Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: 0yHRbjq3DBoOLX2hPem/4jnoWbeqGrKy6noWzfulcq0=
Subject key identifier: D9:F2:EF:88:F7:FA:9E:76:61:99:7C:47:5F:32:BD:1C:0E:05:62:80
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 019E2023F1F6A5570C43F930242E0F950310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 1903
Signing time: Wed 13 May 2026 07:01:27 +0000
Manifest this update: Wed 13 May 2026 07:01:27 +0000
Manifest next update: Thu 14 May 2026 07:01:27 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: tWZFGKF/UdCWperkfgNpCDoOgRguY8ALMkF0UIw8MD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:f1:f6:a5:57:0c:43:f9:30:24:2e:0f:95:03:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: May 13 07:01:27 2026 GMT
Not After : May 14 07:01:27 2026 GMT
Subject: CN=d9f2ef88f7fa9e7661997c475f32bd1c0e056280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:e3:25:51:3b:ed:ff:dc:89:d4:76:53:0d:
b7:10:3c:00:26:28:d8:ce:b0:77:76:c0:06:2d:b1:
f0:16:c6:3b:54:a4:45:46:00:93:a7:2e:b7:48:fe:
dd:53:c7:bf:1f:e1:18:f1:50:08:ac:f1:84:fb:f0:
67:0b:86:72:46:b7:35:49:6d:69:e2:94:6b:d3:9f:
9f:33:c8:0b:19:ff:a6:b6:16:7d:b3:79:50:c4:7e:
ce:92:f2:65:71:f5:46:f8:3c:f2:63:95:d6:48:a4:
85:b4:b0:91:f4:97:b0:66:63:a2:79:c9:e2:cd:01:
0e:8d:2a:f2:36:d9:8d:6a:ff:68:69:8e:b9:82:06:
bd:93:a5:95:3c:83:35:dd:9f:11:90:9e:05:f3:79:
10:76:73:1c:19:c2:35:0e:85:48:82:a4:76:70:26:
29:e9:f5:48:1d:78:f4:48:be:87:3e:8f:f1:7b:02:
b3:d3:76:09:39:0d:89:bc:c6:ca:66:5b:f9:2b:e7:
ce:3e:bb:d0:47:f4:89:70:e8:6d:b2:1c:e3:6b:53:
ab:d8:13:58:a2:6f:b1:ce:c8:ba:12:83:dc:7a:99:
23:21:d7:1e:5f:7f:38:86:64:4b:c4:12:36:d7:32:
8f:f5:56:2a:8d:9d:ee:11:86:c0:ec:de:e0:d6:f5:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F2:EF:88:F7:FA:9E:76:61:99:7C:47:5F:32:BD:1C:0E:05:62:80
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:99:b1:fc:db:88:a9:78:94:14:83:de:82:d3:50:f0:38:91:
d6:95:76:c3:7f:5b:2f:cc:ec:15:5a:2b:e0:e8:a0:25:ab:43:
7b:78:54:d8:5c:66:99:e7:11:b5:4e:00:0b:dd:8a:e4:f0:e5:
03:a0:aa:03:32:33:ff:b8:95:31:a8:55:9e:a8:2b:50:1b:d4:
ce:c1:ae:90:57:51:7c:56:c1:6d:cc:ff:4c:06:a5:1f:f3:56:
50:e3:7b:75:e9:23:a9:d1:59:2f:9e:56:fd:82:22:06:9f:32:
5b:38:1e:03:20:74:8c:b9:c8:ab:c8:5c:fe:1c:01:35:09:df:
a6:b2:75:e9:fb:c5:39:e2:ae:9d:0e:eb:3b:61:4f:69:f2:78:
31:55:cd:f2:81:13:19:08:9c:a9:79:d1:54:fd:b3:31:88:8f:
16:a2:78:38:3a:79:cc:3c:cf:fc:6c:90:a7:eb:a7:2c:9b:bc:
84:0a:3f:f9:01:ea:a5:c2:dc:48:8f:69:ac:85:72:14:a0:c6:
b1:65:64:b6:cb:a8:c6:be:a3:83:de:3c:fd:3d:59:da:11:3e:
c1:42:0d:c0:7c:75:e9:9c:c6:ec:27:45:60:14:8b:8d:96:ba:
bd:f7:ca:e0:08:64:c4:18:29:70:8e:34:0b:66:8e:45:39:63:
86:17:5c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:52:21 2026 by rpki-client