Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: e7YDH8pDLvbernml7OG3MBiiZVVcG/Udx21+1CGvxlY=
Subject key identifier: 58:16:77:33:B0:9F:17:C6:4E:42:6E:DC:F2:EC:6C:76:B6:5A:67:3B
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 019D27727EF9DCF82B96349F74438336A200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 00:01:48 +0000
Manifest this update: Thu 26 Mar 2026 00:01:48 +0000
Manifest next update: Fri 27 Mar 2026 00:01:48 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: VPNLX1dGDzTrUgR1hnLAGypYjxPgpz61IvIlqPEKxbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7e:f9:dc:f8:2b:96:34:9f:74:43:83:36:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Mar 26 00:01:48 2026 GMT
Not After : Mar 27 00:01:48 2026 GMT
Subject: CN=58167733b09f17c64e426edcf2ec6c76b65a673b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:9a:a4:12:48:f2:31:0c:b6:9b:0d:4b:5f:
c2:88:df:79:88:0d:0e:e8:1b:1f:25:b5:d9:d2:e2:
98:70:e9:a7:74:0a:ac:dc:f7:4c:f1:68:ea:8f:09:
dc:2f:38:d6:0b:9c:49:e7:ed:01:31:13:50:d0:8f:
43:58:da:be:d2:01:75:72:04:13:e3:98:9b:a3:5b:
19:e9:a7:1f:8b:11:b2:79:b6:6d:2f:ef:06:87:78:
02:19:9f:a9:a8:2a:6c:96:8f:33:6a:a9:45:a0:12:
95:38:fe:1b:49:d1:47:48:b9:ee:e7:ae:e9:65:2b:
72:cc:4f:4f:c0:13:c5:88:c9:95:63:a7:c6:11:58:
a9:83:b5:5d:b6:9e:be:34:8f:63:b6:76:34:e1:e4:
ab:60:91:07:57:e2:13:1d:9e:40:73:7a:7e:76:a4:
40:5b:55:2d:fc:de:5f:21:e9:67:23:3f:c8:f8:c1:
13:32:7f:ff:5d:10:32:25:e4:78:23:31:81:25:69:
43:b2:68:66:3d:f8:29:a1:41:74:2a:cd:79:da:8a:
e9:1f:a7:ab:4a:b3:c6:6f:99:b4:98:58:85:5f:29:
0b:77:b4:c4:40:7a:09:ac:5a:53:92:6a:e4:81:dc:
60:40:6a:68:23:e5:9f:cf:ac:5f:7f:44:b3:77:63:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:16:77:33:B0:9F:17:C6:4E:42:6E:DC:F2:EC:6C:76:B6:5A:67:3B
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b3:9a:eb:98:12:44:f7:13:8c:63:9c:e1:47:aa:3d:7c:e2:
7a:43:62:7a:0d:55:92:f8:e9:1c:0d:99:d4:89:cc:66:03:54:
7c:84:1a:42:98:5b:7e:e1:fd:83:98:53:70:7e:80:9d:07:90:
bd:8f:9f:c5:e2:6d:c5:62:73:cd:7b:be:4f:0e:7e:4e:c0:f7:
a7:08:81:af:09:cd:f6:19:a0:ad:3e:7f:ce:d9:f3:89:85:94:
3c:4f:03:f1:79:d0:2e:a8:84:8c:5b:97:31:41:59:8a:06:99:
f1:de:2c:f7:b7:15:be:9f:0d:3d:91:27:02:61:10:cf:6e:e7:
af:9f:c7:49:5b:d6:ef:6d:7d:97:2a:5b:9c:d0:05:04:7a:9d:
fd:c6:68:00:8e:d1:4f:b3:73:a8:4f:39:38:d0:43:bd:97:61:
29:8d:d0:6b:b6:54:3f:fc:8d:5a:33:0b:5e:ce:a3:0d:d5:74:
90:93:47:13:40:6b:ba:7d:5c:36:df:5e:ed:83:a0:e5:34:4a:
46:c6:7e:78:b6:d3:ce:f1:26:6e:d9:fd:2d:21:c2:fb:0d:e8:
7a:55:ed:50:c7:41:ec:1b:cf:a3:22:6d:f7:25:c2:69:15:14:
d2:91:d5:7e:8b:cb:9d:51:7a:c5:fc:c0:df:62:56:ff:32:bf:
71:28:b1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:59 2026 by rpki-client