Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: Z5r0ayu70pEsnJpPDY4/ml++OXofSL7NVpttTZtdy+g=
Subject key identifier: A6:05:1B:53:30:E9:31:A4:30:D3:CF:AD:BC:3A:E1:64:F9:BB:FA:17
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 019D37894AE206133653DCDE1083DA18BC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 0AE2
Signing time: Sun 29 Mar 2026 03:00:37 +0000
Manifest this update: Sun 29 Mar 2026 03:00:37 +0000
Manifest next update: Mon 30 Mar 2026 03:00:37 +0000
Files and hashes: 1: 5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa (hash: iiy0cvTf0H0qnM221d0FdIuvs2I+5Ca1XYPiAhqx6SI=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: smqR76KGWS+aTpP1NrsFBL+TIGFwQ6pAYy28JrxCbHI=)
3: Xn2Z7IHqH0X53_Ab46jTcOu-vm0.roa (hash: jRPa3G5ri1yL/E0W7FEV48WgsM0Xg5oNizTu+wX+3Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4a:e2:06:13:36:53:dc:de:10:83:da:18:bc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Mar 29 03:00:37 2026 GMT
Not After : Mar 30 03:00:37 2026 GMT
Subject: CN=a6051b5330e931a430d3cfadbc3ae164f9bbfa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:d1:f0:9b:49:eb:f5:eb:da:ae:dc:28:34:
61:4f:6f:cd:89:35:23:41:e9:c8:0c:1d:cd:b1:4d:
e6:0c:a4:78:80:9b:55:76:72:c7:c7:ad:17:b8:94:
16:33:50:e9:e5:9f:01:e7:60:b0:21:36:41:bf:b4:
39:a1:19:f4:2d:89:20:7f:49:e8:07:b2:45:25:e1:
c5:62:a5:f2:0a:5c:d1:b7:73:1d:2d:af:92:e4:be:
67:14:35:71:60:49:41:fc:a3:bd:16:38:77:76:42:
2a:1e:eb:b5:c0:ac:55:c7:33:22:3f:62:fb:af:c6:
d5:1f:4a:4f:24:06:71:8e:fc:59:fb:32:78:0a:59:
0e:3c:fa:57:d5:50:5e:24:57:74:7d:e6:67:71:5a:
fd:82:19:f1:b3:68:ad:b5:1d:5f:7a:77:6f:36:c5:
68:15:f6:19:ef:31:f4:82:8b:f8:4a:1c:d6:c5:85:
5b:2b:4c:65:9f:59:da:7f:c8:9b:3a:68:10:f0:f6:
c5:86:2f:30:c7:68:b0:12:47:38:68:39:38:19:fc:
bf:2f:d6:4d:df:b9:c4:13:87:97:2a:ff:d7:77:d7:
c4:ca:5c:f3:14:eb:93:6b:ad:f6:b1:de:ac:d6:06:
83:fb:b1:a6:c5:77:ac:1d:76:2d:dd:68:92:75:cf:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:1B:53:30:E9:31:A4:30:D3:CF:AD:BC:3A:E1:64:F9:BB:FA:17
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:23:c4:da:4a:6c:a6:a7:ee:b3:0a:19:67:c1:24:b5:9a:ce:
ce:c6:a4:ca:71:51:f6:6f:7d:e5:89:e5:ec:21:71:9b:2e:bd:
0f:11:68:1a:a1:c1:f3:a8:60:69:0c:8f:a9:48:05:26:f7:e9:
b0:5f:e2:f6:79:6b:26:77:0d:35:4f:51:bc:6e:5d:fd:83:16:
59:ab:5a:de:7e:54:7f:c3:a2:e5:e1:f3:c8:8b:42:e0:cf:7d:
3a:f0:ec:aa:36:fd:51:c0:5c:d0:22:b9:1a:54:ce:25:77:34:
55:24:e7:5e:e2:86:65:51:54:a0:af:a9:01:72:03:2b:36:53:
a6:72:ee:b0:1b:4b:05:56:9a:9c:c5:6a:10:f8:f9:e1:7d:73:
f0:d8:a9:6b:a1:8c:a2:4c:dd:95:8c:57:c7:71:e2:3f:4f:9f:
b1:a7:ea:4d:d6:b2:1f:f0:42:96:24:32:03:5e:88:2d:bd:df:
cd:b1:33:63:5a:d1:0f:37:96:33:78:8d:54:fc:e9:89:75:f2:
7a:66:84:92:f4:bd:b3:51:f5:d3:7a:dd:6c:7b:af:4d:1b:f3:
15:83:fb:db:9d:8a:1b:9d:a9:83:41:08:5e:6f:37:3f:47:fa:
ec:71:be:3a:e2:00:6b:6a:f6:46:dc:16:8b:13:8f:18:71:87:
13:d5:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:44 2026 by rpki-client