Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: zPv9RInJT+JP42INE218dyyGV1Zm5GpNMRnNrvdm44k=
Subject key identifier: 69:FB:35:2E:08:75:2F:FD:8F:15:E8:F0:7D:2A:9C:27:94:05:21:29
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 019D9886EF2369252C058235782B5F452F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:01:12 +0000
Manifest this update: Thu 16 Apr 2026 23:01:12 +0000
Manifest next update: Fri 17 Apr 2026 23:01:12 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: PXB5D7RapiLM7/WUbP50AY+9vGaulQPl7OKG27GyxjY=)
2: TDJw8c2ugNuZzTvDh-dhjlcAHEQ.roa (hash: i8ViOgSKUgk23gc5KboIyTVKvb8lTiASE07Nhp1UbTE=)
3: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (hash: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:ef:23:69:25:2c:05:82:35:78:2b:5f:45:2f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Apr 16 23:01:12 2026 GMT
Not After : Apr 17 23:01:12 2026 GMT
Subject: CN=69fb352e08752ffd8f15e8f07d2a9c2794052129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:1c:c0:15:00:60:0a:17:22:ce:2a:7f:84:
4a:ee:93:da:18:05:93:e3:70:8a:0d:6e:82:d6:7b:
3e:91:5c:75:04:a1:5b:0c:c4:f6:7f:61:e4:23:ac:
d5:dd:16:4b:92:33:9e:96:8c:1b:71:80:21:e7:de:
0d:b1:3a:a3:dc:60:a0:d2:93:7e:16:26:4f:64:d1:
b8:f8:40:ca:0a:01:e3:b6:9a:00:75:91:40:34:02:
24:ec:35:85:56:de:30:2c:a9:6e:37:58:0b:05:7b:
ab:f1:22:be:50:ee:4b:c6:f1:c4:b4:af:3f:9d:1b:
71:91:37:36:96:6f:8e:cd:04:aa:a0:91:1b:ca:94:
74:98:b1:c2:05:c1:ca:54:1a:ff:94:6b:5d:ac:d8:
6a:6d:ae:34:80:68:a6:3d:4c:5a:dc:87:19:c2:b9:
b6:8f:3c:55:a5:c6:d2:f4:fb:09:ac:4b:d2:71:4c:
cf:a9:e9:25:ff:75:94:a0:73:1b:ce:11:0e:66:27:
73:5f:11:15:f6:bf:8b:da:e9:8c:4f:ed:d7:fa:0d:
43:43:e5:9b:74:ea:8e:6d:4f:4d:76:1c:69:77:29:
6f:08:8c:e0:a6:37:28:bd:ce:a6:c1:d5:d0:3b:06:
a3:54:8e:69:65:32:9c:46:d3:6d:58:86:2a:a6:03:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FB:35:2E:08:75:2F:FD:8F:15:E8:F0:7D:2A:9C:27:94:05:21:29
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0b:35:85:95:9a:62:b1:31:bb:20:cc:09:9b:5e:7a:af:51:
79:32:2c:b0:55:17:8b:63:6c:33:d3:8f:4b:62:dd:10:50:66:
c8:8a:73:46:02:21:73:0f:0b:6c:80:36:5e:ba:f3:ba:1d:b1:
e0:ec:e0:4d:fc:e5:6c:d4:a6:b9:7b:87:9e:2f:f0:7e:b9:1e:
79:ad:67:94:2a:ac:e8:e4:1b:8b:36:1f:a1:a7:1c:c4:40:24:
19:28:e1:59:5d:97:e4:5a:6f:31:3c:11:fe:98:b1:fa:57:f6:
3e:80:e4:d5:9b:31:35:67:bb:c5:e7:60:72:f9:57:83:40:9e:
4e:cd:37:54:c0:2e:89:2b:d5:fd:00:8f:79:ee:38:78:63:b6:
6f:d7:2c:b0:5d:93:ec:e5:b0:64:67:29:a3:2d:35:b8:cb:f1:
34:ad:ae:74:a0:83:bb:51:75:60:91:75:c3:6a:1d:54:18:70:
ee:1e:84:b2:e9:7b:52:dc:98:6b:3d:04:0e:9a:7d:6d:ac:4e:
5a:10:5e:3f:4c:4c:6e:36:14:c7:19:32:7c:84:cc:76:41:c2:
4a:b5:5b:a8:5d:06:a2:30:0b:55:7a:1d:23:a0:2f:e8:ea:15:
18:98:7c:9a:b1:d5:d9:fb:ea:fb:73:fd:5e:2d:1f:6b:ea:e9:
8c:8a:1f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:32 2026 by rpki-client