Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: pAlxL2MGpZ4n3SZ+Ynyx5jF7KqfYbOeHJjIo3xabtPI=
Subject key identifier: B1:84:CC:20:69:FD:BA:E7:37:FA:88:4B:93:54:C4:7D:BB:A1:5F:67
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 019D2695D99926DD17C14E81BAA281343D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 150A
Signing time: Wed 25 Mar 2026 20:00:47 +0000
Manifest this update: Wed 25 Mar 2026 20:00:47 +0000
Manifest next update: Thu 26 Mar 2026 20:00:47 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: W46BXSf90t5EE3mc3VrgdXHecsHfLBmvoj4B8TbVYbk=)
2: p9afRUC51SfaJyMaCVZSnQiB2hY.roa (hash: 6VxOCyWy4+A0UX6VtaLP95X/pFp2fxpWhbFoynGWOGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d9:99:26:dd:17:c1:4e:81:ba:a2:81:34:3d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Mar 25 20:00:47 2026 GMT
Not After : Mar 26 20:00:47 2026 GMT
Subject: CN=b184cc2069fdbae737fa884b9354c47dbba15f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:40:be:97:cf:38:07:80:53:a3:ac:fc:1b:
21:6c:f0:9a:6c:52:56:ee:30:3b:f2:0e:35:ef:95:
8a:33:04:7c:f2:22:08:3c:09:82:a5:e7:03:96:d3:
30:14:d5:36:ac:5a:5e:b2:97:b3:5c:f3:a2:6c:ad:
30:bf:c2:b7:7f:f1:f9:b8:d0:a2:25:a9:fb:08:bc:
66:f0:8f:3a:f0:e7:2d:36:04:11:e9:32:2f:07:e3:
35:b6:e0:42:97:6a:f4:c1:fc:9a:9e:ab:55:c9:be:
70:cc:c7:b6:1a:5c:82:5b:49:b1:b1:db:58:98:d6:
0b:85:00:cc:18:60:6b:72:01:e0:98:59:92:b8:ed:
52:bd:42:18:5c:f9:58:4e:6e:ce:96:1c:1f:9e:5d:
10:2a:87:3a:84:0f:b8:64:e5:4b:83:6a:ba:a1:c3:
57:73:78:b3:eb:ab:d5:70:55:e3:06:08:a9:87:0e:
1e:bc:7c:f2:1f:20:d4:08:69:11:ad:6c:32:1d:90:
5e:b1:5b:ba:7d:5f:20:7c:9a:5e:11:41:5e:1d:8e:
fa:dc:75:54:e7:03:53:b1:06:69:13:a0:20:7b:c6:
63:34:80:62:8d:33:d9:35:3f:38:46:7f:c3:f9:e3:
c4:bf:dc:6f:47:0c:fd:e1:b0:56:12:49:ec:40:d7:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:84:CC:20:69:FD:BA:E7:37:FA:88:4B:93:54:C4:7D:BB:A1:5F:67
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:eb:d3:05:43:dd:6d:f7:52:9b:9c:cc:34:3d:6a:1c:57:16:
a2:3e:a7:df:19:4c:f3:c5:59:b9:85:45:64:cd:4d:63:f6:35:
54:a4:16:1e:91:11:15:bc:ee:a5:63:54:f9:30:ff:36:e1:e6:
bf:ce:60:76:09:82:2d:f8:55:92:64:ad:b3:85:e2:09:ff:2b:
3c:5b:8c:5d:72:a6:ed:f0:b7:4a:5d:fd:17:92:cb:09:1e:36:
92:48:15:a0:73:29:a7:5e:f9:34:98:5f:e9:76:cb:d7:95:b6:
34:aa:1b:98:8e:36:45:dd:d7:2e:16:21:f1:fe:ea:46:9a:a4:
57:67:a0:f4:b8:a9:69:50:fa:31:94:e2:fa:46:54:6a:2c:7b:
b5:6b:4c:b2:6a:40:8d:97:ed:08:c8:c7:7f:59:82:c2:9b:7e:
08:1a:ec:4d:b8:77:55:18:95:40:32:ff:b9:be:e0:07:db:cf:
93:16:b9:5e:23:c3:b9:41:c2:eb:f1:76:68:17:38:89:35:5d:
a0:ef:c3:26:68:45:d9:79:30:af:54:72:83:35:e0:50:d5:8f:
05:02:38:e5:b2:67:b2:a8:a7:a0:72:b3:57:b1:a4:49:46:5c:
42:36:33:0f:39:c6:45:74:7c:29:19:d3:bf:b2:65:e6:e2:e8:
76:c3:a3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:35 2026 by rpki-client