Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: 0s+8v6LUOrTwKIcqarAJoKRnL3jgSQZXkJ7wN0PJZAU=
Subject key identifier: 0B:8B:CA:20:DA:72:47:0B:10:E2:B5:46:8B:35:77:A7:C1:74:4E:96
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 019E1D226758DE57400B3B28414816294E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 17:00:54 +0000
Manifest this update: Tue 12 May 2026 17:00:54 +0000
Manifest next update: Wed 13 May 2026 17:00:54 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: w4f2ysnerG/dyXhKdoPpLIK/TY7p23OiBHaDc6tWT1Q=)
2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:67:58:de:57:40:0b:3b:28:41:48:16:29:4e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: May 12 17:00:54 2026 GMT
Not After : May 13 17:00:54 2026 GMT
Subject: CN=0b8bca20da72470b10e2b5468b3577a7c1744e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:90:3d:81:60:50:64:4a:6f:e2:58:d3:13:
61:9e:91:19:f2:7d:6f:c6:59:7b:b7:c7:9f:56:72:
aa:51:2d:c6:f6:47:a5:72:ed:98:4d:52:c4:a7:10:
e9:b5:49:c6:82:1b:44:67:c1:29:03:91:e7:d8:b2:
fd:5b:b1:93:0d:4d:86:70:26:66:fa:28:cb:87:ac:
03:1f:01:1c:5d:5a:fc:9c:a3:22:68:f6:af:8c:e3:
9a:8f:d3:fd:04:8a:37:d1:db:a2:ea:b0:bd:0a:7a:
04:c3:70:63:07:82:0b:22:86:1a:87:ff:3a:54:e2:
e7:6e:3d:d7:24:be:b3:8d:fd:17:a7:79:ff:1d:74:
dd:0a:4b:39:66:dd:2c:3b:ab:91:03:4c:ec:80:79:
37:56:2e:23:17:f1:b6:e2:bd:49:c8:47:b5:25:a8:
17:8c:6f:f1:c8:cf:c7:c8:75:0b:d6:35:13:d1:a5:
2c:3a:d2:f3:b7:e0:fb:5a:a4:64:f2:51:a9:7d:1f:
e5:f3:62:33:79:97:97:78:48:5e:e5:a9:ba:0e:85:
3c:97:05:48:96:d9:82:f2:42:1d:98:8f:13:16:09:
3b:9b:03:ce:b1:e8:b2:c4:81:fe:a6:59:4c:de:56:
4d:0d:e5:ef:15:5d:3b:12:ca:37:55:c9:74:b4:72:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8B:CA:20:DA:72:47:0B:10:E2:B5:46:8B:35:77:A7:C1:74:4E:96
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ec:98:78:1f:ac:c9:63:12:08:fd:ab:3e:72:48:51:9a:ca:
1c:96:22:e9:b8:b4:b8:e5:e9:6b:37:6b:4c:26:35:a7:79:9d:
40:a2:dd:4c:bc:dd:30:4d:e3:f6:8f:62:c6:ab:48:6b:07:6d:
81:c6:5d:43:f3:dd:f9:3a:e2:3a:b4:32:d1:2b:2e:f7:c9:7a:
de:08:9a:05:92:ad:d1:d6:58:e8:0a:c7:59:0b:57:a6:72:34:
5d:b5:1b:53:cc:e2:a5:9b:5b:cf:e6:a3:2e:11:94:72:8f:50:
e8:5b:1e:58:6b:73:44:3f:7f:21:49:cd:ce:76:dd:3e:8e:ed:
f7:14:30:8b:53:bf:2f:cb:d8:1c:ba:c8:00:c8:13:61:3d:41:
db:96:ab:e2:85:7e:b4:31:aa:0c:d2:12:6a:ff:6d:a6:ea:b7:
b2:23:d4:99:52:d1:e9:ac:0c:57:f7:b4:c8:d5:91:04:98:2a:
5b:66:e3:c3:9b:dd:c6:29:89:e2:2f:31:36:ce:05:01:5f:d1:
46:19:a3:ef:90:6c:bd:c5:e7:9f:6f:0d:85:8b:c1:32:2c:2a:
c8:86:2c:b2:74:cf:a2:53:97:48:d8:77:71:03:78:7f:1d:c5:
88:82:77:ee:14:65:dd:ef:7a:32:53:e5:39:28:03:de:ae:7c:
5b:bf:f5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:06 2026 by rpki-client