Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: K6S8QirwUM0HXQ9tlNx2/gcx++fn1PMfXNciC0U4mo8=
Subject key identifier: B1:47:3F:E7:D6:21:14:74:14:43:5A:DD:AD:AC:44:B0:A4:78:A1:69
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 019D273AC5621CBCE97DA871863204DC2D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:00:56 +0000
Manifest this update: Wed 25 Mar 2026 23:00:56 +0000
Manifest next update: Thu 26 Mar 2026 23:00:56 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: uakNbZDTf/OORYiZkBJCi9bNwXnYytCMFYb9ssvir4s=)
2: FXnznPhn55vYjBoYQttg28E4IK0.roa (hash: Dl0FXZLA3s/7+Hd8tk5PaoTmm8/8008Q5/BvoslwSfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c5:62:1c:bc:e9:7d:a8:71:86:32:04:dc:2d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Mar 25 23:00:56 2026 GMT
Not After : Mar 26 23:00:56 2026 GMT
Subject: CN=b1473fe7d621147414435addadac44b0a478a169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:98:55:09:b6:b9:14:ec:17:b4:a2:df:82:
56:e7:f9:51:c1:65:fc:67:c3:ff:f2:af:01:73:bb:
2d:41:4a:81:96:45:ae:92:09:23:d7:29:6a:0c:54:
a3:40:24:51:44:49:60:70:5d:ca:8d:ff:5e:2f:00:
6f:04:74:87:91:55:af:64:8c:ef:3a:cd:b5:3a:0c:
bf:1d:64:b1:b7:de:e8:0f:80:ad:11:b9:ad:11:47:
64:6a:25:a4:0e:5a:26:03:86:db:45:7d:67:07:83:
a3:84:a3:9e:42:1b:ea:91:74:c9:70:0c:c3:2b:9e:
d4:67:fe:89:14:4c:96:89:c5:2f:29:e3:c6:14:22:
37:db:2a:13:8e:f8:f6:9d:30:34:ff:53:83:1d:af:
b1:7e:9d:a6:4f:a6:7c:6e:ae:17:e3:77:60:32:6c:
4d:58:2c:5c:e1:ed:a5:26:05:a7:ed:32:49:de:53:
bb:c0:7a:c9:c0:1d:ba:6b:34:b5:1d:e6:ae:b4:f8:
27:49:25:07:ec:3d:de:92:7f:91:db:bf:5b:7d:79:
10:59:10:27:b7:c5:0f:af:da:59:c8:e2:97:b7:56:
7c:1b:ed:45:f8:62:a5:5a:c9:bd:58:1d:17:45:c7:
8c:d8:ba:90:a5:a8:17:7d:c5:29:76:70:fc:b6:b6:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:47:3F:E7:D6:21:14:74:14:43:5A:DD:AD:AC:44:B0:A4:78:A1:69
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:26:94:8f:9d:ff:11:b1:e4:05:74:16:84:7d:9c:8e:fa:81:
16:b8:b3:24:2e:de:d3:fb:81:a8:e1:1b:5f:3c:5c:ff:9e:bd:
42:4a:20:6e:13:76:60:9e:92:b1:83:05:30:c6:da:bd:4b:c7:
13:8c:8c:fc:4c:ea:cf:8e:e3:b8:0f:95:f3:67:3b:b3:db:a4:
03:26:fa:15:54:b8:eb:88:e6:ef:34:fc:34:e5:41:68:2f:80:
fb:a3:c9:7a:c0:97:0c:20:0d:d9:4d:70:2a:a7:f1:a1:a9:0a:
5f:ef:cf:5c:c7:d3:57:b3:e8:22:11:6e:66:be:f0:d3:5c:4a:
24:3b:86:55:2a:5f:40:c8:00:cd:74:5d:e0:81:22:30:bf:af:
60:fd:b7:12:ca:ff:f7:94:01:be:e2:d7:2e:8b:a1:68:7e:70:
50:ce:f5:cf:aa:67:f4:8a:df:89:00:f1:f9:a2:1f:69:39:bd:
e8:96:af:30:99:49:c2:b6:d3:0b:d3:ba:d1:cd:88:4b:48:d2:
d9:9e:ee:27:0b:e9:94:0c:01:64:87:f0:19:68:51:29:c5:4f:
a1:8e:f1:95:f9:ca:a9:9e:9a:93:bd:51:8b:f2:74:f5:3e:99:
26:9b:96:68:fc:84:8a:75:14:25:46:e8:3b:41:f8:3c:9f:c7:
a9:33:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:16 2026 by rpki-client