Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: 0Swpb6CNayprtiewKyw/8NmfMmdajFAfuxDuyvfrQYc=
Subject key identifier: 15:01:C0:5B:C6:4A:01:02:5F:33:1E:59:78:AA:44:A8:64:E5:62:74
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 019D389BF541BE8A4978F831316CACAFD247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 08:00:38 +0000
Manifest this update: Sun 29 Mar 2026 08:00:38 +0000
Manifest next update: Mon 30 Mar 2026 08:00:38 +0000
Files and hashes: 1: OEhJas96pDHXZgaMA_s5Lgp04cY.roa (hash: jxsNaFig0GGgXoj7CMTehSb9YCJBvykYHf4DMMEwiVs=)
2: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: tzpWu40CJgEUUsjYn6DuJOpBOqB86m0N9pRvuPZw2h8=)
3: q0hXo__MCYbBoR7iChz8rniPI6M.roa (hash: iTsszB/0K2SiC8hyLh2CRCMWHvU50TZNj9sPsIVxWo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f5:41:be:8a:49:78:f8:31:31:6c:ac:af:d2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Mar 29 08:00:38 2026 GMT
Not After : Mar 30 08:00:38 2026 GMT
Subject: CN=1501c05bc64a01025f331e5978aa44a864e56274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:18:06:4d:6c:86:66:77:7b:42:59:e0:85:
27:f9:44:a8:93:0c:a1:9f:9b:d0:07:de:12:23:f4:
e4:af:80:6f:58:2f:9d:84:c5:86:b1:c1:23:5f:d9:
17:bb:da:59:e0:0b:49:4e:3c:e2:cf:a2:81:cc:fc:
74:8a:0f:46:85:62:08:ed:d2:c4:1a:96:02:0c:57:
84:0f:38:d8:32:5a:ca:33:a1:ed:aa:d1:4a:a0:23:
bb:a1:b9:d9:e1:54:42:c7:75:20:4a:74:eb:24:4d:
0a:4a:39:e6:72:4e:d3:9b:8f:e7:a0:5c:3e:c1:a6:
b9:3d:bc:60:43:f0:d9:bb:be:b5:ab:bb:bb:e1:61:
4a:65:00:db:4d:ff:94:0d:db:ae:ad:f1:28:41:75:
e9:26:e2:72:fc:00:e2:58:5e:d1:70:9d:6d:9a:6b:
8c:df:ac:46:de:51:ea:ea:90:86:79:dd:2e:a2:dc:
1a:8e:a8:41:51:b2:61:e0:7c:b6:56:1a:cb:9c:2c:
b6:ad:c9:96:19:7b:04:17:4e:35:d2:8d:7b:a5:8d:
21:af:27:4a:6b:db:9b:a5:a9:8d:b1:2e:62:8e:41:
c5:06:4a:d9:6a:42:8e:cd:64:0a:2c:2a:61:d5:49:
54:81:94:6b:56:1b:f5:ec:98:5a:d5:9a:d7:48:04:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:01:C0:5B:C6:4A:01:02:5F:33:1E:59:78:AA:44:A8:64:E5:62:74
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4a:a0:56:2c:84:ce:4e:82:d6:69:4b:59:d7:0d:fc:11:df:
37:59:a5:cd:64:8b:b4:66:b7:75:66:41:ef:ea:c9:55:e5:18:
99:b6:4c:32:25:7f:da:5d:52:c3:2a:04:36:f3:0f:eb:05:2f:
fe:eb:47:ae:eb:0b:4a:34:9e:80:27:2b:2c:1f:6c:1e:65:f1:
83:0e:25:53:c9:85:e5:f7:f3:fc:42:db:e9:f3:a9:e6:65:07:
c5:ac:0f:3a:45:38:6b:e5:33:f2:ca:2e:09:8e:e8:a6:1e:2a:
0a:61:3a:6d:1f:77:49:4a:c9:42:88:c0:da:f4:60:c1:6c:3e:
74:c0:c1:c4:0c:af:d5:75:83:6a:fd:cc:1e:f0:02:60:05:ff:
3d:86:fa:3c:a5:4d:4a:c9:3f:58:7a:62:c9:de:c7:28:6b:99:
0f:12:7b:b7:30:ab:04:d2:91:14:8d:cf:0c:69:c0:82:07:5e:
da:0e:63:56:13:9c:a5:51:53:17:1c:de:80:36:ee:42:72:94:
c2:58:77:ff:f5:ad:c1:bd:1c:82:5f:83:28:b3:4c:22:c6:bc:
3f:3e:8d:56:79:01:35:60:c4:7a:f6:98:d9:4e:e7:92:d5:ab:
aa:dd:98:17:08:69:1e:12:ad:71:bf:7d:8f:9f:49:4c:7f:65:
51:97:b9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:11 2026 by rpki-client