Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: 62l2QrxQphCWfmq1pOaFmIrQN7v41Gu37sARQilTzuU=
Subject key identifier: F6:07:41:DC:18:0E:60:5D:FD:6B:F3:0B:4A:2C:B0:18:B6:23:C6:DE
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 019D329A9AC8316D81D5825CA86B84A04D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 1888
Signing time: Sat 28 Mar 2026 04:01:26 +0000
Manifest this update: Sat 28 Mar 2026 04:01:26 +0000
Manifest next update: Sun 29 Mar 2026 04:01:26 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: 3DvH9wypT1Jb5pVt6LuUZAmE+HaPoPGF1RXl7h3eM3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:9a:c8:31:6d:81:d5:82:5c:a8:6b:84:a0:4d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Mar 28 04:01:26 2026 GMT
Not After : Mar 29 04:01:26 2026 GMT
Subject: CN=f60741dc180e605dfd6bf30b4a2cb018b623c6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:b6:2b:2f:a7:95:82:00:6f:f6:0d:d1:86:
3c:9b:85:8c:10:12:a7:34:37:6c:05:47:60:99:45:
d3:c6:90:f2:4c:ac:08:4e:1f:0c:f5:34:4f:b3:68:
54:e0:2e:da:f4:24:9c:dc:cb:b1:83:8a:b2:af:93:
3a:2b:e0:fb:27:3d:03:6a:d9:64:7e:72:ac:8f:93:
5d:69:18:75:7b:c9:d4:0e:b8:1c:39:38:72:a2:13:
73:87:54:48:00:19:76:06:11:a4:fe:1b:fe:d5:67:
8e:b5:e4:2d:0b:cb:2f:f8:70:ba:9b:24:29:9c:a9:
df:9e:ab:a3:6d:88:58:d8:cf:ea:06:e0:6d:8d:27:
08:fa:05:c3:50:30:65:50:b1:92:a6:b4:5c:08:56:
d9:5f:52:18:f1:53:90:11:0f:85:8e:57:be:af:91:
1e:b0:de:3e:19:8c:9f:57:d3:7b:54:84:bf:0e:c5:
c9:db:89:4b:61:15:99:ae:dd:4a:b9:11:8d:c7:f8:
a0:4d:54:2f:62:c7:19:84:f7:ff:56:8c:1e:f9:25:
3a:ab:4e:b7:7f:df:bd:13:f9:7a:73:8e:4e:0e:de:
6a:45:53:8b:cd:43:c3:70:e1:d7:ce:58:75:4a:07:
a0:2a:9c:4b:52:60:f3:8f:b1:e6:fe:9e:47:73:55:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:07:41:DC:18:0E:60:5D:FD:6B:F3:0B:4A:2C:B0:18:B6:23:C6:DE
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:35:4e:c3:e1:69:86:c3:ce:9b:f0:48:05:e6:3e:f1:d7:92:
0d:2f:2a:98:d3:2b:86:f8:7f:b0:5d:2b:8b:a9:43:05:8f:de:
51:7f:92:4b:da:80:58:c5:44:7e:b2:ee:d8:ac:dc:79:5c:f9:
3c:07:f7:bb:db:72:94:ac:9f:76:c0:fd:e4:8e:87:14:bb:6e:
b2:f3:9c:af:63:4e:b5:46:0b:5a:2c:14:c6:b8:96:1c:8b:88:
8c:d9:9f:fc:0f:36:a8:b5:1b:b8:84:cd:3e:a5:bb:22:df:a1:
f0:f9:e9:7b:df:63:38:a3:33:45:ea:27:40:27:f6:a0:7b:39:
51:49:19:ea:7b:ce:b8:24:44:15:2d:16:f9:83:bf:3f:d2:01:
08:8e:5f:07:38:b4:52:7f:01:04:a9:01:5c:a9:99:fc:f2:14:
c3:99:ba:80:5c:3b:bb:52:fb:f0:75:53:34:26:4d:21:b4:f6:
65:6e:81:42:e9:b1:2c:13:c5:c2:36:2b:e2:11:63:1e:0d:23:
c5:d1:f0:a8:52:16:ac:aa:1a:1d:a4:a1:3b:25:03:87:25:a2:
9a:63:e8:51:1a:99:fc:ad:52:3c:59:7b:65:76:3d:78:14:57:
50:f6:9e:c0:83:ce:d3:03:89:7d:a2:0c:6b:dd:f0:c9:7b:89:
a7:b1:31:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:08:05 2026 by rpki-client