Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier: tmqtr5sz+yNiSnwqAk4vQ4rjZp/AWHWIkL2T6L+y/7I=
Subject key identifier: FF:80:87:5E:C9:25:81:03:8D:AE:BC:63:41:E2:0E:EF:84:0B:74:FE
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial: 019D3909E2F9B94F89CD7548B4137ED5D388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number: 1889
Signing time: Sun 29 Mar 2026 10:00:42 +0000
Manifest this update: Sun 29 Mar 2026 10:00:42 +0000
Manifest next update: Mon 30 Mar 2026 10:00:42 +0000
Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: acHSBkjpLOhqUakKzw+5eM+tcjJBLXa/Sj8heJVcX6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e2:f9:b9:4f:89:cd:75:48:b4:13:7e:d5:d3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Validity
Not Before: Mar 29 10:00:42 2026 GMT
Not After : Mar 30 10:00:42 2026 GMT
Subject: CN=ff80875ec92581038daebc6341e20eef840b74fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:98:2a:44:bc:89:22:4b:37:db:40:29:14:
61:4d:bd:04:eb:c8:a9:11:1c:dc:31:ae:d1:85:cd:
d3:54:96:6f:05:c8:a2:60:6d:67:7d:29:c1:dd:32:
54:9c:b2:07:f6:47:9b:e6:5a:ea:d4:b4:23:6e:69:
8d:8d:87:d8:fd:c6:07:34:1d:d0:c8:fa:1c:45:3b:
fc:91:e6:79:82:0d:92:8d:4f:09:17:cf:64:ec:6b:
33:8c:4d:6d:0d:9e:37:3f:76:ed:95:84:f5:db:63:
08:f2:32:99:6c:32:6e:a4:cf:ca:57:80:0f:01:40:
02:03:68:c3:fd:05:13:a6:15:01:ab:c0:8f:25:b3:
f2:b6:69:6f:ef:aa:26:1f:f3:04:9e:0f:6b:36:45:
1a:5c:00:c0:79:f2:33:92:fa:54:36:ec:85:3d:a7:
3f:4e:34:38:e6:c0:d2:8a:13:16:d0:75:c8:33:98:
7f:b9:ab:3a:d8:44:25:36:4a:34:b3:8c:27:d5:8a:
9c:3f:27:7e:9e:e9:12:b2:e5:ca:45:de:fa:a8:c3:
c8:64:2f:c5:22:81:af:5d:01:09:fb:3e:d9:fb:39:
cb:67:19:48:d7:9e:eb:e4:ac:df:9d:f7:9e:69:2a:
3c:d4:46:9b:61:b2:6d:9e:25:9b:8b:a8:b3:50:88:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:80:87:5E:C9:25:81:03:8D:AE:BC:63:41:E2:0E:EF:84:0B:74:FE
X509v3 Authority Key Identifier:
keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e4:de:a1:0e:1c:f7:03:fb:95:98:f1:a8:bb:99:94:9c:66:
b2:52:12:f4:69:dc:b0:5b:7e:d3:99:8a:f5:ee:f6:38:f4:3b:
dd:ba:74:08:07:68:fb:e6:2d:51:32:af:bf:a6:eb:d4:3d:5e:
da:c0:9f:c1:68:0d:12:1b:bb:79:b9:15:a4:2f:a2:08:42:45:
0c:e3:af:96:4c:68:f2:9a:b4:7f:6f:f8:52:59:7e:f3:e5:6e:
af:c4:48:88:92:e5:2c:28:8e:1f:c4:73:46:fb:4a:50:c3:24:
b5:e9:16:0d:53:30:53:0c:b9:40:ea:47:e3:86:12:14:2a:64:
2f:ec:63:50:81:43:8b:84:40:25:b8:dc:b2:23:6d:a5:17:8a:
40:7a:bd:db:e6:38:b9:03:4d:7c:d3:0b:c9:13:8b:cb:82:25:
b9:e4:5c:5e:5e:4a:c2:06:55:01:c6:0d:61:17:7e:0e:01:ef:
33:2b:dc:6a:1b:5b:e5:cf:62:e1:7c:95:f1:c5:6e:07:5f:fd:
e3:ef:a8:70:87:1f:2f:10:e2:7c:e5:7f:cd:40:1d:fd:8c:7a:
95:fe:6b:8e:50:57:a3:f9:87:bc:5c:a5:af:06:51:9a:79:6b:
b1:6e:66:a9:7b:75:49:61:cf:10:12:14:d8:e9:a7:14:70:2e:
60:2e:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:42 2026 by rpki-client