Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: RDEKOMqbHc14c5mNzyCsR3Q0jYA7heHEiddt5PyC8z0=
Subject key identifier: 33:59:04:D3:58:1A:D4:F5:14:29:9E:B7:40:BE:42:A6:50:65:8D:CD
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 01A182D102BEDD934B11BF5177A9E778966C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 14:01:38 +0000
Manifest this update: Wed 28 Oct 2026 14:01:38 +0000
Manifest next update: Thu 29 Oct 2026 14:01:38 +0000
Files and hashes: 1: NyFyTToHrV_iLH9GIOJWP_TIsh4.roa (hash: qqHJlBF+PNPUtrTddnKLqGJ5Fxf9M5uhm+M+K7k/8g4=)
2: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: CkVuy1IrlcvaauG5hADAQB0g8ozAxG0i3/wzabs8uSk=)
3: TDJw8c2ugNuZzTvDh-dhjlcAHEQ.roa (hash: i8ViOgSKUgk23gc5KboIyTVKvb8lTiASE07Nhp1UbTE=)
4: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (hash: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d1:02:be:dd:93:4b:11:bf:51:77:a9:e7:78:96:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Oct 28 14:01:38 2026 GMT
Not After : Oct 29 14:01:38 2026 GMT
Subject: CN=335904d3581ad4f514299eb740be42a650658dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:49:33:c9:4c:64:a7:e2:86:c7:aa:20:a6:
de:20:a2:ff:8f:0d:d8:c3:95:84:e2:64:47:1b:76:
39:e7:c2:73:c1:5e:fa:22:33:07:f9:e6:e0:16:12:
b0:57:6a:7f:42:06:61:b3:ea:80:36:ab:4d:61:15:
d6:fd:eb:3c:b8:93:48:e0:62:8e:b1:9a:21:c5:95:
37:e6:d4:95:c3:9b:34:57:01:7c:4f:ff:01:23:5b:
c2:86:ea:6a:20:f7:c6:15:6c:3c:5f:bd:2b:9e:c3:
4e:90:eb:d6:de:b4:f3:a2:c3:80:43:23:37:35:79:
d5:0e:ea:fa:96:3f:d9:b7:91:76:eb:68:ed:6d:1a:
23:e8:3e:58:60:c4:75:6d:cd:9d:f4:6e:7f:26:ea:
c0:e9:bc:54:a0:18:31:e1:67:b6:cf:bb:89:7e:85:
55:de:8d:f4:85:24:8d:0f:4b:4c:57:2e:80:c8:5b:
5e:68:91:c0:6f:e6:5f:93:31:69:15:a1:ee:e9:d6:
24:0b:25:8e:87:56:5b:64:ac:1c:27:ec:1f:35:48:
08:d1:77:ec:3a:6d:d6:8b:36:74:7a:d8:75:97:e0:
48:cc:65:62:92:45:5c:07:e3:a2:e1:ca:8c:7b:16:
de:6b:8a:93:eb:31:9f:61:e7:0f:1c:8e:2b:d2:90:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:59:04:D3:58:1A:D4:F5:14:29:9E:B7:40:BE:42:A6:50:65:8D:CD
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9f:e6:79:7f:88:fe:e1:ca:8f:df:2f:90:c8:2e:34:7d:c0:
e7:1a:ab:f0:65:6b:be:95:bf:83:01:7f:b3:de:fe:2f:b2:8d:
65:0a:00:84:48:d2:03:e3:92:15:58:b7:ab:fd:bf:59:71:ab:
03:45:6a:ee:dd:75:d8:29:99:b1:3c:01:13:97:63:35:8f:6a:
f6:7e:4a:92:b8:5b:3e:ec:e2:c4:41:d2:cb:48:e1:65:10:38:
2a:2c:b1:dc:0d:aa:2b:c8:d5:53:4f:d1:b4:b8:8d:dd:97:03:
da:db:18:14:f1:3b:9f:37:70:dc:37:bc:b8:39:a6:60:97:dc:
50:a6:23:b0:33:dd:61:57:1c:c7:7b:78:6a:a4:b9:d3:06:5b:
4a:19:c6:27:c6:b6:81:d0:00:1a:20:aa:cd:d3:45:27:8f:ae:
df:5d:17:28:3c:a8:3f:48:b1:a5:53:0f:ce:50:06:d6:d0:b4:
7a:8d:72:92:0d:8a:11:8f:e4:6f:86:94:8e:04:b1:19:03:9a:
14:5c:da:8b:73:56:5c:dd:34:18:0b:59:12:14:e3:3b:93:45:
ba:97:ce:7d:9f:75:8f:2e:41:6a:7b:d4:2b:d7:e3:fe:4a:1e:
4f:14:dd:e6:b0:25:ad:84:d3:8a:85:20:a2:55:68:64:dc:49:
60:1c:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:47:51 2026 by rpki-client