Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier: AqmddkOZQVRY8Yz7yf6w41Kf5KLxSWBJUs+g47KiGbI=
Subject key identifier: A8:56:9C:1F:98:56:1E:14:40:5F:92:1D:73:F0:B5:7F:C7:60:82:BF
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 019D2AA9948794642023E77ECE458FA214E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number: 1172
Signing time: Thu 26 Mar 2026 15:00:49 +0000
Manifest this update: Thu 26 Mar 2026 15:00:49 +0000
Manifest next update: Fri 27 Mar 2026 15:00:49 +0000
Files and hashes: 1: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: JnIu5x2sBf/O3wlZnDGDlqlBWAxGJCqIqvBUFcHGNFk=)
2: oGvgPtzFT-aTFQ_B85J22DwDAck.roa (hash: 6nOejPxS/rpc0rhO5giVJoyCV3cG0CBp7/FNYjbRlys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:94:87:94:64:20:23:e7:7e:ce:45:8f:a2:14:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: Mar 26 15:00:49 2026 GMT
Not After : Mar 27 15:00:49 2026 GMT
Subject: CN=a8569c1f98561e14405f921d73f0b57fc76082bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:2a:59:fd:4c:6e:c1:a2:74:27:ff:6b:d7:
e8:1a:ad:55:81:24:fd:10:c6:af:96:b2:8c:48:94:
7f:1b:df:5f:c4:6a:65:a8:6b:c5:92:b0:07:5c:d8:
32:49:54:0d:6a:61:35:08:9c:14:4b:21:9e:62:bd:
15:d8:fd:b9:a0:c3:5c:9f:2c:e4:99:ba:06:f9:6c:
19:fb:5f:cf:af:9a:bc:75:0f:01:16:26:f2:86:f9:
e2:a5:90:29:c0:f1:72:16:9f:19:64:44:bd:dd:21:
83:55:0a:d6:08:b0:52:42:6c:de:e3:6a:0d:eb:f9:
ba:de:df:b3:3b:6d:2f:d8:fc:58:2c:58:8a:59:41:
13:df:9d:c8:2f:a9:d5:8d:3d:f5:71:16:35:06:f4:
79:19:cc:65:1f:48:cd:48:22:c4:81:ba:52:78:72:
13:e2:aa:4d:5c:65:9d:14:98:93:b4:9a:18:be:1b:
a7:85:c9:c7:83:04:b6:5a:54:52:07:f7:23:ec:41:
26:44:ee:70:5a:3f:f0:ba:8d:c7:dd:cd:e9:9c:10:
67:db:c4:d4:6e:41:cf:ea:a0:4d:19:a2:93:d7:bd:
3f:00:fa:d5:f9:39:26:ff:f1:0a:56:52:8a:86:f7:
59:57:de:34:b3:9e:13:b0:0d:4a:3e:bf:c9:dc:c7:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:56:9C:1F:98:56:1E:14:40:5F:92:1D:73:F0:B5:7F:C7:60:82:BF
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:76:38:c3:fb:9a:d9:0d:db:1d:ba:fb:cf:40:60:cc:6d:ba:
27:6f:31:69:bc:02:05:38:a1:e6:02:4b:75:f7:e4:57:79:29:
d3:a1:8d:8e:72:7a:3c:30:df:f4:47:70:45:15:07:e2:7f:b5:
3a:19:06:4f:3d:c8:b0:6e:b4:42:5b:df:e9:25:2c:bb:11:e1:
fd:0d:9e:ff:b2:e3:b5:d0:67:24:df:50:7c:2b:5e:e3:25:61:
b3:27:a2:be:56:02:26:cf:2c:9d:69:ce:de:9b:e8:00:99:1b:
86:3b:54:1b:56:e2:2c:df:7a:15:7e:ef:87:5f:5d:e8:81:80:
19:6e:ef:e2:fd:74:13:56:62:9a:a1:41:ad:5e:e6:34:f5:7a:
72:26:3c:62:36:45:cc:3c:69:d0:c0:5d:a0:86:47:b7:8b:58:
c4:74:48:4f:00:73:32:f5:bf:66:6d:09:60:e3:4d:c5:24:01:
d3:a1:eb:9d:67:70:ba:5f:0c:66:e7:79:9f:ee:7a:9e:41:64:
5d:8c:7b:cf:ef:01:ec:20:74:86:ce:ac:d2:09:56:bb:0a:47:
27:dc:a4:4e:1f:4b:08:b2:d7:46:15:8e:a8:2b:7e:d1:5f:fa:
6e:c5:78:01:e6:3f:23:2b:d2:1b:74:54:bc:67:19:c2:63:f7:
86:12:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:46 2026 by rpki-client