Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
File: mo9LAp4p7t8n1FzU05AQgya-JvA.mft (raw, json)
Hash identifier: MxQmJ//jgZVKxAmMYb52nee9B0IRTdJt6FobO3quLeI=
Subject key identifier: D5:41:66:23:6E:53:63:D0:E4:D2:38:A3:E5:63:30:73:12:55:2B:23
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Certificate issuer: /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial: 019D3789786E05100E626CDC53CA7D65219A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:49 +0000
Manifest this update: Sun 29 Mar 2026 03:00:49 +0000
Manifest next update: Mon 30 Mar 2026 03:00:49 +0000
Files and hashes: 1: _V7Cb-NwO8anySMSbrwiBhmYglM.roa (hash: Ahe9bG/97BT0KbQWugP0o5eBZCTOE3ZbuxcW7SXy2go=)
2: mo9LAp4p7t8n1FzU05AQgya-JvA.crl (hash: v4xHFINEYOHQI1pNP6/f1tVlUPd/ChOnYfwOmnexL4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:78:6e:05:10:0e:62:6c:dc:53:ca:7d:65:21:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Validity
Not Before: Mar 29 03:00:49 2026 GMT
Not After : Mar 30 03:00:49 2026 GMT
Subject: CN=d54166236e5363d0e4d238a3e563307312552b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:b9:25:bc:fd:ce:03:53:b7:f4:a5:70:cb:
de:1c:53:31:97:a4:68:0c:be:76:b2:62:cb:b1:04:
a8:a3:44:05:6a:a8:dc:23:f7:2e:5a:d9:9f:8b:0f:
e4:53:9c:b9:2f:9a:4e:99:57:c6:d7:37:1c:80:f2:
5f:b1:d9:c4:61:91:bd:7e:c9:a4:b3:c2:5b:e4:f3:
a8:d4:1d:b1:92:88:bf:bb:64:9e:95:f5:35:4e:45:
28:5b:5b:5b:48:88:de:91:78:2b:3e:a5:68:ca:b5:
7f:f7:ed:2d:8f:31:dc:9a:8f:d8:8d:aa:94:14:92:
ff:2b:0c:7e:7a:78:19:a5:0a:42:96:8b:21:65:aa:
6a:59:1b:94:ca:91:1b:cd:3a:29:84:a4:21:07:5c:
1d:c1:10:14:64:7e:3e:7d:15:a7:c8:08:84:98:44:
fd:fa:1f:98:3b:7b:a6:8a:d0:3d:f7:aa:be:79:de:
63:b8:3e:bf:9f:cb:2f:1b:b9:bf:35:b1:30:5f:26:
bc:82:80:bb:05:c5:cb:c4:5b:4b:87:97:25:d3:7b:
c2:ae:eb:54:ae:61:cd:60:05:f9:e9:5f:c7:9a:42:
74:93:c1:94:4f:68:d0:87:32:e1:2a:68:c7:52:63:
c2:bc:00:1d:34:d3:fd:41:6c:c0:70:00:37:5a:b2:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:41:66:23:6E:53:63:D0:E4:D2:38:A3:E5:63:30:73:12:55:2B:23
X509v3 Authority Key Identifier:
keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:50:0c:94:fd:3d:0f:9a:af:6e:e8:49:1c:dd:8f:74:d3:aa:
17:71:1d:9e:ba:99:4e:0c:2f:e6:35:45:ee:a8:e0:db:4c:2d:
b7:a9:b7:20:43:6f:d6:46:ab:a2:d5:e7:5a:66:48:55:fb:b8:
b7:fb:f2:36:97:46:8e:6c:b0:ce:24:75:41:1b:60:33:51:5f:
09:9d:42:db:9a:6c:3c:da:f3:a2:7e:bb:2c:07:fd:86:4c:e7:
a0:35:1d:a9:8e:fc:b0:ba:eb:7c:42:45:50:fd:ee:61:6d:da:
69:0f:45:05:70:3e:fa:ad:f6:a6:15:6e:88:93:c0:52:8b:2c:
ab:1c:05:df:e6:cd:0c:f4:ad:a9:67:ce:71:fe:ba:73:75:f2:
85:63:64:a9:7e:59:f9:2d:9d:cd:ad:7e:0e:58:54:39:c1:85:
37:ac:e3:9a:a5:23:fe:1a:0f:d2:30:bf:23:27:75:25:19:5f:
f2:f6:e7:7b:d6:08:5d:a8:8c:3c:ed:1b:d6:48:90:e9:c6:5f:
e6:b4:aa:e0:17:ef:5e:44:36:c6:1a:5c:3a:c9:8d:63:71:38:
07:7f:0a:bb:68:a1:33:30:90:a3:ac:61:42:83:46:2d:02:9e:
51:fa:a7:64:6e:d5:2e:c8:a3:60:4d:c2:b6:65:65:ef:dc:f2:
a2:dc:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:51 2026 by rpki-client