Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: 8UK6KxGEg4r+pXt/zHadW3mPZMGvF7CgXdoaDY+jTGY=
Subject key identifier: 09:9D:B8:50:61:B9:6B:13:2E:AC:B6:48:8A:AC:D9:81:8D:E4:5E:A2
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 019D38666128480C953878185FDFCCADFC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: pGS9ctgrPVRIZ0J1q15n6HtQu2Wt+hcz5FsMPxBeNBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:61:28:48:0c:95:38:78:18:5f:df:cc:ad:fc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=099db85061b96b132eacb6488aacd9818de45ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:82:29:fe:05:d8:b7:0a:75:0f:95:22:e6:
00:f6:52:93:6f:89:5f:76:b1:75:62:03:53:b3:6e:
2e:b3:40:fc:0a:65:80:bb:6d:19:d4:45:af:90:41:
2d:d8:21:97:74:5c:77:be:90:1d:51:d1:67:72:25:
72:6b:1c:64:0e:2f:bb:9b:80:b4:c7:84:fd:52:56:
63:e7:80:f4:2f:c2:09:5f:67:ca:66:ca:5b:79:32:
36:0f:09:34:b2:2c:83:04:07:78:db:30:55:10:7f:
b3:9c:0b:7c:74:ca:83:e7:60:48:48:e1:cd:4c:3e:
ba:14:e0:39:9a:15:1c:a0:6c:91:91:2b:19:7f:51:
fc:ae:9a:83:dd:ec:4f:2f:aa:0c:e5:4d:31:35:ae:
2e:fb:52:4a:4c:c4:c0:05:21:c2:93:b9:ce:35:bd:
4e:3f:06:c1:32:96:f7:c2:35:b8:ed:64:ba:88:0a:
95:7d:54:96:d4:96:4c:92:45:e0:82:24:5c:03:d5:
78:ec:c3:27:9f:93:07:54:db:a3:55:b8:c3:66:7d:
93:55:23:39:52:ae:36:cf:6b:3b:d1:8b:f1:5a:9d:
7a:68:ef:61:e9:98:76:dc:67:f9:d8:79:8c:11:7f:
36:17:e6:f0:74:37:a4:b9:51:55:10:94:26:8b:95:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9D:B8:50:61:B9:6B:13:2E:AC:B6:48:8A:AC:D9:81:8D:E4:5E:A2
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0d:8a:e6:97:83:ab:93:e0:ca:e4:f7:d6:e0:5a:ef:3b:86:
ff:bb:ba:e3:54:93:9d:01:94:77:99:6c:98:42:6a:ad:80:59:
8f:1d:fa:75:73:aa:aa:33:b8:8c:91:a0:6b:b4:d1:d5:fb:cb:
eb:fb:4a:03:02:39:ab:a5:38:ba:8e:f3:2c:ee:4a:d4:2d:a2:
02:9b:02:2e:e1:90:f9:db:49:63:91:f5:02:8b:68:97:ed:ba:
3b:d5:4f:c4:c6:7b:90:f9:9c:a4:27:38:23:81:9f:7d:28:89:
74:64:72:8b:f2:84:e5:e0:48:a6:fc:85:35:d0:4e:be:95:b0:
f0:0a:af:c7:3e:a8:c6:3b:ea:b5:37:b6:14:57:07:f6:28:43:
9f:b0:e5:1e:6d:3c:41:94:e5:77:29:15:78:4d:b5:06:a3:33:
88:92:9d:15:4d:58:c5:83:b9:6d:5d:76:20:bd:ec:21:30:af:
08:28:34:59:63:0a:2c:a4:9f:b1:f4:20:ff:2a:e9:39:a5:87:
fb:51:13:fa:89:01:67:92:8a:6c:92:25:ea:78:b2:36:92:46:
99:78:08:5a:9f:fa:d7:80:55:90:3b:8c:71:18:0f:92:1b:d4:
c4:5a:9a:d7:6c:bb:da:42:76:1c:94:ab:92:4b:ac:a5:8c:2f:
d4:e2:da:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:47 2026 by rpki-client