Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: +b//OOJmmLuS1jrvzwg0IPCegP17t0lIWyX+yovSCow=
Subject key identifier: 58:9A:8E:CA:31:3A:60:57:B5:F6:7A:B3:FD:31:F8:B0:B3:AB:77:BF
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019D27E01969767F0E9BB6CCE15BA9554532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 02:01:31 +0000
Manifest this update: Thu 26 Mar 2026 02:01:31 +0000
Manifest next update: Fri 27 Mar 2026 02:01:31 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: jYiNMJNatyQ8EYtwvJ0InxUGhd4rB5r0FXKct2efVNc=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:19:69:76:7f:0e:9b:b6:cc:e1:5b:a9:55:45:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Mar 26 02:01:31 2026 GMT
Not After : Mar 27 02:01:31 2026 GMT
Subject: CN=589a8eca313a6057b5f67ab3fd31f8b0b3ab77bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:e9:e4:11:c1:10:f4:9f:c1:8e:7f:57:ec:
cb:b9:5e:96:c1:e4:af:27:42:25:68:44:3a:cc:a5:
f2:b8:0e:a5:6a:7f:c2:06:54:fd:43:2b:ae:04:d6:
d7:04:02:6e:cd:b9:27:d5:90:4d:0e:67:82:61:57:
17:a0:1f:c9:91:2b:0e:51:bc:c9:f1:b8:79:a5:61:
67:6f:8d:f7:ea:c8:f8:21:84:12:a3:98:d0:e3:7d:
fe:cd:b4:99:d0:27:ec:2e:9f:ff:ac:11:1a:ca:68:
b0:ef:f7:91:12:4f:98:74:0a:63:a2:ba:21:9b:31:
41:41:6b:b5:56:b3:08:4b:5b:cb:f9:84:df:78:a8:
05:e8:dc:49:6a:2e:0a:3b:25:7e:bd:4e:43:5b:a2:
79:74:af:78:7c:e9:da:2a:4d:6d:62:21:1e:b0:a2:
61:fc:35:53:f0:01:df:12:01:cc:8b:83:eb:1d:bb:
6b:0e:98:5c:ca:7b:9c:7f:19:60:64:b5:32:f1:02:
56:bf:ef:53:24:00:95:7c:44:32:06:46:bd:1b:7e:
0a:b6:a5:70:03:ba:14:b8:5a:80:76:bb:e3:e7:f9:
34:d6:9a:79:96:96:b8:16:6e:9e:53:4e:32:48:3c:
88:3b:92:b3:e6:9c:04:93:6a:6a:28:b4:ca:d4:f4:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9A:8E:CA:31:3A:60:57:B5:F6:7A:B3:FD:31:F8:B0:B3:AB:77:BF
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:53:4e:ae:54:58:42:98:7e:4c:b2:10:de:9c:e3:fe:64:0f:
32:9c:21:ea:04:ed:f0:de:f9:19:22:46:71:8f:4f:3b:e1:c4:
51:56:92:9f:93:8b:a8:03:7d:e2:b3:87:f3:54:fe:23:08:5f:
5b:36:e7:07:e8:c3:cd:fc:9d:bb:0b:75:7f:dc:cf:55:3b:98:
e6:b6:45:de:b2:3d:9e:71:67:af:56:f7:f6:74:af:6c:90:19:
95:d8:3a:2d:6b:90:15:8a:43:14:a7:ac:88:7d:e7:f2:af:90:
0a:be:57:6e:bb:5f:f4:21:48:90:ce:e1:83:8e:56:1e:b4:15:
18:ea:e4:c6:be:04:24:ca:29:50:d2:e8:1d:b7:a1:11:49:8f:
50:8d:2f:cc:ed:ba:77:ab:f1:07:c9:f3:24:2d:e8:ba:b1:ce:
ea:3e:22:6f:20:2b:ac:bf:a9:36:91:8b:6f:eb:9d:48:a3:b1:
ca:fc:a2:60:c7:22:86:c1:4b:ef:21:66:26:85:af:d0:b3:fe:
a1:c1:eb:7f:dd:91:b9:95:5a:bc:0b:64:a6:67:3b:8b:08:12:
81:f7:3f:88:cd:4d:ee:6c:5d:90:05:54:14:62:fe:93:05:3f:
0a:42:72:31:4e:4a:97:d4:b9:78:20:42:ed:99:a9:21:07:d0:
a7:50:35:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:28 2026 by rpki-client