Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: tDxhn0yQXR3YAn0TSq8q1RNr/i4RfgQaCJ7nEfKLw8o=
Subject key identifier: 08:47:E6:9E:44:C4:8C:4C:81:66:8F:AF:64:A9:9C:89:03:DF:E9:4B
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 01A0DACD1EE926004C577D8A4F0C0F384A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 23:01:10 +0000
Manifest this update: Fri 25 Sep 2026 23:01:10 +0000
Manifest next update: Sat 26 Sep 2026 23:01:10 +0000
Files and hashes: 1: NyFyTToHrV_iLH9GIOJWP_TIsh4.roa (hash: qqHJlBF+PNPUtrTddnKLqGJ5Fxf9M5uhm+M+K7k/8g4=)
2: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: r0j5LhkELJm4h/Loe/Qsc1hmNiWpZ9L+ugo+tofGLbU=)
3: TDJw8c2ugNuZzTvDh-dhjlcAHEQ.roa (hash: i8ViOgSKUgk23gc5KboIyTVKvb8lTiASE07Nhp1UbTE=)
4: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (hash: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:1e:e9:26:00:4c:57:7d:8a:4f:0c:0f:38:4a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Sep 25 23:01:10 2026 GMT
Not After : Sep 26 23:01:10 2026 GMT
Subject: CN=0847e69e44c48c4c81668faf64a99c8903dfe94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:ca:67:e6:00:45:7c:d1:28:98:42:06:77:
03:55:d6:47:e5:c1:d5:d1:c4:f8:da:0e:df:f6:7b:
0a:67:28:2c:8b:58:e9:fa:98:c3:50:d2:22:bf:af:
bf:d0:96:49:4b:77:ea:81:db:2f:8d:c9:d6:3e:a6:
47:f5:fc:65:cd:ef:00:79:d5:c4:6f:38:bc:ce:20:
d4:87:2c:50:ac:41:30:55:62:26:87:ea:b4:11:6b:
80:19:c2:7b:92:21:56:3c:ca:33:1b:09:bf:ef:19:
c6:b4:98:37:ea:41:e6:e1:73:38:ce:23:43:08:8a:
b1:9b:58:8e:29:1f:50:e8:87:23:ae:af:ad:ba:e2:
bc:5e:e9:60:54:73:6c:5a:91:80:7a:e8:d3:3a:bc:
7b:81:22:e1:c7:b5:18:14:5d:72:fd:3c:04:84:b1:
ba:ea:23:1c:14:2b:04:57:68:92:2a:cc:4e:37:e7:
18:c9:74:97:bd:14:fe:3b:15:b4:3c:9f:20:fe:66:
b1:b8:1d:0b:f7:8c:fb:00:d5:c0:f7:5f:48:bd:59:
21:2e:47:9f:66:16:d9:f1:3e:96:21:5d:b7:93:94:
b3:f2:80:bf:ba:f2:b2:59:f6:c0:6b:18:8e:3e:49:
a3:2f:e9:08:89:64:ce:5f:66:02:95:9c:83:83:37:
4f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:47:E6:9E:44:C4:8C:4C:81:66:8F:AF:64:A9:9C:89:03:DF:E9:4B
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e9:f6:80:ff:f5:a5:ae:17:89:bf:3e:b7:68:a2:8c:d7:9c:
a5:92:cd:a9:16:b9:53:1c:a7:ab:e1:68:7d:54:3c:31:62:c0:
b3:c0:99:ae:db:7f:85:00:35:27:00:2f:c7:61:97:75:0a:8c:
87:77:18:6f:00:34:72:cb:5a:0b:fa:76:96:54:20:38:f2:de:
66:c0:50:82:69:cf:fd:c3:73:1a:1c:be:bc:8b:d8:4a:ed:c1:
9e:0a:b7:4e:64:b2:18:fa:f7:af:d3:3f:18:b6:fd:8a:5f:bd:
d5:f6:9d:e4:86:4d:01:81:30:70:18:75:bc:7f:30:c1:23:46:
59:0d:3d:3a:90:1c:76:bb:23:10:22:f9:6b:85:9a:25:9c:20:
7d:b2:66:4e:a9:73:fe:99:ca:4e:2c:9d:c2:be:4f:3d:c4:bf:
2b:10:4c:5d:a7:55:9f:45:08:eb:f3:ce:51:0f:44:3d:ad:19:
17:5c:2f:b6:01:9f:35:86:1c:76:25:b1:cc:ae:51:b0:29:2a:
02:39:59:ef:b9:ed:54:e6:61:99:9a:a4:0d:a4:6d:d5:81:47:
b8:e7:f8:2c:a4:30:96:e6:4f:5c:4f:40:7c:88:32:5b:ca:5e:
5b:37:09:b8:eb:8d:e7:01:c2:8f:67:4e:8b:05:da:d3:85:3f:
53:23:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:09:50 2026 by rpki-client