Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
File: 0sAfMj0dJYn5qbRi_nDzawn6xjI.mft (raw, json)
Hash identifier: wVs8ueYYQaY/8cs+EyqSlafziuzYCqbJ/y9Lgm2Sn9o=
Subject key identifier: 9D:37:EF:21:24:54:91:21:7A:4E:C2:3B:EC:27:7C:EF:1C:E5:56:65
Authority key identifier: D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32
Certificate issuer: /CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
Certificate serial: 019D2627FDBF9C965D96757D609C7E82F21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
Manifest number: 08B2
Signing time: Wed 25 Mar 2026 18:00:48 +0000
Manifest this update: Wed 25 Mar 2026 18:00:48 +0000
Manifest next update: Thu 26 Mar 2026 18:00:48 +0000
Files and hashes: 1: 0sAfMj0dJYn5qbRi_nDzawn6xjI.crl (hash: 3O40h0kGjJCne41XkTBcfGhzyQEyYhos+SyfhuLgkts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:fd:bf:9c:96:5d:96:75:7d:60:9c:7e:82:f2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
Validity
Not Before: Mar 25 18:00:48 2026 GMT
Not After : Mar 26 18:00:48 2026 GMT
Subject: CN=9d37ef21245491217a4ec23bec277cef1ce55665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:53:87:60:63:0c:9f:c2:01:12:26:5c:e1:
fc:cc:dc:25:c6:e4:13:5d:29:e8:dc:8e:bd:ad:3f:
8c:c9:11:29:56:c7:c1:6f:a8:07:79:fd:77:de:d2:
ea:16:cd:a4:7b:98:0e:6c:8f:5c:e4:6a:43:7e:de:
74:ed:d4:d6:32:9e:de:d1:5d:ed:51:2c:18:b8:80:
b9:7a:d2:e3:ad:7b:90:1e:8c:eb:94:ee:7e:82:95:
6a:85:c3:68:d0:cf:bc:6c:8d:6d:d3:12:16:03:98:
45:39:e4:0f:8d:c8:d6:b2:b8:0c:7c:95:5d:9d:48:
72:39:32:34:dd:11:21:16:cd:1b:e7:f7:f6:46:33:
6f:da:1f:9d:93:f8:f4:11:59:ea:ed:98:bc:9b:61:
bb:b8:a0:58:78:e4:01:1e:23:15:f0:29:d4:5e:ab:
98:a5:78:78:60:70:c9:3d:79:47:77:16:21:c3:0e:
04:47:c5:f5:8e:50:21:37:ce:86:0d:97:8a:3c:41:
71:fc:fa:e7:0b:67:48:91:68:a2:fb:d1:4f:7c:8d:
77:a4:18:e4:15:93:2f:f4:77:0b:29:0e:5f:1a:43:
d9:71:ea:a6:ae:43:ae:6e:5c:3a:d0:d3:9a:0c:bf:
3c:22:13:20:71:be:3a:2e:d4:94:7c:a9:5d:b1:e6:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:37:EF:21:24:54:91:21:7A:4E:C2:3B:EC:27:7C:EF:1C:E5:56:65
X509v3 Authority Key Identifier:
keyid:D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f5:65:8e:53:98:2f:ea:50:40:1f:4b:83:d0:b6:67:c8:80:
01:cd:f4:98:8d:1f:8f:f5:44:23:f9:89:9d:9b:b8:4b:f2:84:
a2:38:e7:0d:35:e8:78:3d:88:80:5f:38:2b:2c:76:e2:ce:b3:
ed:e6:c2:90:a2:10:f3:df:ba:7e:e0:07:91:61:57:fe:1a:6d:
fe:ae:7d:44:10:1f:60:26:26:f1:b8:7d:58:ae:a7:68:62:64:
1c:d6:dc:b8:62:a3:78:c9:ce:22:ed:41:62:cb:f0:55:b5:d6:
3f:9b:61:cd:53:11:ee:04:6f:f5:50:ef:c7:48:66:ac:b6:55:
00:fe:d8:5a:53:b4:73:e1:a1:d0:32:39:65:ac:fd:98:94:3a:
2b:77:1f:49:21:a3:b0:cf:32:10:88:e0:c6:c3:a0:de:13:cf:
2e:57:74:3a:57:ed:04:e6:df:5c:c2:79:8d:1f:d1:88:64:f3:
c7:dd:c2:3e:a1:3d:42:0d:42:73:99:f7:2e:8b:4c:e8:68:d0:
d4:af:3c:92:94:94:d1:23:f7:12:f8:4d:de:bd:fd:86:3f:ad:
f0:1f:9d:69:d5:a9:f5:b1:ad:90:ca:60:01:b8:8b:39:09:83:
bd:32:5b:57:fa:57:91:c2:7d:41:6d:a4:18:85:e5:35:52:e8:
ed:1a:2c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:27 2026 by rpki-client