Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: B9OihCd+z3FMmYiMRf+b/XAiztkOxA+dptcGeDPUFPU=
Subject key identifier: 42:EA:37:97:E3:86:A8:E2:E4:FE:4B:FC:53:29:76:AC:42:F1:6E:DA
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 019F965C0734333BCA7598C5C4490AC6A123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 23:00:41 +0000
Manifest this update: Fri 24 Jul 2026 23:00:41 +0000
Manifest next update: Sat 25 Jul 2026 23:00:41 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: nqzxhMiX914n9eDZEAkMnaKoIps7uGUoyxrpOExwkl4=)
2: TDJw8c2ugNuZzTvDh-dhjlcAHEQ.roa (hash: i8ViOgSKUgk23gc5KboIyTVKvb8lTiASE07Nhp1UbTE=)
3: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (hash: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5c:07:34:33:3b:ca:75:98:c5:c4:49:0a:c6:a1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Jul 24 23:00:41 2026 GMT
Not After : Jul 25 23:00:41 2026 GMT
Subject: CN=42ea3797e386a8e2e4fe4bfc532976ac42f16eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:d4:87:f1:76:3c:c2:8f:5c:41:a6:c6:75:
03:43:08:ac:30:b6:7a:1c:c2:c0:ad:29:2f:2f:1e:
81:ff:31:05:55:44:ec:04:2b:27:c0:f7:4f:16:d4:
30:0b:ee:71:33:6f:b5:4a:a1:bd:f5:81:73:29:53:
f9:44:41:cc:cb:04:16:98:0f:7a:f7:4b:05:9e:9b:
4a:50:ea:8d:38:5f:f5:4f:25:72:1f:67:f9:09:b0:
13:6e:51:45:92:36:53:08:9d:3f:58:36:b2:16:ed:
09:f2:93:2f:7f:5d:61:0f:b4:22:e8:1c:7f:45:29:
76:e5:fb:1c:22:22:f6:29:84:b8:1d:81:d9:19:07:
8a:93:cc:4e:ef:f1:71:e8:d4:a0:0e:7b:50:93:ad:
3b:02:b4:3a:5d:dc:01:45:e1:1a:08:5f:d2:bd:75:
a7:ad:bb:9d:6a:4e:cd:d0:78:ee:50:43:1c:5f:60:
b3:7a:1a:6d:97:ab:0d:86:24:34:0d:d9:d5:25:97:
13:e2:e5:79:25:2a:4d:63:58:6a:bd:60:29:69:1a:
42:91:32:fa:e3:30:94:28:21:d8:2b:3b:31:d1:c7:
69:c0:8a:a7:17:5d:29:8c:6f:53:c9:56:0a:41:e3:
ec:ae:60:69:10:69:d7:47:64:2d:af:99:b1:00:d8:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EA:37:97:E3:86:A8:E2:E4:FE:4B:FC:53:29:76:AC:42:F1:6E:DA
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1f:fb:3f:36:8d:2a:33:18:b4:d3:ca:d5:9f:55:28:60:34:
fa:3a:3e:d7:b6:8c:f6:bb:35:58:ce:29:c0:e8:fe:9f:90:48:
9b:d7:1c:30:ef:33:6a:3e:7d:52:aa:01:12:51:2a:0d:1c:2b:
12:96:00:c2:e2:b0:58:b7:6a:4c:57:81:e1:3d:11:da:36:7e:
db:d4:f5:15:75:83:17:89:48:bf:a8:0d:85:af:9b:57:0f:34:
cf:a0:ae:81:ff:43:41:7a:30:e4:c2:cc:87:80:de:e3:25:94:
f9:84:e3:74:fa:43:c1:da:6c:7e:6a:db:01:ab:06:71:53:85:
52:8d:1a:e4:a9:1c:a2:f7:c3:27:56:72:21:32:86:52:3f:c1:
49:8e:6d:10:69:e0:ae:47:bb:33:cc:3e:7a:bd:72:33:5c:c8:
bf:57:d5:a4:7d:47:33:94:ba:fe:98:62:1c:12:88:5c:ac:db:
cc:e6:7c:f2:5a:79:ae:c3:0f:be:1b:f7:5d:97:44:af:a6:79:
6b:16:e8:56:9f:db:28:85:88:53:38:43:0a:13:74:db:41:6c:
5a:5f:85:e2:a7:2d:be:be:0b:18:9b:71:5f:62:99:66:47:9a:
46:dc:3d:0b:fa:2d:e5:2a:08:7d:4f:23:85:d4:7c:48:06:80:
b1:c8:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:24:27 2026 by rpki-client