Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: OHt3ksYsRxjLEAfZnLH5FQuLuF8UItOk6A016+NtKpw=
Subject key identifier: 09:25:E3:89:16:B3:82:05:6E:C2:3D:4E:AC:E8:3F:2E:DB:43:AD:43
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 019D25BAC994D98EE5C436ECDA3E375CD3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 16:01:31 +0000
Manifest this update: Wed 25 Mar 2026 16:01:31 +0000
Manifest next update: Thu 26 Mar 2026 16:01:31 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: VZCTTh4M6iLyFT0K4e724PLsapFtdbJjyRql0xY/pZk=)
2: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (hash: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:c9:94:d9:8e:e5:c4:36:ec:da:3e:37:5c:d3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Mar 25 16:01:31 2026 GMT
Not After : Mar 26 16:01:31 2026 GMT
Subject: CN=0925e38916b382056ec23d4eace83f2edb43ad43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:fa:77:81:a4:f5:c3:cf:f6:b0:c5:17:84:
34:8a:be:99:cb:0e:71:50:16:be:56:6e:3d:7d:e0:
66:eb:61:b6:d3:e0:82:60:8c:2e:e5:eb:c3:c1:fb:
87:39:78:0a:04:28:9b:5e:38:88:5b:b3:55:0c:ac:
bc:86:57:03:a7:d7:34:f0:0a:0e:1a:25:9f:be:06:
58:28:9e:31:47:00:24:89:73:3d:d0:22:82:d4:e8:
d2:7d:ad:89:cd:b5:c1:aa:21:6e:e3:0d:19:88:bd:
f5:b8:4e:cd:69:cd:bb:4c:a2:4f:1e:39:fb:60:a4:
dd:43:7c:4e:dc:3e:f4:44:74:be:6e:44:0a:48:55:
a4:7e:ad:d7:69:4f:1b:a4:70:10:df:50:18:e8:48:
7a:d1:81:d3:0e:0c:e3:24:f9:f7:b8:8f:84:38:b1:
1e:72:3d:3c:d9:99:5c:c0:47:36:89:31:e3:57:d5:
1b:12:54:16:33:49:7b:de:d8:0f:31:22:35:1c:e4:
0d:2e:a5:78:58:df:6a:2d:2d:f6:4b:1c:fc:44:ad:
d8:cd:47:6e:83:a3:58:ce:11:fa:a4:30:4e:4b:58:
e9:84:38:56:1e:0f:f2:b6:4f:67:38:7a:59:c0:31:
bb:6e:46:94:93:da:43:e3:10:09:10:b8:fd:da:b8:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:25:E3:89:16:B3:82:05:6E:C2:3D:4E:AC:E8:3F:2E:DB:43:AD:43
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a9:1f:3f:b3:ff:39:8d:44:c7:a1:eb:a9:16:ea:25:d6:e3:
9c:56:16:d4:f7:06:91:6c:9c:a4:f8:eb:80:56:4c:93:7a:ee:
f7:88:1c:8b:ef:69:ce:ce:1f:9f:e1:dc:69:b5:bb:72:91:36:
ec:4d:ed:d5:2b:35:c6:be:f7:48:6b:e2:66:d0:5e:8c:5f:45:
b0:a8:c2:47:1f:18:c6:2a:6d:21:87:6a:83:7c:d8:20:19:a0:
2a:28:c2:58:76:96:69:e4:0c:00:63:8a:8f:29:99:c4:41:f8:
71:33:01:a2:cf:08:e2:50:47:c6:32:04:55:58:63:39:2c:1e:
91:f3:62:31:84:86:ae:8a:bb:4f:30:ba:b8:2b:75:55:0e:07:
a2:24:be:3e:40:5d:92:9d:91:9b:90:43:51:5f:e1:f9:2c:4f:
27:3f:22:8c:bf:26:18:72:8e:81:cb:3c:46:48:4d:fa:9e:8e:
96:59:cb:82:af:d7:6d:31:ff:fc:74:a9:0b:6c:3a:6e:72:91:
2d:4f:2b:eb:55:63:e4:2d:35:0b:ef:4c:45:ce:7a:ff:a8:34:
81:c4:44:fc:2c:d5:c0:93:5c:7d:b1:cf:06:fa:0e:d0:9a:fa:
95:41:2a:d4:1e:53:fb:f4:24:74:f1:ff:5d:1f:29:7c:d1:2f:
aa:b8:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:40 2026 by rpki-client