Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.mft
File: pOAhVPJf6O9wNihteq6arnOg1yA.mft (raw, json)
Hash identifier: UUhvdpKigdBGCprpLJCdAmGruHEAmseZD2INJ43iM3c=
Subject key identifier: 7A:A3:1C:10:E2:B4:E2:88:AF:8B:32:66:2C:5C:11:E8:26:8D:45:CE
Authority key identifier: A4:E0:21:54:F2:5F:E8:EF:70:36:28:6D:7A:AE:9A:AE:73:A0:D7:20
Certificate issuer: /CN=a4e02154f25fe8ef7036286d7aae9aae73a0d720
Certificate serial: 019D3977F3228838F3349B242E46124AD9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOAhVPJf6O9wNihteq6arnOg1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.mft
Manifest number: B9
Signing time: Sun 29 Mar 2026 12:00:55 +0000
Manifest this update: Sun 29 Mar 2026 12:00:55 +0000
Manifest next update: Mon 30 Mar 2026 12:00:55 +0000
Files and hashes: 1: pOAhVPJf6O9wNihteq6arnOg1yA.crl (hash: jSrpZt5jiMSbKRikUOp4lFjBW60mtyDM1gf/0K3Scmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOAhVPJf6O9wNihteq6arnOg1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f3:22:88:38:f3:34:9b:24:2e:46:12:4a:d9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e02154f25fe8ef7036286d7aae9aae73a0d720
Validity
Not Before: Mar 29 12:00:55 2026 GMT
Not After : Mar 30 12:00:55 2026 GMT
Subject: CN=7aa31c10e2b4e288af8b32662c5c11e8268d45ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:8f:9b:56:47:7f:46:d3:2d:fd:c4:e0:58:
6d:56:82:fa:2e:96:60:2a:7d:2e:ec:dc:e2:27:63:
1c:e6:98:14:ad:4b:02:bc:66:c4:2b:76:46:6a:6a:
b9:7e:52:a4:97:9a:f4:34:91:4b:84:fa:bc:9d:bf:
dd:bb:a4:5f:a1:9e:df:3a:45:fa:9d:ac:e0:31:49:
e4:7c:b7:60:cc:25:34:a5:a5:cb:e1:f2:94:2d:c5:
27:84:2f:5c:7b:b9:62:7e:8c:e8:6a:9e:fd:d3:ae:
4b:24:99:8c:46:c2:f5:d0:aa:34:ed:a8:72:90:72:
5f:d1:07:1e:a5:32:c0:02:b6:f3:3b:1e:0e:68:15:
cf:35:57:0c:a2:eb:1b:94:6a:eb:38:fc:46:8b:dc:
15:68:b3:0b:46:f0:e3:50:f1:46:3e:67:9e:07:44:
6a:3b:2d:8a:59:26:04:3b:09:e3:0d:75:9c:b0:ca:
4b:77:76:b3:f9:30:77:66:44:b3:77:8d:7c:2c:a3:
74:64:e0:46:c1:25:32:34:61:14:ae:65:4a:4e:73:
78:45:d2:c3:9f:51:7d:16:48:57:7f:da:83:f6:cd:
60:e8:d4:a2:62:4f:e1:a7:86:5d:3b:ff:b4:69:a4:
b0:02:e1:bb:a4:44:97:aa:6a:2c:81:84:f6:b9:de:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A3:1C:10:E2:B4:E2:88:AF:8B:32:66:2C:5C:11:E8:26:8D:45:CE
X509v3 Authority Key Identifier:
keyid:A4:E0:21:54:F2:5F:E8:EF:70:36:28:6D:7A:AE:9A:AE:73:A0:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOAhVPJf6O9wNihteq6arnOg1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:15:b0:bb:8a:23:1f:c4:81:10:56:56:f3:ab:fa:ac:21:7b:
0a:b1:17:50:08:72:04:e1:5e:76:34:d3:67:4e:12:db:22:73:
fb:4c:af:d4:39:6f:ed:24:ad:c6:9c:14:59:17:28:5d:73:41:
fa:dd:7d:0a:73:32:24:37:1e:b1:c3:2c:59:9a:6f:51:5a:c2:
f6:de:54:de:61:77:90:6a:4b:36:c2:6f:f2:b2:5b:7a:4d:88:
c5:a2:b1:99:a8:4e:b0:4d:b9:27:60:b6:b7:69:0c:7d:85:33:
ef:7b:2b:7f:fa:86:42:66:d4:a6:23:79:c4:5e:0c:12:fa:4b:
c4:47:79:8b:b7:5a:4a:8c:ba:29:c0:6a:b8:fa:dd:3e:d8:cc:
b7:2a:b9:8f:93:0a:3d:9b:77:18:bc:8f:58:a5:e1:24:97:ee:
8c:3c:de:26:22:c1:1c:61:07:f0:88:79:32:6f:b4:eb:a6:8b:
85:d1:49:a7:fc:ab:dc:3d:97:10:9c:2f:ed:f1:09:2b:e1:25:
cf:74:68:13:f3:f4:ae:bb:bc:8b:39:d3:87:85:7d:db:82:3e:
2d:fd:40:81:3b:21:75:18:db:9f:91:d5:8d:29:25:66:e9:3f:
4a:dd:a2:f9:db:1e:11:9a:c3:e1:3b:22:92:a4:65:62:21:6e:
45:8c:46:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:06 2026 by rpki-client