Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
File: 0F9s96mFiwKHHBx_E9GzOIDpii0.mft (raw, json)
Hash identifier: ZQQmGlmCx7wCwUUCjue35T/fk2fxuR1idXm9vnBVEM8=
Subject key identifier: 94:27:95:6B:CB:8F:F6:F4:30:DC:0E:07:09:A6:7A:3E:2B:A7:17:2C
Authority key identifier: D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D
Certificate issuer: /CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d
Certificate serial: 019D26280A022DCAFD1FCAD74E7FE17CB8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
Manifest number: 010A
Signing time: Wed 25 Mar 2026 18:00:51 +0000
Manifest this update: Wed 25 Mar 2026 18:00:51 +0000
Manifest next update: Thu 26 Mar 2026 18:00:51 +0000
Files and hashes: 1: 0F9s96mFiwKHHBx_E9GzOIDpii0.crl (hash: Z0fBUxo0tixNbstRQ//+xoI51ktljKB505aG33ki6Xw=)
2: dIxRZVoK391SO4N57N0kDl39xT8.roa (hash: svamFcAbrklGijDHK+E9cDfDGI1J3qNLX+B2lQjxTj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0a:02:2d:ca:fd:1f:ca:d7:4e:7f:e1:7c:b8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d
Validity
Not Before: Mar 25 18:00:51 2026 GMT
Not After : Mar 26 18:00:51 2026 GMT
Subject: CN=9427956bcb8ff6f430dc0e0709a67a3e2ba7172c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:51:55:d5:f6:14:2c:2e:54:e7:9f:67:9c:
72:79:14:3b:f3:a2:e7:2c:38:87:21:23:35:31:db:
0a:25:1d:9e:1d:c4:d4:aa:3a:0c:31:a2:d6:ab:65:
7b:a3:d2:4f:d1:06:91:9c:7b:2c:f4:35:e1:51:ca:
3c:e9:ab:c4:35:50:ff:35:76:2c:c1:cd:b5:e5:b7:
02:96:a1:f0:5b:dc:5c:0c:17:3f:87:87:27:f4:56:
96:f8:e6:84:f6:31:b9:34:51:88:13:d7:d3:9d:af:
e0:5b:86:40:bd:42:0b:d5:fa:56:b4:0f:27:2d:60:
c8:c6:a4:c2:f2:54:51:db:b3:67:8b:f3:0b:18:1a:
79:88:95:eb:af:33:9d:8d:a7:b4:f6:c0:30:5f:05:
7a:e3:85:5f:7c:38:b5:b4:bf:77:25:05:c9:65:02:
33:39:bf:87:c1:02:c9:0f:d2:ab:1a:e6:fa:ec:84:
c5:6e:37:06:a0:08:0b:74:78:4a:60:fc:e2:ec:ac:
ce:b0:9e:bb:62:e7:3a:3f:6f:64:c4:7b:a1:58:d7:
66:0f:5b:62:cd:ce:58:79:13:73:77:57:0a:80:0b:
fb:61:39:09:3c:48:38:0f:fa:20:af:5f:15:58:4a:
52:42:bc:1f:a2:ad:46:02:31:83:a8:d2:dd:b9:0c:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:27:95:6B:CB:8F:F6:F4:30:DC:0E:07:09:A6:7A:3E:2B:A7:17:2C
X509v3 Authority Key Identifier:
keyid:D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:39:bf:b5:24:57:69:ba:af:8d:e1:b0:7e:67:02:6a:7e:ef:
9b:3f:65:c7:df:94:32:da:bf:db:d8:65:05:83:97:59:9e:6f:
ca:d9:31:42:8e:93:82:f6:6c:58:25:3d:b4:d8:3a:16:67:30:
5d:17:6d:24:2a:d4:21:f2:0e:24:59:a2:a4:7a:fc:c9:74:0c:
ca:b5:8a:57:4c:b4:5d:36:ce:33:47:c3:90:31:33:d2:c5:05:
0a:a6:da:86:71:43:4e:cc:3f:3f:b3:9f:0e:42:88:d2:36:21:
44:fe:38:c4:5c:1e:8e:f1:f1:2c:0b:6b:7d:3f:01:91:93:0f:
1d:22:9e:00:e3:f7:5e:a5:f2:63:11:51:49:93:b3:53:e2:be:
54:03:8d:6f:9d:ec:b4:13:0e:d3:8b:a9:d1:a3:c2:c6:1c:a9:
42:b3:55:a4:85:7b:74:b7:00:b1:5d:61:0f:60:70:55:9c:e8:
42:4c:2b:c7:3a:64:64:68:a0:92:f8:b8:c2:0e:b4:a9:d3:2a:
24:fb:11:e2:cc:10:09:33:92:df:7d:52:92:31:79:57:02:e2:
4c:3d:31:ce:42:7d:fb:31:99:1a:ea:25:84:6d:4a:84:34:12:
cf:01:12:88:83:4d:54:7d:36:5b:9c:b3:8c:06:c6:ed:65:38:
3b:14:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:12:24 2026 by rpki-client