Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: JSUz2W3J7lF+jyNAp1bITlDriERam1n5qyUokQYgkw0=
Subject key identifier: 58:DC:61:9A:EB:F6:E7:3A:52:3C:6D:D9:23:E7:5B:7D:0F:24:37:C5
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 019D265FD0EDC3DD93C7ACD390548647AD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 1817
Signing time: Wed 25 Mar 2026 19:01:46 +0000
Manifest this update: Wed 25 Mar 2026 19:01:46 +0000
Manifest next update: Thu 26 Mar 2026 19:01:46 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: wCrKtwlNKQ1ysjRv+PoC1PdItE0dRG1+aZ9lEeMByVY=)
2: n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa (hash: 20MmpTiNHIRI615LwLOcDmRN7JohlEVDp5KlQ4ApT5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d0:ed:c3:dd:93:c7:ac:d3:90:54:86:47:ad:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Mar 25 19:01:46 2026 GMT
Not After : Mar 26 19:01:46 2026 GMT
Subject: CN=58dc619aebf6e73a523c6dd923e75b7d0f2437c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:ca:7f:a4:48:3b:ea:01:5a:ac:ee:3a:75:
0a:10:4b:c9:eb:e5:d5:47:92:2e:45:85:54:19:a0:
76:ca:56:93:bc:a0:5b:57:34:f3:0b:74:da:08:c2:
93:dc:f0:16:1d:11:24:f8:d4:21:ea:f6:29:87:38:
02:65:81:0e:68:d0:93:f9:80:5e:c8:d4:6b:2b:57:
1e:57:1b:91:c0:e3:ec:3c:f7:b0:bd:dd:6e:43:fe:
91:0c:94:71:11:6e:8f:84:b5:91:79:11:1a:71:2c:
25:b3:c7:46:09:0f:b3:25:fc:6a:4e:13:e7:cc:6c:
ce:80:ef:57:8c:65:b1:ff:42:3c:10:90:12:2e:7e:
2c:56:90:21:51:cf:b0:82:b2:d4:9b:e4:51:bb:9c:
3d:86:f0:46:a2:32:a3:24:1a:28:f6:1a:1c:f8:6d:
ad:03:e9:53:7f:2c:17:fb:b3:f9:d9:24:13:b8:57:
a4:05:58:7b:f6:bd:df:87:00:2e:40:20:89:55:23:
34:15:99:9f:9d:7d:ec:e2:53:71:27:d0:be:dd:31:
2e:3d:50:f3:d5:b7:37:e1:b7:1b:b5:48:78:64:e1:
8e:8c:d3:6b:6f:34:fc:3f:77:90:f8:eb:f9:3a:7b:
c8:0f:6f:33:1a:9e:0c:b1:fe:09:8f:31:7c:ec:3e:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DC:61:9A:EB:F6:E7:3A:52:3C:6D:D9:23:E7:5B:7D:0F:24:37:C5
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:14:11:c3:2a:5c:18:a3:d0:e0:02:a4:04:5b:e1:27:41:69:
43:2a:d1:06:71:19:57:68:6c:4f:f8:e0:67:91:39:5c:9e:73:
50:9a:90:c5:c9:bc:20:a2:de:97:b9:e8:0f:71:a6:d4:58:72:
c4:ad:a0:32:13:c4:bc:90:08:6d:ba:ee:1f:bb:ba:96:53:63:
4c:a5:51:2b:7c:6b:a5:ee:45:50:57:cb:4f:f1:8c:e4:13:0d:
bd:e2:53:d2:37:a7:c7:5e:37:be:22:29:02:34:c1:05:38:c1:
54:a8:78:e0:72:56:c3:25:55:ea:e2:fe:77:e7:5a:20:cd:fb:
2d:14:16:21:bd:6a:fd:a2:a8:fb:95:88:43:6a:d4:11:ea:de:
a4:bc:86:29:60:e6:87:86:fb:5b:63:36:f8:8f:47:b5:89:f2:
b3:5c:03:9e:64:55:02:85:4a:0c:9e:a3:d6:6b:9a:fc:8e:28:
22:f5:88:92:8f:04:dc:27:10:15:bf:64:9b:d5:e2:7d:f0:39:
a8:ce:b6:33:ba:72:d1:92:04:a7:a2:ae:6a:1f:ff:fd:c9:04:
5d:b0:f6:00:1b:f8:4e:33:6f:77:01:ce:b3:f4:91:ae:04:e4:
e1:fb:2c:f6:e7:f1:34:85:88:84:46:15:d2:33:30:9e:6e:e7:
4b:be:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:57 2026 by rpki-client