
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier: 53N9MBq2WVR17H5kKHJEN4f9Zk/QR8nNsPaWpClaQZk=
Subject key identifier: 50:68:1B:75:A5:F8:1C:E3:2B:6B:E8:7F:BF:D6:80:35:81:7C:0D:5A
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial: 01A13E5CBD12C056354C9A2F9C9C8F04347C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number: 1A9E
Signing time: Thu 15 Oct 2026 07:00:27 +0000
Manifest this update: Thu 15 Oct 2026 07:00:27 +0000
Manifest next update: Fri 16 Oct 2026 07:00:27 +0000
Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: 1XtBQxKwJidxGk7dT1XJ13y16JniaPjLxyjTTeFBy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:bd:12:c0:56:35:4c:9a:2f:9c:9c:8f:04:34:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Validity
Not Before: Oct 15 07:00:27 2026 GMT
Not After : Oct 16 07:00:27 2026 GMT
Subject: CN=50681b75a5f81ce32b6be87fbfd68035817c0d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:90:5d:d5:ff:99:7e:c8:2e:55:eb:cf:af:
35:bd:0e:fd:71:83:b6:cc:75:de:fa:85:5d:4c:cb:
30:d1:42:54:40:90:38:c0:89:16:a4:05:42:2b:82:
e7:76:af:71:09:89:a7:ef:b6:e3:cb:c4:54:c5:75:
8c:69:30:97:1c:6c:33:25:94:1a:2a:9b:14:55:4c:
36:cf:88:61:08:79:f1:8f:45:bb:2c:2a:14:65:f6:
71:48:f4:83:a6:6f:bc:cf:49:bb:be:62:d5:3f:f1:
cf:32:9d:62:81:57:5a:ea:f0:51:0e:d8:8c:dd:3f:
c8:9a:7a:33:89:11:b4:8a:a5:b6:57:72:09:b4:38:
72:70:31:1b:4a:f0:e4:ca:e9:23:ae:5d:c4:9a:29:
c3:97:a9:ad:12:69:82:f4:67:d6:1b:e9:45:63:41:
35:a9:5d:60:00:6c:3b:dc:8a:93:89:ec:53:49:fe:
13:45:71:f6:9b:43:09:a5:f6:d4:60:39:c4:0b:4e:
9d:8f:9c:98:a2:2d:dc:5e:58:11:fe:e2:28:a9:95:
4d:84:62:d9:95:26:37:5b:19:d0:ff:83:41:83:b8:
ea:48:c0:5f:24:cd:64:50:87:30:e3:6a:69:c1:2c:
fc:62:23:c9:7a:88:9f:8b:0b:75:09:91:e3:d3:f4:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:68:1B:75:A5:F8:1C:E3:2B:6B:E8:7F:BF:D6:80:35:81:7C:0D:5A
X509v3 Authority Key Identifier:
keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e1:b1:ee:0a:2c:37:ab:ca:ea:bc:6a:dc:45:63:7b:78:d0:
c9:6a:24:f1:20:6a:48:a3:28:73:9e:ba:47:b9:57:ea:53:4a:
a8:cb:d1:32:6f:65:e0:81:11:bf:85:5b:84:60:10:57:c5:54:
cf:70:ab:89:58:5a:7d:d9:a1:94:e1:1e:4f:11:4b:b8:4e:55:
20:2f:87:4e:67:b3:70:46:33:e8:c8:a8:80:0f:8f:26:78:d8:
32:71:56:8d:a9:f3:ce:b6:61:d0:6f:d9:26:66:67:75:5c:33:
0e:58:21:ae:74:0f:6f:10:38:84:84:17:bd:6e:26:b7:3e:7a:
11:06:ae:36:32:e3:01:df:87:43:8e:52:72:70:1c:d3:a6:e2:
0b:76:04:4c:a9:c7:c1:6a:ab:43:46:a4:f2:a9:f9:03:77:86:
80:7f:f5:4f:73:bb:ad:6a:6d:b0:14:85:b4:61:40:0a:5b:83:
c4:af:3c:ee:fe:29:ad:da:fe:31:de:12:12:72:0a:dc:09:29:
24:10:ba:9b:05:6b:1f:50:82:dd:26:5f:82:2e:a1:64:79:67:
b1:f4:7b:e2:b2:7e:5d:e7:c0:28:65:f1:03:5c:fd:f1:c3:67:
b6:11:a5:13:76:88:88:49:e1:a2:24:f5:c6:92:29:3c:06:18:
2a:49:3d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:24:35 2026 by rpki-client