Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: Bnrmj+9EVCd2ItUj/FDTY1wRMW2DYMneDwD3KRXH0aw=
Subject key identifier: 33:3D:A9:BE:C0:B8:6B:3D:27:D9:83:51:38:6D:1C:2A:D3:E3:15:37
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 019E2F965FED71FF0CF2AB80256AE5ADB041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 190B
Signing time: Sat 16 May 2026 07:00:44 +0000
Manifest this update: Sat 16 May 2026 07:00:44 +0000
Manifest next update: Sun 17 May 2026 07:00:44 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: YESceBh2nxECCmfjb1DfD4UmHRMVf7QSPO/Tj20kPAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:5f:ed:71:ff:0c:f2:ab:80:25:6a:e5:ad:b0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: May 16 07:00:44 2026 GMT
Not After : May 17 07:00:44 2026 GMT
Subject: CN=333da9bec0b86b3d27d98351386d1c2ad3e31537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:74:4a:fb:a9:6e:91:ac:71:54:a2:d6:f4:74:
f5:ae:09:88:d9:4b:3a:a2:39:3c:c8:34:e6:25:a3:
01:7f:4f:16:0f:c1:05:01:e5:01:7a:f7:0d:d0:d1:
dd:5d:9d:ca:31:ad:ba:16:5b:6f:e0:ce:da:ac:ff:
de:bd:48:0d:a7:0f:32:49:1b:11:9b:bc:d0:05:80:
94:20:0b:3d:50:43:fb:85:75:55:61:42:a8:f6:ea:
40:97:cc:0f:17:1c:9e:ce:0a:be:53:83:dd:3f:f5:
63:9a:b4:fd:9e:62:0d:3a:12:46:b7:e9:18:a6:39:
ff:ab:09:9d:15:c5:17:c2:c8:dd:82:97:c8:a3:6b:
bd:82:14:2b:75:69:6c:39:40:21:1d:4c:fe:42:ae:
44:e6:bb:7a:2a:2a:09:cb:65:35:8e:55:01:ac:93:
46:98:07:8e:8f:1d:54:1e:8b:dc:06:92:e0:41:3e:
fd:2b:c7:47:70:f4:30:a9:9b:e4:eb:e8:d3:35:59:
e1:eb:ec:64:db:88:d2:fc:20:43:38:5a:12:14:e8:
31:31:48:05:ce:92:16:c8:09:5d:92:b6:7f:db:69:
24:a7:3b:4a:78:1f:17:97:a2:56:06:f9:aa:e9:ed:
f4:62:b7:e4:1e:a3:c9:95:f8:92:26:e6:fc:33:3c:
c0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3D:A9:BE:C0:B8:6B:3D:27:D9:83:51:38:6D:1C:2A:D3:E3:15:37
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c6:a4:4c:80:f8:a1:b6:40:bb:b3:27:e7:cc:34:8c:33:c7:
37:09:2d:1b:7c:30:c9:b2:66:c7:a4:33:ea:4f:0e:13:53:10:
8d:ab:bd:ec:73:b3:53:42:ba:9f:a1:7f:ea:a3:77:68:33:ef:
35:08:86:40:e2:c8:5b:08:4b:b1:fd:4e:81:49:9f:52:96:56:
17:5a:d8:f3:55:a0:35:6e:58:fc:01:f2:f0:3e:72:91:2a:e5:
e1:73:ed:18:26:29:6a:6c:b0:37:81:7f:e6:7b:73:cd:9a:95:
3a:ad:bb:fe:85:11:2e:35:7f:96:01:bf:32:ec:6f:55:03:0e:
e9:70:ad:96:88:a2:d9:e0:0a:03:01:24:6d:1b:72:8d:a1:bd:
51:88:0e:7b:18:17:44:cd:27:9d:89:b5:69:01:a5:ca:f7:d6:
38:bf:65:d8:3c:d2:e2:a9:59:8d:6f:15:97:4d:aa:43:ff:0f:
6b:1b:66:49:ef:a9:68:06:88:48:4d:82:51:00:5f:a5:a3:95:
7c:6a:64:bc:ff:05:01:17:08:d6:49:1a:e0:96:98:89:d5:15:
18:b9:64:ff:bf:7a:55:47:8b:b2:9b:a8:c3:df:4d:8e:8f:07:
9f:02:cd:c9:2f:40:d1:12:e2:13:e8:a6:4f:c1:1c:67:b3:b8:
0b:e1:b0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:29 2026 by rpki-client