Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: HX4niN7Dq+BdjjnEqc2gfLJPNI7xqyEO8Plpdi46Opo=
Subject key identifier: B8:F1:D8:10:73:3C:47:4A:23:BC:49:D9:1F:6F:41:DE:F7:AE:BF:68
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 01A08D8D9ACF816134241B688D42C1FEFFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 23:01:02 +0000
Manifest this update: Thu 10 Sep 2026 23:01:02 +0000
Manifest next update: Fri 11 Sep 2026 23:01:02 +0000
Files and hashes: 1: NyFyTToHrV_iLH9GIOJWP_TIsh4.roa (hash: qqHJlBF+PNPUtrTddnKLqGJ5Fxf9M5uhm+M+K7k/8g4=)
2: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: XxFNGNSMJStLrr5GR9niNBM0icjJ2L/Qx33XL7qxFLs=)
3: TDJw8c2ugNuZzTvDh-dhjlcAHEQ.roa (hash: i8ViOgSKUgk23gc5KboIyTVKvb8lTiASE07Nhp1UbTE=)
4: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (hash: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:9a:cf:81:61:34:24:1b:68:8d:42:c1:fe:ff:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Sep 10 23:01:02 2026 GMT
Not After : Sep 11 23:01:02 2026 GMT
Subject: CN=b8f1d810733c474a23bc49d91f6f41def7aebf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:b9:75:f4:04:54:07:98:57:da:b1:77:f1:
12:6e:ad:05:2c:01:bd:74:24:dc:c0:6e:fa:83:3e:
7e:d1:7b:cd:fd:d2:23:c8:94:cf:ff:8d:06:36:c7:
b3:4a:77:d3:f3:07:e7:a8:c9:3e:0f:10:03:3d:72:
98:7b:97:63:3b:66:5f:f7:41:79:82:e4:53:9a:d9:
52:72:a4:03:1b:b6:f5:2a:e9:80:bb:aa:a9:d5:bc:
e6:6e:32:32:fb:5c:e0:96:06:bc:e1:28:8b:35:97:
f6:e9:8d:b9:78:55:fa:4c:e9:6b:65:4f:d6:92:21:
c8:fa:14:81:9a:94:65:f2:4c:af:2d:df:af:5f:e2:
f2:47:06:a6:64:0f:0a:b7:f5:d8:0e:8d:a2:43:e0:
15:d3:d6:78:53:b9:f9:3f:c4:de:cb:e6:35:39:5d:
01:e6:f4:fc:8a:14:b1:7e:3a:ef:98:e6:db:fc:09:
81:ac:4c:1c:65:88:f4:77:7a:8d:ad:9e:7b:0e:0f:
97:66:4c:17:02:44:1f:59:9d:a5:fe:84:07:b9:e9:
06:e8:35:04:30:76:a8:bd:15:45:b0:b8:9f:6f:78:
94:0b:4c:cd:a5:7b:7a:b8:45:25:cf:d8:5e:c6:de:
7a:be:fc:5c:e9:5a:ee:49:ee:bc:a7:5f:b4:29:44:
60:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F1:D8:10:73:3C:47:4A:23:BC:49:D9:1F:6F:41:DE:F7:AE:BF:68
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:23:7b:f1:9e:c1:e1:26:51:cc:a4:f3:31:b0:d8:36:0a:33:
3b:61:e2:d9:3b:af:30:22:1f:78:b9:a0:80:18:ce:1d:1d:22:
24:59:ac:d8:34:64:dc:c5:95:ec:0a:17:e7:f5:2f:b6:a9:73:
f3:e1:7d:8b:28:cb:83:73:37:70:b4:0d:ae:f7:97:34:dc:ac:
0a:4e:15:8f:37:21:f1:27:61:22:cd:cf:46:ed:bb:b7:d6:65:
42:8d:ed:b1:1c:4e:b8:f0:86:d1:e5:1d:a1:9f:71:90:01:64:
b0:cf:42:35:fb:43:25:44:dd:2f:02:32:23:8b:ea:c5:b2:97:
bb:1e:18:0f:46:83:c3:df:cf:63:9a:61:c3:bf:f5:52:c3:9b:
d4:e1:f4:98:0d:fb:e9:b6:15:97:cc:18:7c:ae:62:70:7b:7b:
b6:10:a7:03:60:15:c5:23:e2:f4:f4:e7:3d:34:e2:ac:cb:7b:
18:d3:bb:59:86:26:41:56:fd:a3:26:f3:7a:58:94:76:af:ed:
f1:4e:51:fa:9c:5c:6d:e1:84:eb:3a:75:c7:4d:7d:c0:65:54:
7c:e5:a6:f8:43:f2:06:16:cf:01:ac:f5:ae:54:c7:23:aa:3c:
78:ba:b4:87:04:58:7b:ba:ef:89:b6:91:eb:91:37:e5:6b:39:
24:5b:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:05:53 2026 by rpki-client