a7:06:66:5c:b5:17:61:3c:
9f:83:08:f1:8f:58:c1:a6:d2:e8:7c:31:2e:33:99:
ea:c6:fa:60:9c:60:7b:b2:e8:a7:6c:60:c5:9f:35:
7b:39:ca:7c:fb:60:e0:eb:97:48:67:4f:40:48:5a:
17:5c:cc:e4:e0:f8:59:60:10:3a:5f:e4:e6:4f:bf:
44:7e:f6:1c:13:bc:f9:40:58:18:15:22:13:e5:be:
5b:b4:29:c8:4e:6e:02:38:84:ff:31:c9:2a:9f:c9:
6e:b2:05:df:c5:26:4b:41:b4:0f:b6:de:32:5f:8f:
27:d9:9b:3c:17:7f:7c:5f:ef:c2:7a:30:bd:02:59:
97:58:e9:d7:19:d5:53:8e:1d:80:58:d1:dd:1f:52:
26:1b:4a:38:d0:19:2e:0a:a9:34:48:a6:cb:8c:78:
3c:93:0d:f5:38:f8:58:85:26:26:1e:07:a0:78:c8:
e1:d7:18:ea:76:6f:0f:26:8b:f7:7d:0a:59:9d:e2:
2f:47:c4:e7:36:d2:77:29:8b:04:9f:d1:ec:13:f4:
ba:f4:3b:d5:59:97:68:2c:eb:ce:4c:8a:83:4c:07:
e6:38:cf:2f:04:bb:28:0a:b3:3b:d2:03:34:48:20:
68:e2:72:28:ad:17:94:e5:ec:e2:81:a2:b8:46:33:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C8:20:87:B9:29:5C:23:7D:30:66:76:81:C1:D2:3B:1A:19:E3:55
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f3:9b:3a:21:a6:93:73:d8:a0:20:8f:07:f2:45:79:65:01:
68:80:a8:84:2b:a4:f7:11:bd:34:7d:19:6e:c6:5f:c0:dd:b1:
97:34:cb:4a:b1:22:4e:fe:2e:ed:27:3d:9a:55:b1:c2:7e:01:
ff:f9:b2:64:fd:bd:a5:6d:4e:2d:7c:3d:fa:85:63:cb:a7:02:
55:3a:88:10:37:c3:ad:54:d8:99:2a:55:16:82:0e:66:8d:c7:
15:b8:86:11:6e:3c:c3:96:68:49:f0:f0:17:9a:9b:18:9b:28:
61:31:6d:50:5c:4d:34:ba:25:92:81:6d:88:78:fe:a9:f9:68:
c5:5f:70:5a:9f:f9:da:c2:06:fb:c5:0c:0b:77:96:4d:43:68:
b7:bb:83:22:f0:90:52:5c:58:fb:40:a1:b7:ef:15:b7:09:6b:
22:39:c4:a2:a7:c4:8b:88:18:b0:53:db:cb:b4:f5:1c:89:87:
8c:be:50:b3:c6:9f:5c:02:9d:13:b5:06:a7:e2:ff:aa:c5:20:
0a:0a:55:c1:eb:75:e1:c0:0a:6d:2c:5e:cb:18:b0:ca:ec:06:
3d:a4:e2:57:bb:13:64:65:1d:bb:48:e0:f0:b0:0d:39:e9:90:
a7:19:ed:23:13:a3:74:34:50:39:97:ce:ea:fc:7e:a4:5f:50:
db:15:37:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:38:30 2026 by rpki-client