Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
File: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft (raw, json)
Hash identifier: eIth6QQughR4IsfaXrqq7pZtMLwwvl2XJoJOBKj9o6o=
Subject key identifier: 8E:69:E3:E5:51:6B:E0:81:32:2B:71:DB:75:B1:01:CB:41:BA:D8:78
Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
Certificate issuer: /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Certificate serial: 019D3307FADD5BF98F2D21848C2850A56FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
Manifest number: B4
Signing time: Sat 28 Mar 2026 06:00:54 +0000
Manifest this update: Sat 28 Mar 2026 06:00:54 +0000
Manifest next update: Sun 29 Mar 2026 06:00:54 +0000
Files and hashes: 1: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (hash: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g=)
2: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl (hash: ilMg5rwP4P1/ngVn3Ccpga0IiohDDrSf8wVu+3F4AY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:fa:dd:5b:f9:8f:2d:21:84:8c:28:50:a5:6f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Validity
Not Before: Mar 28 06:00:54 2026 GMT
Not After : Mar 29 06:00:54 2026 GMT
Subject: CN=8e69e3e5516be081322b71db75b101cb41bad878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7f:fb:63:15:89:0f:75:28:54:53:fc:f5:90:
67:9c:37:73:44:e3:2e:1c:ca:b8:7e:cd:3c:90:e4:
ee:db:1d:c2:b8:90:66:8d:ec:b8:ca:da:e9:0e:0f:
8e:8a:2a:fd:57:ce:a7:e6:7a:e6:a5:0c:52:b9:a9:
9c:73:c9:bd:22:b1:35:07:40:c0:81:c2:2e:cf:0b:
4b:ed:f2:c6:66:a0:cb:2b:a1:e2:46:b4:78:7e:8b:
84:cd:42:4b:e9:88:c3:7e:88:4e:c2:0b:46:e5:9f:
bb:0c:08:f6:2d:bf:4a:d6:70:c7:e0:d5:83:6b:65:
39:f4:83:7d:0d:dc:c2:dd:52:dd:09:49:f4:1d:0b:
c9:65:6f:48:7c:8a:3e:9f:90:d2:ab:5c:ab:d1:71:
e3:6f:ac:95:bc:6f:18:3a:f6:d2:38:c5:a9:15:4a:
f3:d5:c5:89:3f:3f:90:f6:84:da:6b:b0:d1:06:6e:
65:10:27:68:1f:84:a4:c8:0c:e9:f9:34:8e:53:25:
c3:1b:42:e3:4f:7c:98:5f:dc:e0:37:55:79:06:e0:
4b:77:44:54:e2:cd:86:15:26:18:f6:be:ff:f0:2c:
1d:93:0d:94:aa:76:54:eb:9f:38:fe:52:e8:d3:ba:
04:08:47:3d:fc:72:46:c9:44:5b:95:46:55:b4:1f:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:69:E3:E5:51:6B:E0:81:32:2B:71:DB:75:B1:01:CB:41:BA:D8:78
X509v3 Authority Key Identifier:
keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:eb:b2:6f:53:60:7e:8d:da:89:35:ed:9f:a5:39:a2:1b:a7:
df:3a:54:76:39:1e:2e:f9:41:05:53:9b:66:90:bc:c1:0c:a2:
77:36:34:51:43:e8:a9:3a:c9:79:75:6c:bd:2e:c6:b8:61:43:
8b:b3:69:c2:b7:60:81:40:fd:b7:01:56:8b:c0:00:10:26:57:
b3:a6:a4:5c:75:5a:cb:68:22:fd:13:5e:14:99:38:49:65:42:
00:f3:01:a2:af:44:27:79:a4:e6:46:c7:19:18:56:3f:76:83:
30:c9:09:c3:21:e7:3f:49:56:90:1e:6e:3e:25:62:8c:03:0a:
d1:d6:e1:00:17:10:27:fb:64:32:e7:bb:f3:43:6f:b7:86:bd:
d9:b1:00:27:9b:3e:e7:fd:ca:b1:9d:a4:18:28:d6:ab:f5:c0:
3a:a0:d4:9c:c5:c7:71:18:46:d8:35:94:f3:da:39:fc:6a:db:
58:d1:3b:ba:22:c2:2a:bf:a2:a4:e0:24:f5:df:8a:17:e7:68:
b0:7f:cf:8f:8a:3b:d2:85:1e:22:54:5b:45:13:be:8e:71:44:
bc:6c:28:9b:b2:c8:9c:ad:fb:34:89:e2:74:4e:94:e9:12:ee:
26:36:d2:d1:54:18:be:16:91:c7:77:0a:8f:bf:a1:5a:a5:d6:
18:ce:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:45:01 2026 by rpki-client