Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: gF1gj6CUpEQYymotpPjdlTApKJXUAIrMNfTAL6CiXLw=
Subject key identifier: 34:AB:1E:A0:42:11:F9:47:AB:2B:F0:06:21:43:D7:F6:D2:EF:F7:BC
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 019E1FB5F846A9093FEF65ADFB081E411291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 05:01:19 +0000
Manifest this update: Wed 13 May 2026 05:01:19 +0000
Manifest next update: Thu 14 May 2026 05:01:19 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: zBoGF2YQW8AoQqPzB8+e3C4qe8s1u2DgZxoJZxoITIk=)
2: TDJw8c2ugNuZzTvDh-dhjlcAHEQ.roa (hash: i8ViOgSKUgk23gc5KboIyTVKvb8lTiASE07Nhp1UbTE=)
3: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (hash: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:f8:46:a9:09:3f:ef:65:ad:fb:08:1e:41:12:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: May 13 05:01:19 2026 GMT
Not After : May 14 05:01:19 2026 GMT
Subject: CN=34ab1ea04211f947ab2bf0062143d7f6d2eff7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:29:2f:18:a9:cc:da:df:1c:1c:0c:88:d5:04:
9d:c0:ea:1b:97:19:5e:02:e4:fa:45:42:73:fc:a9:
b6:ba:66:b1:5f:2e:ee:08:e1:ee:dd:6a:8b:ce:54:
24:84:bd:ab:43:cf:63:8a:9f:eb:5e:8d:11:51:cd:
2f:35:49:e1:d6:6b:b5:57:d1:b5:bf:8e:93:a7:52:
9a:3c:c6:79:35:40:e6:0a:32:c9:30:ad:13:f4:19:
a3:b0:c0:9a:1b:a9:5d:a5:e8:e6:37:d1:a0:18:c9:
3a:f0:23:f3:aa:a1:97:52:15:31:15:ce:20:7d:b2:
20:e6:8f:dd:28:c3:e8:ee:18:bb:23:35:46:e3:26:
7b:47:9f:9b:05:84:04:7d:b5:9d:b0:a7:3d:b6:e4:
c1:1f:70:ee:14:fe:c6:92:17:fb:19:f5:98:2d:62:
f4:de:28:3b:60:08:87:61:a5:70:16:ac:a8:c3:8c:
aa:e6:65:be:27:4f:ac:e0:28:bb:b8:d5:d7:c2:ce:
c6:8e:d7:98:6f:30:4c:f5:c6:11:2d:b6:eb:fe:b9:
e9:68:e5:49:81:05:81:a1:90:37:bf:2c:46:88:ba:
64:d2:55:06:8e:d3:20:09:49:e7:9c:d3:b9:ca:ec:
fd:13:e0:21:71:e7:f4:46:b7:83:7b:e5:db:71:1e:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AB:1E:A0:42:11:F9:47:AB:2B:F0:06:21:43:D7:F6:D2:EF:F7:BC
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:bc:f0:93:29:60:91:ed:f1:4e:09:d2:2e:3a:1a:39:3a:de:
bd:c6:8e:86:50:f5:ba:69:aa:73:0b:17:41:9f:ac:63:2a:3f:
c2:3c:b3:f8:f7:d0:c6:4c:a9:de:0d:6f:83:7b:b2:89:01:0d:
de:6f:fd:6a:0d:5e:24:de:80:fa:09:59:c7:e1:fa:3f:f9:34:
86:b0:64:31:eb:c3:89:84:5e:bd:83:7d:0a:8a:75:1d:7f:63:
6a:b9:39:b7:a2:18:d4:d2:b8:2e:2a:6b:4f:a2:89:8c:1d:83:
61:59:35:15:56:a3:c1:74:c8:1d:cf:cc:39:d3:6d:86:76:72:
b5:78:0b:8d:f9:d1:a0:9a:34:0f:ff:0e:85:65:07:ec:dc:96:
68:a6:b1:0d:33:9d:67:21:69:05:da:9a:03:c6:b3:db:01:92:
29:f5:b0:d0:c0:e5:f4:f0:b1:f6:d4:d7:13:2f:d2:56:de:ae:
3a:c0:65:14:51:42:df:99:a1:2e:69:d4:0b:ef:49:bc:e2:0f:
16:3e:77:7a:08:bb:e4:86:60:b1:b1:d2:4d:f0:6e:86:77:ae:
f7:09:6f:3d:5f:ee:61:61:31:5a:90:91:f9:60:0d:21:63:44:
73:99:79:65:0a:df:67:19:f9:ec:0d:13:4b:1f:5c:e4:cf:87:
e8:c6:29:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftfhGqQk/72Wt+wgeQRKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZGZkNzYwNGRmYTBlYjhhZTIwZTkwZmNmMTMwMzkzYjhh
ODU2NGEwHhcNMjYwNTEzMDUwMTE5WhcNMjYwNTE0MDUwMTE5WjAzMTEwLwYDVQQD
EygzNGFiMWVhMDQyMTFmOTQ3YWIyYmYwMDYyMTQzZDdmNmQyZWZmN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CkvGKnM2t8cHAyI1QSdwOoblxle
AuT6RUJz/Km2umaxXy7uCOHu3WqLzlQkhL2rQ89jip/rXo0RUc0vNUnh1mu1V9G1
v46Tp1KaPMZ5NUDmCjLJMK0T9BmjsMCaG6ldpejmN9GgGMk68CPzqqGXUhUxFc4g
fbIg5o/dKMPo7hi7IzVG4yZ7R5+bBYQEfbWdsKc9tuTBH3DuFP7Gkhf7GfWYLWL0
3ig7YAiHYaVwFqyow4yq5mW+J0+s4Ci7uNXXws7GjteYbzBM9cYRLbbr/rnpaOVJ
gQWBoZA3vyxGiLpk0lUGjtMgCUnnnNO5yuz9E+Ahcef0RreDe+XbcR6g4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSrHqBCEflHqyvwBiFD1/bS7/e8MB8GA1UdIwQY
MBaAFDvf12BN+g64riDpD88TA5O4qFZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2Mt
ZWY2YzllYWQ2MTFjLzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2MtZWY2YzllYWQ2MTFj
LzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbzwkylg
ke3xTgnSLjoaOTrevcaOhlD1ummqcwsXQZ+sYyo/wjyz+PfQxkyp3g1vg3uyiQEN
3m/9ag1eJN6A+glZx+H6P/k0hrBkMevDiYRevYN9Cop1HX9jark5t6IY1NK4Lipr
T6KJjB2DYVk1FVajwXTIHc/MOdNthnZytXgLjfnRoJo0D/8OhWUH7NyWaKaxDTOd
ZyFpBdqaA8az2wGSKfWw0MDl9PCx9tTXEy/SVt6uOsBlFFFC35mhLmnUC+9JvOIP
Fj53egi75IZgsbHSTfBuhneu9wlvPV/uYWExWpCR+WANIWNEc5l5ZQrfZxn57A0T
Sx9c5M+H6MYpmg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:16:54 2026 by rpki-client