Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: jfZXvCZgEQMK+Ldv4ItOgo7/h9VTVEzID5JzD/LI1Ps=
Subject key identifier: B5:30:3A:BB:57:58:5B:F4:E3:94:E4:39:8F:BF:DE:79:B3:7B:62:16
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 01A1DD9488EFEAEEE9B4D212267F12B40439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 05:01:01 +0000
Manifest this update: Sun 15 Nov 2026 05:01:01 +0000
Manifest next update: Mon 16 Nov 2026 05:01:01 +0000
Files and hashes: 1: NyFyTToHrV_iLH9GIOJWP_TIsh4.roa (hash: qqHJlBF+PNPUtrTddnKLqGJ5Fxf9M5uhm+M+K7k/8g4=)
2: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: oRVhJEt69KxVY2V+mmZmu01XVeTaouN/SqR9QMCkAeU=)
3: TDJw8c2ugNuZzTvDh-dhjlcAHEQ.roa (hash: i8ViOgSKUgk23gc5KboIyTVKvb8lTiASE07Nhp1UbTE=)
4: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (hash: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:88:ef:ea:ee:e9:b4:d2:12:26:7f:12:b4:04:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Nov 15 05:01:01 2026 GMT
Not After : Nov 16 05:01:01 2026 GMT
Subject: CN=b5303abb57585bf4e394e4398fbfde79b37b6216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:d0:fe:41:e3:8c:38:a4:3e:b2:2e:df:72:
37:72:e4:11:59:91:99:b7:26:05:f7:95:ee:de:c2:
2b:03:14:1e:a5:e2:ca:7b:06:52:83:d8:d3:7b:81:
e0:0d:d3:af:c9:f2:9c:d0:e2:19:30:2d:d1:1c:26:
65:70:b0:39:9a:e4:00:3c:d4:a8:90:02:7e:fe:1b:
6d:c6:5e:89:ef:72:85:0a:9f:09:61:01:21:c4:33:
65:d1:71:f4:a4:5f:cd:54:f8:00:5a:c8:d7:a5:07:
16:19:2e:5d:76:84:9c:d3:9d:43:e5:e3:2f:54:9b:
16:9a:ad:54:1e:57:23:f0:67:e9:8b:d2:1c:2e:7d:
3b:57:44:bc:2a:2e:27:f4:da:02:69:c0:18:25:fd:
45:a8:63:54:f1:fa:bc:ba:53:c6:40:12:8a:8f:a7:
51:5b:f4:29:19:27:35:f4:42:0b:94:cd:4c:82:d9:
04:14:95:7c:db:03:3e:54:8f:43:34:e4:16:01:3e:
5c:ae:b7:da:ad:5c:41:14:13:61:6b:87:3c:90:65:
8f:75:dc:cc:8d:ec:db:66:9c:64:d0:31:db:06:46:
f6:14:db:75:e3:28:b4:ab:01:2f:0b:b3:be:d1:c0:
31:91:b9:cf:9f:6c:52:51:af:15:47:57:13:f1:81:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:30:3A:BB:57:58:5B:F4:E3:94:E4:39:8F:BF:DE:79:B3:7B:62:16
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c5:8e:69:90:a3:77:79:d4:7b:a9:57:98:9a:0e:92:49:7e:
10:ff:e4:b3:01:65:35:dc:8a:4a:73:85:98:8c:32:32:5b:95:
0e:1e:99:8d:00:06:7f:72:47:18:c2:13:13:20:9c:a6:bc:8e:
45:f3:62:ed:98:be:b6:ad:12:17:05:33:bd:09:da:7f:dc:5d:
ad:b0:37:99:33:e9:89:b7:28:64:f9:11:96:ea:6f:34:67:1d:
24:66:a1:af:46:57:17:ee:f9:28:d8:80:fd:12:49:19:f1:6c:
79:cb:51:ff:84:3f:a7:b8:2b:c4:22:04:45:ab:b5:7a:3a:17:
74:f4:42:9d:4a:ce:56:75:8c:8b:6a:f9:c8:d2:96:b2:c9:7d:
79:01:8f:1a:88:5e:52:4e:5a:bb:86:7a:24:14:d7:e9:d7:6a:
de:1c:ed:9c:31:00:94:32:1a:d7:48:03:aa:b0:34:d5:a5:24:
0e:a5:20:9b:fa:af:e3:14:76:b6:7e:a9:a3:4c:5b:3e:09:9e:
77:96:9a:ba:ce:cf:f3:ad:f5:93:7e:7d:12:d7:d7:ff:8f:b6:
27:1f:bf:cc:42:a3:b1:d9:91:93:ed:7b:0f:ce:2d:84:31:94:
27:bd:cd:29:9d:b0:d2:37:a9:0d:92:76:d8:b2:2c:3f:61:df:
db:82:f2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:35:27 2026 by rpki-client