Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: LCcU66pES7H/VZrkzc8ZKCD1bSWghKFj6lp7dYZk9+w=
Subject key identifier: E3:1D:E3:B9:99:0F:4A:86:F8:DA:21:6F:16:42:02:51:6A:E5:A9:B1
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 01A0BDD4EFDBD3EA35CF54E5498AD0AB02CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 1A65
Signing time: Sun 20 Sep 2026 08:00:43 +0000
Manifest this update: Sun 20 Sep 2026 08:00:43 +0000
Manifest next update: Mon 21 Sep 2026 08:00:43 +0000
Files and hashes: 1: NyFyTToHrV_iLH9GIOJWP_TIsh4.roa (hash: qqHJlBF+PNPUtrTddnKLqGJ5Fxf9M5uhm+M+K7k/8g4=)
2: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: ad/DMuvMyANG5lQKs2xQaa9qW2ytBLutnC+sadpTaUk=)
3: TDJw8c2ugNuZzTvDh-dhjlcAHEQ.roa (hash: i8ViOgSKUgk23gc5KboIyTVKvb8lTiASE07Nhp1UbTE=)
4: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (hash: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:ef:db:d3:ea:35:cf:54:e5:49:8a:d0:ab:02:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Sep 20 08:00:43 2026 GMT
Not After : Sep 21 08:00:43 2026 GMT
Subject: CN=e31de3b9990f4a86f8da216f164202516ae5a9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:7f:94:7f:b1:c2:20:14:23:00:66:4f:8b:
a0:7d:a3:7f:56:6f:4b:ce:de:b1:04:fd:60:47:b2:
5f:bf:29:47:1a:79:d2:14:c5:9c:37:e7:6d:ae:d7:
e3:c2:78:2e:93:25:24:fd:43:8e:6f:63:48:28:8e:
14:e4:27:b6:dc:62:b9:3b:3d:26:13:ca:32:6f:d0:
d3:d0:9e:80:72:82:52:c1:e9:6d:9a:22:93:78:ac:
36:24:dc:9c:34:0c:65:95:0d:c6:f4:9b:15:2e:a0:
a3:1c:3f:da:a7:8a:42:ab:1e:49:9f:b7:be:b7:90:
e9:0c:b4:86:03:a1:ee:1f:ca:22:8a:19:e1:15:cb:
6c:66:05:7d:0c:af:2e:a8:ed:c2:97:f5:1c:37:82:
2b:6a:cf:24:b1:37:51:2a:7f:e4:0a:f5:76:8c:ab:
f1:51:16:9d:74:26:a2:49:19:5c:a6:ef:c2:ae:08:
79:f5:9f:50:4c:3c:d3:9b:d8:9b:53:ff:60:bb:e8:
5e:da:b4:c6:35:53:1a:30:3e:b6:f1:b0:7c:56:91:
3c:e1:40:c8:87:be:24:6d:e1:5f:27:2e:58:0b:3d:
7f:b5:7f:6e:ac:d7:83:a3:b7:9f:66:3f:04:ec:bb:
f6:1d:56:dd:65:dc:50:8e:58:7c:c8:09:2d:84:b9:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1D:E3:B9:99:0F:4A:86:F8:DA:21:6F:16:42:02:51:6A:E5:A9:B1
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c2:ce:5c:34:82:2e:c9:c8:9a:25:f0:98:c5:69:64:64:1d:
b7:21:7e:bf:bd:1d:13:e3:ed:3f:8a:8d:31:37:33:e6:f3:54:
87:f2:46:b7:96:f3:40:cf:36:f0:bc:c8:28:c6:a5:38:90:ad:
15:06:17:78:85:58:43:b8:b8:a3:e7:9f:f4:08:47:d1:bc:8a:
14:11:52:48:2b:f6:43:b1:c2:a0:44:8a:9e:7c:55:02:2b:53:
50:07:7e:81:3d:b1:f6:d1:c5:b4:c6:27:3c:bb:54:eb:9d:31:
82:b3:ca:7e:90:ce:ae:c8:19:f8:ee:b9:8f:e4:7e:ff:f1:a3:
fd:a6:54:88:e1:cc:62:21:d6:39:5a:a2:60:dc:4c:36:19:62:
e9:6e:d1:5f:91:79:22:2d:92:78:4d:7f:b5:5d:b5:b9:12:e3:
3c:a3:5d:c7:30:27:02:26:ac:94:f6:a7:27:73:a4:dc:e9:48:
f7:94:0f:95:fe:13:69:09:58:69:7d:62:9f:e1:a0:19:05:4e:
87:02:73:2a:52:81:a0:47:d4:dc:84:52:92:aa:7b:10:5d:80:
f6:0f:f3:76:54:8d:c0:1f:37:78:bd:79:2f:3c:82:0e:92:96:
d0:2f:6e:2b:a1:37:1e:f8:ab:d1:c7:20:a5:bb:c2:8d:7f:4e:
a9:9f:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:33:48 2026 by rpki-client