Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: pT/VuWgB2nT2mPSV9vgbEWtwnzeGxwi8AmScqR5Ef3A=
Subject key identifier: EB:BA:9C:35:D0:FB:1E:2E:BA:04:67:B9:82:1F:18:C2:7B:93:32:1B
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 019D37C08701641BEA37F46DD8A39667FF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:00:57 +0000
Manifest this update: Sun 29 Mar 2026 04:00:57 +0000
Manifest next update: Mon 30 Mar 2026 04:00:57 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: P+fvJjFatlRBIXgNfxUWKWhdZP8vfNFw/kLoUow7n1I=)
2: C4r9_4LMNZyXrJrExvRTXCrazjo.roa (hash: I0l1JrLTqSKZ4rSbNS1J06hQR75J/+SJ8by7D4fg+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:87:01:64:1b:ea:37:f4:6d:d8:a3:96:67:ff:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Mar 29 04:00:57 2026 GMT
Not After : Mar 30 04:00:57 2026 GMT
Subject: CN=ebba9c35d0fb1e2eba0467b9821f18c27b93321b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d7:4e:13:87:3f:68:00:a5:71:85:02:16:4a:
43:fa:5c:c9:a9:c6:5e:87:cb:46:a3:9e:b7:67:e7:
da:7a:9e:d1:d7:55:2c:51:bc:9a:49:d1:f7:83:0e:
af:00:1a:f4:5d:95:ea:3d:c8:93:3c:04:66:86:20:
10:95:e6:20:72:9e:76:ad:bf:ae:f4:ac:51:fb:ef:
85:bf:31:3e:be:9d:2d:ec:d1:1f:10:f1:be:e6:50:
ce:d2:2c:e5:9e:32:c6:bf:c8:ca:d5:4e:c4:26:ae:
e9:15:85:06:4d:77:20:c3:67:eb:fc:96:63:ac:5f:
5d:3a:1a:a9:61:f5:17:e0:ea:5f:04:29:6a:39:96:
cb:56:81:39:d2:db:08:7e:23:78:dc:f6:54:82:dc:
ab:88:f7:c1:1e:32:6b:8a:1a:4a:a6:0e:69:ce:65:
5f:81:9b:52:c9:11:83:5a:f6:cf:fa:ae:71:73:ef:
b2:87:aa:e1:ed:3e:fb:8e:ff:53:6d:a1:f7:ba:0c:
bb:81:aa:e0:9f:08:31:80:18:8f:58:de:13:95:26:
4a:3f:3a:53:a5:61:51:ce:73:ef:73:76:8b:52:60:
a7:56:47:a1:cb:fa:2a:82:ca:f4:c8:8f:e1:fa:83:
f2:df:97:29:e2:a4:22:ea:26:f9:6d:64:d4:ce:4b:
2e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BA:9C:35:D0:FB:1E:2E:BA:04:67:B9:82:1F:18:C2:7B:93:32:1B
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4f:fa:63:48:d8:85:00:b7:2e:15:42:78:3b:19:64:81:cf:
19:02:ef:77:ba:a0:be:be:87:4c:64:dd:d7:ad:03:59:fe:3e:
9a:16:32:60:4d:50:9b:dd:2f:3f:15:96:98:59:18:6f:ab:c2:
09:a4:e8:3e:2d:b8:50:08:ba:bf:a7:2a:c2:84:c6:f8:82:f3:
cb:5b:3a:38:39:99:40:83:46:e4:f1:b9:ab:e2:21:30:18:cd:
10:d9:42:5f:9c:34:1e:d8:4a:e6:d3:86:db:a3:80:f1:57:fe:
01:09:21:9f:ab:55:88:53:e0:41:15:8a:f8:a7:3a:e4:75:4a:
65:e1:71:3d:4f:d9:c4:f3:97:8d:f8:8c:48:e9:0c:eb:b5:a2:
2a:22:18:35:e8:23:c6:72:55:3f:a3:aa:8c:f9:df:fb:ff:58:
41:72:78:e5:63:f3:a2:af:14:64:09:56:6a:9d:10:56:72:4b:
16:7f:bd:8b:01:bc:f5:62:d8:95:bc:25:e6:6e:e3:28:df:ad:
1e:b5:2c:47:28:24:81:97:98:f6:81:86:64:f2:19:31:8d:3c:
22:5d:ae:d6:72:5b:4b:20:87:e6:5c:c1:b4:16:68:77:52:5b:
cd:01:ef:2a:65:7f:b6:ba:0a:db:a1:67:e5:bc:77:f3:72:73:
33:14:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:49 2026 by rpki-client