Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
File: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft (raw, json)
Hash identifier: lpebxvKGi0tvmWqKfv/58Ri7jFCgj5rafPCOryeJ3p4=
Subject key identifier: E0:C5:EF:B2:48:74:67:3D:C2:63:23:FB:5E:98:2F:A5:4F:78:1E:8D
Authority key identifier: F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
Certificate issuer: /CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Certificate serial: 019D3A53A65D4AF523DABE9A4BCFDAA56826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
Manifest number: 0C9C
Signing time: Sun 29 Mar 2026 16:00:53 +0000
Manifest this update: Sun 29 Mar 2026 16:00:53 +0000
Manifest next update: Mon 30 Mar 2026 16:00:53 +0000
Files and hashes: 1: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl (hash: Mn4JXnngAGWLn7UG0OU0OAttIm0eh4vm9h7Q6lb3ms0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:a6:5d:4a:f5:23:da:be:9a:4b:cf:da:a5:68:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Validity
Not Before: Mar 29 16:00:53 2026 GMT
Not After : Mar 30 16:00:53 2026 GMT
Subject: CN=e0c5efb24874673dc26323fb5e982fa54f781e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:63:b7:9d:56:83:66:67:90:65:0d:dc:72:
b0:74:6d:87:9c:59:2d:93:e9:a5:8d:e4:7f:ad:f2:
dd:a0:a6:db:ee:3d:cd:42:25:cf:b9:9d:71:88:8a:
97:70:66:84:ce:0a:73:bc:96:a5:b7:5e:2c:3e:05:
f9:9f:72:f6:c3:d6:72:a8:f2:52:3e:c0:4f:f1:43:
4e:c4:a8:26:e3:38:8c:bb:fc:c9:8c:68:2b:63:6c:
24:5b:46:66:8e:8e:95:9a:d6:62:c4:f2:62:53:4c:
6b:99:c1:3a:0f:1b:3d:fe:e9:75:de:a9:14:bd:20:
2a:84:79:77:82:8a:02:fd:fe:cf:74:07:dd:54:62:
8b:eb:d8:ea:5e:22:56:32:13:e1:3d:a1:1a:9f:9f:
f5:4a:37:03:55:06:2a:fe:51:91:11:19:c3:45:28:
89:42:c2:bc:87:4d:9f:f7:7c:f4:8a:a0:a5:fa:33:
5c:82:64:73:87:27:8e:9e:94:52:bc:4b:8a:d1:43:
4b:19:14:29:e9:a9:75:0e:98:8a:02:ff:bd:fa:e5:
c5:c6:9f:a0:4c:a6:90:c4:74:d6:df:3f:e2:41:ef:
ef:46:25:1a:6c:ed:4c:1c:bf:27:68:a2:14:c1:23:
ed:bc:ad:d3:f9:49:6b:24:1d:f1:d8:4c:a2:e4:7a:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C5:EF:B2:48:74:67:3D:C2:63:23:FB:5E:98:2F:A5:4F:78:1E:8D
X509v3 Authority Key Identifier:
keyid:F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:47:3e:6f:2f:f6:ee:47:f0:70:19:8b:a5:4a:27:97:9c:52:
48:42:fa:4d:40:62:58:e2:a7:78:f9:cc:c3:59:44:af:c4:99:
3c:8a:80:d4:bc:2f:ae:39:d2:d4:e4:0f:88:66:80:69:3d:11:
58:c2:1f:9c:42:86:9d:da:53:9e:f3:8e:3b:40:f3:b6:16:a3:
7f:69:86:20:76:e8:ed:94:95:33:63:12:cf:6d:fa:07:87:08:
f7:88:74:fb:b9:ec:f2:e1:66:50:2e:99:61:e7:14:45:fa:08:
95:ae:2e:fa:ef:5c:84:c9:d7:54:6b:73:1a:a1:bf:a3:6b:3a:
16:a8:c1:1a:75:8c:19:71:6b:b2:fd:8d:e8:7a:67:a1:0e:75:
29:b5:d8:23:45:26:7e:e8:47:9d:79:a9:0b:6e:b4:ab:01:2c:
d8:3a:81:aa:c3:c1:5a:7d:79:cf:55:23:52:e7:65:fa:4f:6c:
89:16:f6:de:e3:45:83:4f:43:58:a7:b6:21:de:6c:19:f8:96:
a4:7a:af:1e:c5:87:74:dd:88:d0:f4:84:fd:df:e9:8c:7f:c9:
28:c0:02:40:a0:6f:f8:c0:37:1d:e5:20:b3:e5:e9:0b:fe:8e:
e3:7c:f6:a7:4b:d0:32:14:ac:60:3e:cb:3b:7c:48:0b:0b:88:
7e:f6:fb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:20:53 2026 by rpki-client