Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: maMB5XNbgdcVYvjVNmWqe3Mhi3mRIh2zigVa86m/ED8=
Subject key identifier: 15:AA:9F:CE:AA:1D:49:DA:4F:2E:8F:34:D7:55:07:90:EC:A4:D8:19
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 019D2771D0D48FC798309903C2A463733A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 02E2
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: zhxTrss0WyCbIRdUf5xZsND/KNHIMSB+64NO5bisvEo=)
2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=)
3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d0:d4:8f:c7:98:30:99:03:c2:a4:63:73:3a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=15aa9fceaa1d49da4f2e8f34d7550790eca4d819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:27:12:0d:a1:4a:a2:ca:03:08:7a:51:3f:1a:
f7:8f:38:16:54:aa:61:a4:81:ee:f5:27:12:ed:9a:
09:3a:66:16:e2:a4:5e:7e:ee:ac:05:85:ae:f7:34:
ab:25:5a:f5:4c:77:83:76:ff:eb:bb:a6:50:63:4a:
8d:69:5b:1d:6d:f8:2e:c8:1f:a6:fd:53:d8:78:b9:
55:de:74:37:ab:bd:05:14:90:11:73:72:e9:16:4e:
a0:0f:e6:f4:e6:83:3c:44:2b:66:e4:aa:58:ea:27:
2f:a1:07:c9:86:2a:61:d3:ff:92:67:9f:86:2c:97:
15:02:64:d1:cd:51:7a:8c:49:b9:dd:d4:da:8c:1d:
6c:df:61:40:66:c7:85:0b:30:a2:51:1a:f6:2f:99:
78:e6:85:6e:aa:b6:d5:50:c1:6d:65:8f:5a:83:b4:
a5:52:a3:45:10:de:bf:7f:12:ba:c6:df:86:0a:53:
99:5c:14:bb:42:4d:c5:22:0c:17:49:b3:b2:7f:eb:
3b:6e:79:4b:af:13:2a:4d:9e:57:bd:87:3e:3e:9d:
be:c1:e3:7b:48:48:cf:b2:6f:5b:66:c5:d3:11:3d:
ea:e1:c3:f6:57:f4:e6:f2:57:b5:06:5f:45:cf:fc:
00:37:38:33:5f:53:da:3b:25:04:6b:e0:fd:20:5a:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AA:9F:CE:AA:1D:49:DA:4F:2E:8F:34:D7:55:07:90:EC:A4:D8:19
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:44:7c:34:0a:b9:24:86:f4:ae:4c:a1:19:3d:7c:80:57:e4:
8a:e4:7e:00:75:86:4f:74:b3:a9:c9:57:1f:e8:5a:f6:fd:99:
4c:9d:64:09:5f:45:ac:fc:52:35:7c:6b:57:90:fd:7f:f8:30:
74:d1:e8:9f:a5:99:87:62:e0:fd:7f:dc:12:63:bb:ef:64:bf:
12:09:87:b7:69:c1:9f:09:7c:25:d1:f6:bc:f5:b8:82:38:a4:
dd:ce:a3:9c:fc:64:c8:be:83:02:03:c6:bb:5e:a6:a2:a2:e3:
5c:64:05:64:44:3a:84:33:76:a8:f4:c2:8a:2d:4f:13:9e:40:
47:16:e1:c8:f0:89:19:ae:c6:7e:d0:8d:0f:d8:3a:a0:6d:97:
b7:3b:07:f6:70:8e:9b:a7:14:63:80:ea:50:a5:e9:d4:63:c4:
04:85:8d:78:ad:9c:c4:81:e3:dd:9c:4d:cc:1c:11:a5:25:89:
81:88:56:82:34:60:60:4d:3b:3b:dd:8d:c8:6d:b7:f2:75:66:
78:42:a4:b7:ea:f4:5e:ed:58:d2:69:d2:07:d9:9b:0b:7e:84:
96:3c:b4:46:e5:9b:0e:e9:fd:bd:90:04:19:6e:4b:ad:0e:b1:
56:9f:3a:d7:83:38:8b:aa:1e:e9:49:24:6d:a5:04:e5:f0:c3:
18:92:71:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:28 2026 by rpki-client