Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: kj2+8qLTk/q5vrqH5HGBHpP23Rp3ODUR1Df7dNtec00=
Subject key identifier: E6:4A:C6:44:5B:4B:B7:97:F5:0C:70:5C:3B:7E:52:07:74:E2:12:68
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 019D25F23916ED0FDD33EFCF5773C3C2B42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 17:02:04 +0000
Manifest this update: Wed 25 Mar 2026 17:02:04 +0000
Manifest next update: Thu 26 Mar 2026 17:02:04 +0000
Files and hashes: 1: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: 9+QhliiJkkfR0zp5MBb7H492BQAguFXAZEK3QrJmRac=)
2: YOETByGoQWvX1MVQbtKSNQjPq4I.roa (hash: e5Ix1WhHdMT4rCzknHHsERtns5aDH3xdPuHebqlTS6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:39:16:ed:0f:dd:33:ef:cf:57:73:c3:c2:b4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Mar 25 17:02:04 2026 GMT
Not After : Mar 26 17:02:04 2026 GMT
Subject: CN=e64ac6445b4bb797f50c705c3b7e520774e21268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:7a:ff:48:13:9a:bc:b2:6d:6f:53:4f:84:
7c:76:00:3a:51:ff:d5:c5:fe:fe:79:6f:3d:a8:03:
c0:05:2f:69:b8:e6:4a:b8:b9:fe:3e:d2:e9:54:3b:
16:fb:0d:d2:69:7c:a9:7f:aa:9e:57:5f:1d:41:0e:
c9:52:e6:e3:42:39:4a:64:b0:e8:fa:39:33:45:ba:
46:59:de:64:1e:4a:4a:b5:06:31:a4:e5:bc:0a:08:
f2:f6:bf:a2:ee:6c:00:f3:0b:22:2e:d2:62:f2:16:
24:35:e0:ad:e3:b7:82:99:b7:90:9d:18:a1:29:f5:
b9:da:fb:af:45:62:8b:4c:7d:18:68:5c:7c:94:0a:
54:8a:b2:3b:5e:76:b1:ea:92:0a:bf:6c:d1:56:3f:
3f:96:30:71:b4:6c:fc:15:7d:af:92:9a:a6:c8:30:
0d:bc:35:0a:76:f9:0e:c8:07:35:06:63:61:90:31:
7d:47:53:f8:14:01:55:1f:b5:dc:e5:1c:78:fa:9c:
51:4c:9a:30:9b:87:a1:aa:f6:8a:49:df:79:78:7c:
04:c4:60:b7:95:b3:f0:de:b7:39:15:62:d3:a8:56:
6e:20:25:2c:02:78:78:25:7c:f1:87:e7:31:7a:3a:
f6:d7:22:60:4e:41:30:89:41:b5:88:6c:08:56:9d:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4A:C6:44:5B:4B:B7:97:F5:0C:70:5C:3B:7E:52:07:74:E2:12:68
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8d:a6:69:83:3c:7b:f9:ee:3c:19:e4:e4:b5:13:90:87:0a:
11:8e:3b:d6:3f:8b:94:8c:77:61:c3:f8:43:71:ee:e7:d4:03:
5f:bb:17:fd:14:79:c4:a1:57:fd:e5:d9:ae:4b:f0:84:1d:37:
bb:c3:6c:7f:14:28:95:48:8d:cf:60:ca:8d:52:c1:4d:bb:05:
ff:05:53:0e:1c:cd:9f:89:f8:4f:85:1b:05:b6:3a:95:f5:8d:
0f:e5:f3:8c:8b:45:54:01:5a:7c:77:8c:78:15:60:a6:3d:2f:
9f:22:a6:a6:95:da:a8:ed:32:79:c6:da:f8:f6:cb:00:86:3a:
07:e6:84:60:37:8d:a5:58:54:8d:e3:b0:1d:ba:ef:f1:b3:b7:
e4:bd:16:0b:e1:b1:71:e4:2e:52:a4:cc:e0:89:9a:89:e0:56:
72:60:23:6a:e2:1f:0e:4b:c2:b4:26:98:53:23:11:68:42:38:
b6:ae:55:bb:15:e4:82:fe:93:89:b7:35:55:fb:b5:74:dc:63:
e3:fe:fd:0d:7c:7c:9f:8d:af:3e:0a:dc:51:7b:5a:92:df:d6:
fe:b1:2d:13:ef:00:41:b8:dd:29:3e:11:52:0d:a2:ad:1f:31:
40:1d:22:47:c5:7f:26:2b:ea:aa:e2:9e:10:95:d2:35:08:dd:
88:eb:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:53:06 2026 by rpki-client