Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: mWOtBZeTCWdqK2k34qc5TRq+vBqi2VdnYLzQiKe7HrY=
Subject key identifier: B7:AA:E9:A3:34:3A:FE:83:73:1B:5E:62:4A:4C:9A:7E:7E:68:C7:5E
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 019D39AF214B390D8DE9A9942FA6D3BC24AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 13:01:11 +0000
Manifest this update: Sun 29 Mar 2026 13:01:11 +0000
Manifest next update: Mon 30 Mar 2026 13:01:11 +0000
Files and hashes: 1: 4XcJfnMEQwRMn36H0whqZmqgRz0.roa (hash: 3cAlArq6y9UICoHc8IZifo9HP9trBfeMANvUPBi0r6k=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: vn4/RACvraJS0guuN+Dimk4VAts7AxlI+U8l/1pg5Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:21:4b:39:0d:8d:e9:a9:94:2f:a6:d3:bc:24:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Mar 29 13:01:11 2026 GMT
Not After : Mar 30 13:01:11 2026 GMT
Subject: CN=b7aae9a3343afe83731b5e624a4c9a7e7e68c75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:32:b3:fe:ff:9e:46:80:f7:d4:72:36:c5:48:
39:f5:a7:00:0a:1d:26:a8:b1:d8:70:1c:b6:d6:9f:
be:99:b3:fa:d2:a9:50:60:ca:05:88:a1:b9:ee:b1:
a1:42:fb:6f:0e:a8:55:bb:b0:26:76:66:cc:f9:08:
7f:d3:f7:d8:d9:65:55:f6:92:7b:68:b3:ad:6c:7a:
c9:cb:8b:0e:3a:8b:b7:c4:25:5d:05:0a:5d:11:c5:
c1:9e:cd:4c:d5:96:0e:d3:de:da:28:44:5b:74:8f:
26:5d:c7:6d:3f:2a:c0:62:50:8a:f8:14:27:48:8d:
9c:29:af:a5:19:5a:e3:01:b2:c8:bd:0b:c3:a2:58:
01:22:b8:f9:af:09:97:8f:19:6c:19:4b:f0:11:8c:
e6:45:0f:3f:2b:61:1b:86:e3:9e:f3:51:c8:f4:82:
1a:0a:c8:48:46:e7:dc:34:f7:0a:e2:b7:2e:a6:9e:
d3:6a:5e:27:22:00:f9:16:bf:76:dc:50:66:c4:f5:
68:23:9d:de:6c:37:de:69:49:67:38:d7:d2:b2:0a:
8f:22:a0:ca:aa:7b:24:90:5a:6d:0e:6b:c5:1b:93:
17:54:79:bb:12:b3:69:c0:8e:53:98:06:f5:32:66:
e7:18:d8:f4:99:3d:6b:cb:8e:9d:f3:ca:07:8b:fb:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AA:E9:A3:34:3A:FE:83:73:1B:5E:62:4A:4C:9A:7E:7E:68:C7:5E
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:30:85:37:07:8f:3a:9c:84:61:70:92:05:63:a9:81:ea:29:
e0:bd:9d:9f:58:c2:bc:b4:1f:86:96:f9:e1:05:9b:48:d6:99:
7b:08:dd:c9:b5:cf:4b:cf:0b:6e:fc:ab:6f:c4:a4:9c:30:06:
71:74:2c:1b:9d:3d:51:01:36:a2:57:22:66:13:41:6f:c5:2f:
b6:4b:9f:15:12:99:bc:65:9c:f5:55:ce:0d:5d:e3:93:95:9c:
ed:98:be:ac:14:83:a0:58:35:10:d1:cf:b5:52:8e:32:02:9d:
9c:d9:63:2a:15:bb:55:3a:03:23:c9:d5:6e:44:5f:4f:b6:de:
18:02:18:3b:e3:92:fc:fb:cd:11:e3:34:90:41:07:a7:e7:88:
7d:56:e1:e6:0f:e8:ca:5d:f5:ea:de:c7:8d:c5:eb:f8:a3:6e:
9f:d1:4f:63:e3:a3:f5:91:85:b8:32:5c:76:47:b1:ba:43:c1:
6b:3d:10:95:20:7f:35:e0:1c:25:13:e5:73:10:4b:ef:c0:06:
d1:2f:93:9d:c4:15:cd:de:78:f0:94:29:93:b3:35:aa:1a:7f:
dd:bc:1e:d0:a9:e5:bb:4a:67:1a:75:5f:12:d6:76:fe:4a:ac:
38:d1:e3:44:0b:b3:40:97:03:f2:a9:d8:64:a4:ad:5e:ab:28:
69:f9:bc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:05:03 2026 by rpki-client