Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier: Lvn3JxXO5skFaDnXNk3+K/VJqpoH2tsBuXLN4TQhqIU=
Subject key identifier: A6:DD:68:94:E8:6A:4F:8B:36:FA:D5:D4:EA:81:96:2D:90:0E:A3:95
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial: 019D25BA618C7449C0BE4665472DD3E460CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number: 187F
Signing time: Wed 25 Mar 2026 16:01:04 +0000
Manifest this update: Wed 25 Mar 2026 16:01:04 +0000
Manifest next update: Thu 26 Mar 2026 16:01:04 +0000
Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: /NtygwZCHQI1/vhTuWcvXnsgOohdBSzwMPYsdmoBsKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:61:8c:74:49:c0:be:46:65:47:2d:d3:e4:60:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Validity
Not Before: Mar 25 16:01:04 2026 GMT
Not After : Mar 26 16:01:04 2026 GMT
Subject: CN=a6dd6894e86a4f8b36fad5d4ea81962d900ea395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:b9:29:30:64:c2:0f:19:87:2e:23:25:6d:
fa:59:58:fc:6a:34:1a:79:7d:7d:83:3b:02:04:8d:
3b:1c:1c:a0:19:85:92:59:f1:9f:cd:61:55:2d:e8:
d9:b4:d1:2b:be:b2:6a:f6:e5:5d:3e:c5:06:8b:5e:
cb:53:f0:3a:6e:5a:67:45:51:39:e3:38:bb:5f:9a:
75:84:53:92:a7:46:ba:94:f1:26:17:10:0f:d1:af:
5d:cb:46:74:94:96:15:3b:e4:8e:0a:85:b7:35:5d:
df:a8:c0:c4:85:05:9e:2f:80:07:31:29:49:5a:48:
4b:1b:e6:dd:4d:b9:5e:51:1e:ad:1a:b5:93:59:f6:
39:ba:c4:a8:bc:10:24:54:d7:e9:11:24:97:1b:bd:
54:ac:9e:a7:f0:9f:d6:7b:36:43:44:23:1e:aa:46:
36:f8:14:02:c8:39:d7:88:38:25:54:25:4c:6e:91:
e8:59:75:6e:b9:f4:a6:26:ff:2f:b0:cd:7c:e3:f4:
c0:d1:c5:da:46:84:4b:97:d3:8a:5a:cf:b9:ac:7e:
58:da:8d:af:ba:0c:a4:28:2e:7f:c9:97:62:8c:4d:
b4:37:7c:89:7f:62:4a:e0:5b:0c:09:c7:81:d6:da:
34:4c:59:48:c7:26:35:d6:0b:af:7e:93:cf:47:55:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DD:68:94:E8:6A:4F:8B:36:FA:D5:D4:EA:81:96:2D:90:0E:A3:95
X509v3 Authority Key Identifier:
keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:09:63:9e:41:d0:d6:a6:5b:a4:74:06:56:72:4e:2a:c0:9b:
28:dc:64:5a:b7:d9:e6:54:ad:e5:56:47:d3:d0:e6:7b:5a:f1:
81:2b:a1:72:f4:b8:40:2a:ea:b9:d0:b5:31:a0:53:ab:80:5e:
13:8e:44:87:74:c3:02:a8:87:30:e8:c2:6a:c7:36:0e:07:53:
d6:59:96:c0:a7:c1:01:e3:6e:e7:ee:62:a9:ab:ed:4b:b3:57:
c6:00:92:f1:40:47:0c:76:9d:83:76:f9:ac:2c:15:b3:4c:4d:
04:e6:68:c6:a3:30:15:d4:25:f4:ab:84:70:32:e0:91:fe:ca:
58:79:37:f6:a9:71:1c:e9:ae:66:97:11:99:e2:73:68:80:a0:
c9:41:12:0d:07:31:ba:e1:01:45:7b:80:3c:06:98:c8:a5:8e:
70:a9:7a:f2:7e:9a:c7:3c:3c:41:31:46:99:d3:7c:58:61:45:
5b:7c:bb:98:3f:b2:81:d6:0d:01:21:c4:0e:8f:a4:9c:ac:02:
b4:ff:d9:c4:29:14:2c:e0:03:09:8b:5f:db:65:00:10:a8:58:
40:75:9e:9f:cb:d3:69:99:6e:34:3a:d1:14:30:c2:56:cc:8f:
51:b7:b3:fe:f7:15:20:37:51:a0:42:65:2b:40:a7:82:63:07:
e6:1f:24:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:20 2026 by rpki-client