Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: u9RaKu2ldfJQh2oleXVzIceSbtIXWbkQzIRFnedPmRo=
Subject key identifier: A5:F4:A1:A5:1C:F4:AD:F2:49:7A:ED:4C:B0:5E:B5:63:58:9A:76:94
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 019D28F24C6EF7C8BA67BBC0F6414185E77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 1405
Signing time: Thu 26 Mar 2026 07:01:01 +0000
Manifest this update: Thu 26 Mar 2026 07:01:01 +0000
Manifest next update: Fri 27 Mar 2026 07:01:01 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: FvLAnXmaF1r4zHKvy8lUCIWD8t2rIKqtlEMYpsoRl1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:4c:6e:f7:c8:ba:67:bb:c0:f6:41:41:85:e7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Mar 26 07:01:01 2026 GMT
Not After : Mar 27 07:01:01 2026 GMT
Subject: CN=a5f4a1a51cf4adf2497aed4cb05eb563589a7694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:57:44:d5:8f:0e:69:b5:c5:28:3c:cf:65:
a7:0c:43:af:11:42:4c:86:8a:d8:57:a6:01:a3:2f:
51:b0:77:1f:4c:65:e1:30:c3:50:44:7d:6b:42:71:
c8:ac:04:9e:e2:fb:a5:dc:b5:68:07:1b:21:9d:32:
09:2d:55:27:27:03:30:9c:05:14:2e:18:56:59:db:
7c:76:15:1b:75:6d:67:a9:9a:37:ee:a8:ba:1d:b4:
e4:bf:64:cf:0d:4d:1d:10:96:3e:a2:27:1e:06:e5:
fc:eb:4f:23:d4:70:41:f0:0f:e2:2d:aa:5c:2f:4b:
05:d6:d6:0c:8a:49:2e:9a:ed:2d:54:29:35:af:b0:
e3:32:01:76:91:77:e1:76:7f:10:3e:89:16:b3:2d:
e4:19:02:66:df:f8:4d:05:0b:35:ef:4e:e2:7d:44:
88:cd:81:15:18:e1:d3:76:9e:e9:19:fa:93:9f:23:
eb:55:5a:b9:50:57:a2:5b:8a:99:cc:be:fe:bd:fb:
3f:25:3e:d2:17:01:1f:33:1d:59:f0:34:20:76:71:
73:4d:ee:88:73:9e:a7:9b:88:81:0f:b3:e9:38:a5:
39:8d:f1:91:12:29:ae:10:b7:30:e9:03:1a:69:51:
bd:2c:22:48:35:a1:6b:07:83:83:a4:ba:74:3e:40:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F4:A1:A5:1C:F4:AD:F2:49:7A:ED:4C:B0:5E:B5:63:58:9A:76:94
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:be:73:e1:84:16:a9:7a:a2:d7:9d:b8:55:e5:98:aa:04:ec:
2d:ac:9f:ac:02:fb:94:39:d4:89:34:8e:42:06:8e:23:91:31:
42:12:11:9a:95:20:95:cc:0f:44:d3:99:e8:b5:e0:2a:06:19:
9f:30:1c:72:7b:f2:fd:c2:e2:49:09:5c:03:3a:6f:f5:6a:c0:
58:ac:12:46:1e:b8:29:c6:03:bc:e9:71:89:c2:51:b1:5d:30:
c6:44:a0:c2:39:c2:48:b4:6a:9d:07:b5:f1:d7:b6:f9:54:78:
2f:2c:64:56:da:2f:1e:25:ae:66:e6:03:7a:5a:1a:39:d1:47:
4d:12:38:a9:06:df:91:89:1e:2c:5b:90:ea:e4:75:98:40:06:
87:ce:a0:41:7f:dd:20:34:1c:2c:53:88:9b:05:d2:f0:ff:6e:
54:47:f1:37:f5:e5:1b:f0:50:c5:9e:fa:bd:5c:60:82:c0:53:
4f:7c:75:76:56:9f:4b:dd:4e:de:b4:ce:74:9a:8e:9a:4b:20:
6b:37:37:69:ef:87:7b:67:a1:96:47:01:69:46:00:eb:4b:45:
a5:7f:81:b3:a1:e0:69:23:66:d1:76:15:7e:bd:5b:ec:0c:93:
3a:23:a5:23:d5:00:cd:8b:78:31:96:36:68:53:e5:9c:ce:bf:
7c:3c:67:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:51 2026 by rpki-client