Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: gFllOExjx3rxtjpoOFSyKGiXTnS8peb+xzbT3SYTmz0=
Subject key identifier: 0A:12:E9:0E:C0:D6:6E:8C:FC:75:76:4A:02:BF:3E:F4:B6:65:E2:FB
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 019FAB99FED54CB043410D4D3615070606B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 02:00:23 +0000
Manifest this update: Wed 29 Jul 2026 02:00:23 +0000
Manifest next update: Thu 30 Jul 2026 02:00:23 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: 9eqF8ZrIuEZKz0HBIvo+abvCup8HSLdu/KONMUweio4=)
2: TDJw8c2ugNuZzTvDh-dhjlcAHEQ.roa (hash: i8ViOgSKUgk23gc5KboIyTVKvb8lTiASE07Nhp1UbTE=)
3: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (hash: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:fe:d5:4c:b0:43:41:0d:4d:36:15:07:06:06:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Jul 29 02:00:23 2026 GMT
Not After : Jul 30 02:00:23 2026 GMT
Subject: CN=0a12e90ec0d66e8cfc75764a02bf3ef4b665e2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:33:19:d1:b6:7a:e9:e8:f0:ea:3f:0d:2f:84:
14:78:49:31:00:5a:03:66:72:64:08:14:7b:d8:c5:
6f:10:2d:d7:ea:4a:9c:5d:06:d8:b5:7d:50:eb:eb:
75:c2:51:cc:e3:b6:9f:80:78:9a:0a:a4:bf:85:e9:
12:63:fe:78:0e:02:65:df:fd:d1:74:13:f0:15:e0:
08:85:ad:45:7b:3a:c2:d4:8f:c4:f4:fe:27:83:1d:
73:24:b3:50:c1:4e:c0:83:12:82:8d:18:49:ee:18:
4f:1f:b9:63:e5:1e:62:4c:f8:ee:fe:f3:63:88:a4:
e9:9d:ba:27:10:f2:d4:88:98:09:55:44:9e:ee:22:
86:98:ec:dd:1c:25:a0:c2:90:69:32:94:f3:56:b8:
a6:98:0b:c7:23:f6:f9:8e:0b:dc:c4:ec:21:c0:65:
45:51:f9:bd:44:2b:09:89:72:24:29:3c:9c:43:14:
28:75:f9:ba:f7:c2:bd:20:0d:6d:53:70:1f:c0:68:
e0:3f:43:d3:88:7c:67:7b:4b:c1:33:38:a0:b9:63:
30:76:2d:ec:ce:08:a1:fa:a6:f7:e2:75:d9:93:9e:
93:d6:b6:3a:d1:f2:de:76:2f:8d:4b:d5:93:c2:89:
ea:c7:03:76:c5:31:d4:2a:5a:9a:c2:c4:17:80:eb:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:12:E9:0E:C0:D6:6E:8C:FC:75:76:4A:02:BF:3E:F4:B6:65:E2:FB
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:02:18:20:96:1f:0a:30:15:53:0c:c3:5d:7c:bf:c2:a9:32:
fd:5e:c5:6d:29:70:0d:48:83:1c:f1:3c:a6:56:35:97:13:c4:
dd:ea:82:60:24:89:45:9b:72:c8:c1:e7:5b:31:f4:e6:98:3c:
75:98:fc:33:90:52:a3:f1:a0:f4:61:67:82:11:49:58:81:f4:
74:a2:2b:8d:ca:e1:4a:38:53:59:30:48:3f:f1:93:1c:5f:93:
f8:47:e9:84:0b:a6:9f:1d:da:7e:bc:bc:2c:8b:33:82:7b:47:
ba:fb:7c:6c:c7:5e:ee:40:9a:34:eb:03:c1:ca:6d:c1:05:32:
35:36:43:8c:de:df:ca:ed:17:ed:54:19:22:da:67:b9:09:4f:
6a:1a:9c:97:7b:fe:f2:06:82:60:71:56:5c:87:8c:16:a2:9e:
fe:8a:a0:ce:10:f6:04:3d:3b:f6:a5:58:ea:69:83:6a:d1:d0:
c8:03:d2:a5:14:b6:e8:7f:05:7a:e4:ed:3f:64:cf:f5:77:c5:
bc:05:d8:2f:01:dd:6b:53:0a:3f:1e:27:1f:74:45:1b:5b:a5:
91:94:bf:6d:3d:25:2b:be:e3:39:15:43:31:58:d2:66:92:e9:
93:56:a0:e0:1e:09:87:1c:e4:2b:14:02:86:3f:c9:1d:22:14:
1f:7c:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:08 2026 by rpki-client