Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: MLFdB5HuTTgQXebUXVDlN3Ih8GF4HmvVFh0cX6RAJiI=
Subject key identifier: 64:FC:84:24:06:9B:00:FB:A4:30:6F:B2:4D:92:12:4A:A5:D0:8E:2B
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 01A17EF3ABEA882AD92C5DC12DBB196E73FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 1AC9
Signing time: Tue 27 Oct 2026 20:01:00 +0000
Manifest this update: Tue 27 Oct 2026 20:01:00 +0000
Manifest next update: Wed 28 Oct 2026 20:01:00 +0000
Files and hashes: 1: NyFyTToHrV_iLH9GIOJWP_TIsh4.roa (hash: qqHJlBF+PNPUtrTddnKLqGJ5Fxf9M5uhm+M+K7k/8g4=)
2: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: 2vnczH7EJbX44UNG+ezF5MZnc8irwU1pa3ivcUUESBo=)
3: TDJw8c2ugNuZzTvDh-dhjlcAHEQ.roa (hash: i8ViOgSKUgk23gc5KboIyTVKvb8lTiASE07Nhp1UbTE=)
4: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (hash: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:ab:ea:88:2a:d9:2c:5d:c1:2d:bb:19:6e:73:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Oct 27 20:01:00 2026 GMT
Not After : Oct 28 20:01:00 2026 GMT
Subject: CN=64fc8424069b00fba4306fb24d92124aa5d08e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:15:86:75:91:0c:4c:84:9f:2f:bc:44:19:
42:d8:f5:b0:96:05:73:ef:01:49:32:30:8b:0d:4d:
b7:06:ae:b6:f0:fe:14:9e:7d:64:22:76:03:7e:f1:
7d:3a:ba:e7:e0:f7:2c:1a:42:4f:4a:30:d9:8f:0c:
94:5a:7b:b5:33:4a:b9:a2:77:5d:2b:eb:87:b7:bc:
dd:0a:59:37:15:11:ed:56:a7:a6:5b:a9:65:7d:91:
03:f9:31:09:70:f9:71:ab:52:b3:64:8e:28:19:b6:
5a:a9:8d:45:62:ee:b2:08:99:aa:ca:3b:90:98:17:
d2:a6:b1:17:46:fb:c5:ec:7a:bf:b9:71:6c:20:6f:
d3:40:02:12:bb:d8:9a:6d:e4:9c:cb:79:aa:53:9c:
90:4c:e9:b5:24:a3:76:73:7a:5f:2a:17:97:89:4a:
44:86:06:53:51:4e:cd:66:56:c3:db:af:8a:a1:8f:
2e:e3:a4:ca:37:6f:87:1d:12:11:f7:9e:a0:e4:83:
4b:87:9a:b6:b8:11:67:5c:79:6e:13:aa:b2:0d:b6:
d9:5d:37:e8:9e:29:ff:a1:09:3a:fa:c5:ff:d6:c8:
e8:f4:0a:83:e3:20:bb:95:a2:21:e1:a5:71:24:cc:
7f:65:a2:99:1e:cc:db:22:08:38:3f:fb:bd:3c:86:
dd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:84:24:06:9B:00:FB:A4:30:6F:B2:4D:92:12:4A:A5:D0:8E:2B
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a7:e9:20:41:80:b4:4f:74:02:ff:2e:74:44:d2:e6:3c:0e:
45:eb:cd:48:54:12:e7:67:e1:dd:12:9b:e3:ff:35:42:92:b2:
c6:ff:be:ad:8c:6f:44:db:8a:7c:20:fb:50:34:ef:45:5c:65:
f1:2b:93:c4:e9:a5:c3:36:c0:6f:28:95:f1:0c:5f:15:cb:aa:
0e:76:80:6d:31:15:3b:82:15:fe:42:d6:93:13:9a:bb:45:e5:
58:ce:79:44:26:e9:80:e1:6e:34:db:e4:f2:fb:7c:30:a1:4f:
8a:47:7b:dd:25:28:7d:c5:aa:93:a6:62:84:3d:a6:1d:44:53:
ba:8d:81:04:61:d7:0f:14:15:ea:55:1e:16:23:24:a7:a1:0c:
e2:71:95:73:95:fb:9e:ac:b4:d7:ef:2d:6a:70:95:b1:34:af:
7e:1e:6f:55:50:ab:58:d3:ee:ad:15:f3:e8:d7:38:f4:f9:6e:
d7:53:5f:e9:ad:70:a4:5a:94:8c:fa:dc:95:92:b4:99:bd:ed:
3b:3b:7a:ab:97:c2:7f:a2:ee:5b:6c:04:13:5a:3f:6c:8a:8e:
5d:7a:c1:e9:0d:94:21:2a:fd:91:96:cd:3c:e9:45:08:4f:ae:
f8:c2:c7:d8:26:a3:e1:3d:6f:78:f1:fc:05:d7:19:c6:45:77:
43:65:45:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:11 2026 by rpki-client