Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: EanuwzM548Onff4FgrTLyS5AsLsJwb7g3zM0Fnj6dG4=
Subject key identifier: AC:C2:53:F1:46:B9:03:75:E3:C0:A8:C4:08:96:87:3C:24:82:60:EF
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 019D28BBDCF6F69AA73D89CB956F8770D6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 15C9
Signing time: Thu 26 Mar 2026 06:01:33 +0000
Manifest this update: Thu 26 Mar 2026 06:01:33 +0000
Manifest next update: Fri 27 Mar 2026 06:01:33 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: b4/Tr1yFYNuoX1l/7ysjnpsZFRKdJYCLvzuc1q7L9tM=)
2: _1jwukIhOCi8MpxTLw5Kv601c_s.roa (hash: 0/3KAxQZwAWnmzvMwd4pIg6xUGZxILgfs+mT+10r3v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:dc:f6:f6:9a:a7:3d:89:cb:95:6f:87:70:d6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Mar 26 06:01:33 2026 GMT
Not After : Mar 27 06:01:33 2026 GMT
Subject: CN=acc253f146b90375e3c0a8c40896873c248260ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:aa:44:84:e3:a3:74:b4:e4:83:61:df:d2:
3c:65:9e:2b:9b:31:46:20:c7:f3:4c:1b:a9:ff:7d:
7b:c1:bb:ef:2f:07:64:73:5b:01:4c:8c:e5:36:e2:
28:ba:79:57:bc:86:66:fe:17:dc:53:b5:85:97:29:
1a:55:5d:4b:de:c0:37:60:a5:07:2e:4b:18:42:e7:
b1:0e:1e:62:2f:09:08:e8:64:22:de:e1:1d:2a:6b:
6f:ca:2a:32:9c:29:b4:5f:9d:2d:34:d3:10:b7:d1:
3a:68:7c:62:48:d2:df:13:06:31:83:c2:d7:f5:76:
77:99:93:4a:a6:2c:67:7b:97:fd:ca:83:d6:16:08:
d9:6f:57:f6:27:f3:50:ea:60:32:05:e2:11:c5:e6:
b8:ce:f2:a3:f0:fd:e9:bf:8d:c1:e9:07:7d:70:d5:
ea:ed:3c:6a:e2:7e:83:9d:de:90:bf:f3:64:c5:12:
7c:b8:e2:76:ec:93:06:e9:77:ff:17:5e:08:e6:a3:
58:c6:0d:12:8b:3d:81:60:8f:80:18:c8:a7:69:2f:
09:03:a8:d6:e6:bd:92:d1:1f:7b:91:5c:d2:79:e1:
fb:d1:0c:2e:60:da:a6:b4:c0:a6:ee:a5:f2:1d:22:
c4:2b:f3:eb:b9:31:69:67:34:f5:79:16:7f:5f:3b:
82:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C2:53:F1:46:B9:03:75:E3:C0:A8:C4:08:96:87:3C:24:82:60:EF
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:80:4b:da:4f:c6:72:d8:90:c4:28:8f:ea:5e:4f:56:28:b0:
1b:ec:0b:0b:04:19:b3:58:84:a1:a0:b4:89:f1:4a:20:5e:b8:
d0:a2:2d:ed:24:d7:47:ad:f4:ad:36:3f:46:80:e7:e3:9c:49:
41:ff:95:57:e9:3b:f0:8c:6f:df:e5:5e:be:78:fa:a6:99:7e:
04:86:fb:42:68:87:af:47:58:e0:1b:2d:9a:ab:80:f3:ec:2c:
d8:ae:ad:51:4d:7d:cf:56:ad:42:28:fb:66:61:2b:4c:8f:7b:
d1:89:01:8d:70:9b:4f:41:77:ea:54:8d:b1:5b:c8:0e:56:57:
ba:4c:ba:69:c6:65:e0:cb:5a:c8:46:7d:47:01:8e:ad:f4:f1:
72:a1:19:c5:5d:3c:2d:ab:e4:4b:a6:0a:57:39:7a:ec:74:2f:
5d:07:ec:7b:ef:97:92:64:65:5a:0f:33:82:d8:b6:62:0c:09:
55:73:bb:b3:9c:bc:a7:0a:ee:4c:9b:6d:ac:0e:86:ba:f7:66:
84:4f:b6:de:37:46:e7:79:47:5c:96:02:2f:bd:c3:45:a4:83:
76:3f:2e:6b:0a:91:ea:6a:4a:4a:00:bd:08:36:75:5a:51:1f:
b6:64:27:3b:a9:02:db:33:4c:03:4a:ee:bc:65:5d:de:45:73:
57:0a:17:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:25 2026 by rpki-client