Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: 4+faPJm+fwWb/RS+Jo/zKN13Whyncz1TZTt6Q2rLgi4=
Subject key identifier: C9:1C:C6:A7:C1:7F:EA:04:A1:68:A3:A1:A2:0B:1C:D3:3B:4D:8C:D2
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 019D2C97D5E7A98FEDDF8759B25AE4767CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 15CB
Signing time: Fri 27 Mar 2026 00:00:41 +0000
Manifest this update: Fri 27 Mar 2026 00:00:41 +0000
Manifest next update: Sat 28 Mar 2026 00:00:41 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: 5DI8cjykbuYVW0WPWgH37y/bKdolMXyu6NP4EqtEkdU=)
2: _1jwukIhOCi8MpxTLw5Kv601c_s.roa (hash: 0/3KAxQZwAWnmzvMwd4pIg6xUGZxILgfs+mT+10r3v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:97:d5:e7:a9:8f:ed:df:87:59:b2:5a:e4:76:7c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Mar 27 00:00:41 2026 GMT
Not After : Mar 28 00:00:41 2026 GMT
Subject: CN=c91cc6a7c17fea04a168a3a1a20b1cd33b4d8cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:05:01:6d:0d:df:29:e0:4d:29:52:f8:d0:
de:fa:af:db:0b:17:c9:3b:05:4f:a7:e0:5a:c8:54:
70:82:7f:09:31:6f:68:a1:ef:27:01:06:be:47:27:
bb:e5:61:52:32:9c:75:30:b5:59:a8:b0:05:02:43:
7d:26:a2:86:c1:f5:dd:73:05:c5:d4:23:9f:49:a1:
a7:4c:05:aa:35:51:d9:2a:a0:18:49:b6:76:d5:87:
68:f5:61:f0:3f:97:d2:ea:69:77:94:21:35:31:2e:
53:2f:77:07:5c:ae:32:0d:31:68:8a:1d:13:c9:31:
1d:8c:e8:34:ff:24:1f:9e:5e:d3:d0:8e:24:88:f5:
86:23:a6:db:fb:9f:26:ea:38:9d:6d:b2:36:48:92:
d9:dd:b3:95:aa:1c:a7:a4:76:4a:ee:c1:12:54:dc:
0f:43:6f:f1:2a:ef:58:cf:1b:07:be:8e:61:28:55:
8d:32:3a:4e:b1:cd:b7:64:7d:37:96:b9:5c:9b:68:
fb:24:f1:5a:63:b5:7e:1b:70:ec:1b:3c:5f:d1:b4:
24:71:17:87:6b:36:00:ec:da:18:67:4e:f8:45:ea:
36:74:6b:34:44:63:3e:b6:4b:6f:67:69:54:e0:bc:
0f:70:73:a9:71:53:d5:f9:e2:40:b8:39:b7:32:aa:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1C:C6:A7:C1:7F:EA:04:A1:68:A3:A1:A2:0B:1C:D3:3B:4D:8C:D2
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c5:2a:b1:c3:db:19:42:a7:46:0d:8f:1b:4a:cd:4e:ad:ef:
98:a9:13:03:bb:e6:e5:3b:2c:3a:16:5c:95:f0:9a:c3:b0:97:
c1:b8:eb:d5:18:51:5c:52:32:b6:06:05:89:b1:53:03:b5:e7:
29:dd:7f:ca:a2:82:0d:f6:bf:9b:81:a6:b9:e1:b6:37:f8:80:
11:bd:74:ba:0b:11:3e:bc:0c:25:c5:cd:7f:28:55:29:0d:f2:
da:ff:7c:9d:a1:0d:43:e9:4d:01:28:ee:c2:e5:c1:a1:c1:82:
7f:4d:b5:80:d9:fd:ca:54:6c:77:b8:d3:8b:0e:18:ed:cb:09:
fa:cc:46:d8:a5:3f:28:b3:0e:b6:83:b5:9d:69:cd:57:41:a6:
63:02:08:aa:84:c5:93:a9:34:3c:38:b9:33:fd:2e:89:e5:33:
e8:69:df:e5:51:1c:f9:87:9a:bc:dc:77:bc:0f:92:5d:1f:a2:
f8:28:75:9e:72:6c:b1:13:56:0b:a0:1f:b9:6b:47:a5:3b:56:
66:f6:45:ad:73:d8:35:a0:e4:0c:a6:d0:d2:2f:4f:8c:4a:19:
60:2b:ee:16:02:8c:9d:d0:b1:46:45:d1:6c:60:4b:e4:cd:8a:
e0:89:57:40:7c:a4:9c:3f:a8:3d:37:6e:a4:0f:6b:c9:83:e6:
aa:a1:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:45:31 2026 by rpki-client