Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: 2g6upuE1oJpBsD/Ms3PYNp4JjUGo0Ep6DSEnrXF6Gew=
Subject key identifier: 0C:F3:42:2D:77:B6:55:FF:43:DF:A9:E8:8D:BF:64:10:90:5A:15:D4
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 019D288423E02ED17DAB6B56D8D4FCB6A560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 0CFC
Signing time: Thu 26 Mar 2026 05:00:41 +0000
Manifest this update: Thu 26 Mar 2026 05:00:41 +0000
Manifest next update: Fri 27 Mar 2026 05:00:41 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: ghRDVpGo9JWQbMmBZ0zOM/InY9UVwnVOSQDMWfxXXlQ=)
2: TujVxWk7elywpyXmIMnDKFw3mNo.roa (hash: Zvi/MCY8l+89SlTxrMXMYRwO5dgOTj98ivE3+1BLbBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:23:e0:2e:d1:7d:ab:6b:56:d8:d4:fc:b6:a5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Mar 26 05:00:41 2026 GMT
Not After : Mar 27 05:00:41 2026 GMT
Subject: CN=0cf3422d77b655ff43dfa9e88dbf6410905a15d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a4:99:03:da:1f:c8:43:54:09:98:ca:c0:24:
c3:06:3d:44:84:52:ab:fc:3a:33:f9:a0:8c:f4:08:
1c:91:a2:9a:7e:db:9e:07:e1:ae:61:80:71:5d:5b:
58:c9:03:49:f7:a6:b8:af:e2:e8:fb:d7:88:2b:82:
a6:6b:da:cd:55:d1:48:cb:2e:34:ea:48:37:99:63:
ce:53:c5:ca:27:6d:aa:59:4c:a5:4a:ac:db:03:d4:
60:5d:35:1e:7d:16:a2:5e:16:05:b2:c3:cf:95:2f:
55:30:9f:3e:d6:83:e3:c7:f9:54:36:bd:40:46:b2:
8a:0a:b2:e0:8f:e6:c9:28:37:d7:f0:92:56:b3:0a:
74:75:a6:e8:9c:8f:e8:f1:34:54:57:93:09:0c:76:
f3:93:27:02:f8:6d:00:d1:f0:5e:31:4e:8e:18:fb:
23:0c:91:d9:fa:09:5e:51:dd:d6:57:ef:7d:9a:5e:
d6:14:1e:91:05:d9:fe:96:28:e7:64:ce:b3:79:fe:
e7:e3:dd:47:bf:ff:0c:12:f5:92:0c:7b:38:c8:2f:
bb:7f:f5:50:a0:1f:b4:0b:3e:d8:2d:71:69:d6:0a:
d1:80:4c:3d:c3:5b:ee:75:ae:c6:64:8c:8d:4b:76:
19:ed:f9:71:59:c7:1b:49:85:e6:f0:fa:2a:46:9b:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F3:42:2D:77:B6:55:FF:43:DF:A9:E8:8D:BF:64:10:90:5A:15:D4
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:68:33:62:ff:77:cd:15:69:01:1e:ea:bf:f0:04:b4:97:ad:
42:93:fb:fc:bb:ee:aa:7f:1a:ef:15:5c:f8:63:fc:b5:ad:e6:
32:c8:75:90:a6:b5:53:0f:80:14:a3:32:6f:71:0a:7e:ac:0b:
e0:34:37:e8:d5:78:ce:69:f2:9e:e5:50:ab:5f:0e:b2:c2:bd:
6f:e7:3e:52:0b:28:4a:a8:e9:f1:b9:1e:7c:5b:6c:bf:46:79:
00:b0:bb:f6:e6:03:53:f4:43:8e:29:24:d6:fc:80:2b:4a:47:
82:6c:bf:88:3a:a6:ca:04:73:49:d0:e5:91:66:78:f3:b5:5a:
a5:6a:0f:1a:ef:ff:d4:a4:0c:5c:10:40:de:3a:2c:fe:9e:0e:
86:1c:93:1e:f3:24:1e:a5:a8:d1:d4:24:46:4b:82:33:1f:21:
e0:d0:55:d2:35:60:c3:78:d7:98:83:74:b6:75:40:4a:2c:ab:
e9:ed:e5:45:40:85:04:07:e6:76:1b:24:ad:61:9c:cf:04:d1:
d6:cc:32:cd:12:10:97:c3:6c:46:ad:71:24:e1:e0:55:b6:dd:
6c:a6:ff:9e:e3:1f:d3:5f:af:d1:4f:d9:26:d3:f8:96:ec:05:
f1:67:f1:13:a6:fe:99:48:86:ab:76:d4:4c:06:db:5d:ac:68:
2d:26:a9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:16 2026 by rpki-client