Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: XnwXeJoaVORCxXE6gvtvotq1OpCpZ/c8olA/M85TI3g=
Subject key identifier: 14:AD:64:FF:D1:9E:C0:BD:E5:D2:95:6C:F1:F2:FF:34:37:21:63:64
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 019D25F140944713EB5DBB757B201E9825CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:01:00 +0000
Manifest this update: Wed 25 Mar 2026 17:01:00 +0000
Manifest next update: Thu 26 Mar 2026 17:01:00 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: gKkaPhRxtSrtzFRd47QHANnq5rqNUmZf9Wo2KOp5NM4=)
2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:40:94:47:13:eb:5d:bb:75:7b:20:1e:98:25:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Mar 25 17:01:00 2026 GMT
Not After : Mar 26 17:01:00 2026 GMT
Subject: CN=14ad64ffd19ec0bde5d2956cf1f2ff3437216364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:16:4a:c0:71:ad:a6:b0:ad:18:11:d5:aa:
ff:07:3d:30:64:15:b4:79:d1:f6:c4:7a:13:2b:7f:
a4:34:69:2c:07:d2:eb:20:88:57:59:29:cd:12:07:
2c:6b:07:46:18:1a:07:4a:4e:cc:64:0c:78:d0:b1:
d7:d3:51:5c:b3:ce:76:75:f2:c4:92:a2:7f:d0:90:
87:5d:67:48:c6:10:c7:1b:e7:46:1c:95:c8:25:dd:
a2:77:06:ad:2a:38:cb:01:2b:47:56:ef:16:27:3b:
a1:d8:c3:d6:86:cb:13:a2:bc:71:86:2a:97:23:b3:
62:10:b1:5b:3c:58:86:d9:08:3b:32:ef:66:ea:fd:
5d:f0:f0:5d:e6:1f:1b:25:9a:22:7e:23:37:7c:76:
b2:97:98:b4:94:ae:cc:4b:29:f9:f7:f4:4d:52:0c:
83:ca:41:66:06:c0:85:9a:0a:74:98:b6:10:41:49:
be:ff:95:8d:f7:30:9f:65:6d:32:98:9a:a8:05:54:
7f:86:a1:c0:aa:49:ab:c5:95:88:9c:d8:a2:4e:9e:
bf:07:0c:de:81:4d:7a:c3:19:05:26:fd:69:f3:57:
81:29:0c:34:84:50:f2:6a:3e:6d:96:61:f2:e5:93:
0f:db:bf:91:eb:15:ca:9f:d6:d8:84:46:f1:a9:b5:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AD:64:FF:D1:9E:C0:BD:E5:D2:95:6C:F1:F2:FF:34:37:21:63:64
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:aa:6a:0c:2d:d4:df:6b:96:4e:81:ee:63:8c:9c:5c:c6:b8:
16:da:ca:85:69:4d:7a:6d:58:fb:a7:a4:24:f8:34:1f:95:60:
48:d7:f9:99:b0:f8:f8:b4:40:97:af:d0:83:7d:d7:68:ae:e6:
61:a6:b5:54:a6:58:f4:18:f6:a3:51:15:87:6b:49:50:f8:f5:
0c:6d:e4:12:7c:f2:0e:6c:7f:02:b2:63:c0:ef:6d:75:12:fc:
26:71:16:0b:36:14:1e:00:22:76:be:95:13:84:a6:69:50:bb:
d9:9b:9c:d0:a2:29:eb:f2:12:93:05:c9:74:16:42:9d:e5:f2:
02:ae:11:b7:be:2a:4a:ab:e2:03:e7:8c:37:1c:f0:0e:85:fb:
a0:07:53:56:03:51:14:13:03:de:a0:5c:e8:f6:be:26:35:e1:
ba:fc:a3:8d:b5:1c:5b:6c:a0:18:0d:1f:2b:fe:b2:a3:aa:d2:
0b:2a:06:e8:9b:d9:ef:de:6e:13:82:2a:12:1f:41:6f:45:c4:
38:c0:da:ef:46:2e:70:4f:27:b9:7a:5d:fb:88:fd:bc:f9:e4:
4d:83:70:a9:8b:a0:6c:11:96:0f:8a:6d:ab:3e:dc:d9:d7:93:
0e:0c:a2:98:2f:42:bd:4c:2d:4a:c8:ab:5a:33:c2:ac:59:53:
4b:01:1e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:45 2026 by rpki-client