Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: susyqGv9AC+wFO1zT0ppm8N4gt+F4/GELKbp0kB/yjc=
Subject key identifier: 83:9D:89:58:FA:34:B0:A6:64:EA:88:E7:90:EB:91:55:13:35:39:CB
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 019CAA2190E974A41A57D750B1FF67FA369D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 16:00:52 +0000
Manifest this update: Sun 01 Mar 2026 16:00:52 +0000
Manifest next update: Mon 02 Mar 2026 16:00:52 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: 1gWhzdrgTi699cpuPr6ye65o6yPJ7dPzFNPC4PROJaI=)
2: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (hash: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:90:e9:74:a4:1a:57:d7:50:b1:ff:67:fa:36:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Mar 1 16:00:52 2026 GMT
Not After : Mar 2 16:00:52 2026 GMT
Subject: CN=839d8958fa34b0a664ea88e790eb9155133539cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:a5:b4:3c:f8:87:e5:2d:94:cb:d8:17:e1:
44:97:ea:93:06:22:86:8e:22:aa:5a:f5:a7:2b:05:
cf:26:db:fb:15:8e:72:53:7b:2c:9a:54:b4:2b:3c:
d0:90:f9:20:24:51:d8:f6:f9:bc:1f:b5:8b:a9:5b:
67:87:7e:b6:e2:15:42:93:47:9d:b1:8d:f3:93:3f:
85:a8:9a:0c:57:44:69:26:d5:fd:52:93:a5:9c:89:
9d:92:1c:19:df:90:99:8b:ec:01:6a:fa:ec:6f:55:
6a:8a:f7:16:8d:cc:35:74:68:5f:38:01:c7:92:43:
3b:ab:0e:0b:46:96:e0:2a:74:a5:f8:2a:e0:48:13:
bf:6b:14:e9:f5:58:75:27:78:5c:fc:b3:36:e8:6a:
dc:c3:ed:80:d9:99:8f:74:f4:51:19:ee:7a:55:aa:
18:59:c8:a1:07:67:0b:3c:d2:8b:a9:d4:e6:1d:0f:
e6:0e:27:54:81:ff:47:53:20:85:cf:dc:3c:39:77:
de:6c:f5:ec:fc:88:fb:19:b8:74:28:95:89:6d:14:
15:71:40:da:4d:63:51:94:29:42:10:1f:e5:51:3c:
de:c7:21:c6:28:12:7a:a3:80:8d:36:8e:4e:85:62:
0b:8b:00:2c:d1:f8:9e:c7:af:fb:1a:72:a9:bb:2f:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9D:89:58:FA:34:B0:A6:64:EA:88:E7:90:EB:91:55:13:35:39:CB
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c2:3d:06:a5:50:59:22:c9:7f:8e:d1:04:2c:5a:32:64:1e:
0e:ab:4e:46:de:ba:11:93:77:e8:36:54:39:60:5b:fb:bf:2d:
1c:21:18:a6:4a:c2:b8:13:c2:01:7b:92:32:d5:04:5c:cb:77:
11:ff:8a:ce:fc:9d:6d:33:ec:c3:03:7a:c1:f1:0c:6a:ae:4c:
80:77:a5:e7:20:41:14:f7:88:47:eb:89:a1:a5:c6:13:da:53:
a7:eb:28:a8:43:dc:04:10:e5:06:b3:c7:a0:23:04:df:25:05:
72:5a:79:fe:75:a5:9a:e1:66:02:ab:ff:90:a3:b0:8b:88:78:
4f:24:e0:b7:45:76:a2:4f:b5:32:7f:fd:59:41:f3:f5:cf:3e:
91:12:64:c4:68:61:f8:86:d7:7c:ad:76:29:1d:82:ce:43:df:
e6:18:4a:bc:bf:69:63:78:74:86:ea:59:6b:7f:91:aa:e7:2c:
97:74:10:0b:df:5c:2c:a7:19:91:90:fb:e3:ed:45:b0:fc:0c:
57:8d:f0:ea:b0:d2:8a:ba:c2:9f:96:67:26:73:45:9f:11:b0:
fe:ad:06:cf:07:1e:ca:21:02:89:a9:b9:49:6c:cb:a4:75:a4:
b9:a1:98:55:d5:e7:61:a6:db:db:4b:15:de:05:2e:e4:ec:53:
18:a1:c6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:28 2026 by rpki-client