Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: pHtQ3+x9xX9tnI8e75FRyrANvN3kkRkZPnZVEIKZwu8=
Subject key identifier: 65:14:B0:0C:03:0F:A5:E5:8F:37:E2:10:FB:B8:66:E0:00:62:4A:E4
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 019D9E1B77483A8BC6FCE5EE88D6FFE9DE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 1855
Signing time: Sat 18 Apr 2026 01:01:33 +0000
Manifest this update: Sat 18 Apr 2026 01:01:33 +0000
Manifest next update: Sun 19 Apr 2026 01:01:33 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: xHU15s/MHAHZLUMS6d/x+odiIVSHEIOVcWxqUK5lUs8=)
2: n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa (hash: 20MmpTiNHIRI615LwLOcDmRN7JohlEVDp5KlQ4ApT5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:77:48:3a:8b:c6:fc:e5:ee:88:d6:ff:e9:de:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Apr 18 01:01:33 2026 GMT
Not After : Apr 19 01:01:33 2026 GMT
Subject: CN=6514b00c030fa5e58f37e210fbb866e000624ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:8f:37:14:9a:a3:46:e9:0a:59:7e:a8:bd:
8b:48:c0:29:8f:b6:a7:4c:76:24:4d:85:26:af:d1:
72:b4:b1:a3:16:79:74:3d:7b:05:84:e7:2e:c4:b7:
2c:1f:2d:9d:01:cb:ab:9b:73:61:0f:f5:56:95:39:
f6:cc:88:9a:08:15:f6:62:b7:bd:3f:b3:5b:d0:be:
8f:8f:92:09:fb:d2:7d:84:82:13:99:bf:8e:c5:6d:
d9:a0:6d:a7:ee:0a:83:c5:34:03:59:7a:c7:ad:bd:
a8:3b:aa:7b:14:5a:cf:cd:9b:c4:53:7d:3e:53:48:
30:5c:f3:0b:7a:1d:7b:14:0e:5e:3f:52:09:6b:0e:
cb:ef:60:fe:8d:0a:35:91:e6:63:f1:99:ab:3d:80:
13:e0:e9:5c:26:e7:c8:bd:18:57:31:65:7a:81:1f:
65:72:91:d5:9e:56:1e:42:ab:38:29:6d:42:5c:22:
d7:03:f6:19:97:1b:f4:9f:1b:ef:a4:8c:a7:e5:92:
11:c5:96:a8:b3:f6:1a:03:ee:c2:c7:47:20:64:2f:
20:f0:7c:37:c8:0e:41:10:73:4d:f1:4e:28:e8:8c:
41:b5:6b:e0:41:ff:24:23:ac:fc:63:5e:ea:74:96:
81:c5:c1:e8:c9:15:68:ab:80:ba:52:51:21:4e:81:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:B0:0C:03:0F:A5:E5:8F:37:E2:10:FB:B8:66:E0:00:62:4A:E4
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7d:f4:e5:95:61:00:7f:e6:20:0c:2f:3c:d9:e3:62:1b:a9:
54:90:a8:ca:03:9e:b7:ac:47:c2:20:e5:a7:03:26:12:f5:49:
6a:4b:ed:2d:a9:23:41:10:66:3b:41:bd:55:c1:b7:26:40:13:
af:9f:71:c9:8e:61:ef:90:b0:c8:53:83:51:ae:1e:b5:82:98:
a4:c1:c0:d1:6b:92:d4:fd:85:fa:85:53:66:b5:50:ad:45:90:
75:4c:53:fc:fd:3c:b0:bd:a4:57:e1:a4:df:06:b8:66:e8:88:
b3:9e:b7:09:8a:9b:e4:d1:cc:08:c5:2e:ec:0d:d9:c1:6a:d0:
56:dd:3b:3d:e8:56:16:1c:80:05:9f:ff:28:65:05:bc:c9:64:
0a:ae:56:0c:52:5e:bf:bd:45:42:d5:96:3b:23:c7:f1:dd:05:
c4:8a:7b:48:a6:97:1a:ac:dd:c8:8f:fc:93:48:46:26:8f:cf:
8e:f0:18:2b:b2:c0:4f:33:56:38:ef:ef:c8:68:1f:58:c1:f3:
5d:a3:6a:ed:9b:0d:93:cc:9b:61:3d:a6:f8:7f:80:19:2c:0f:
b0:96:b0:56:40:3b:0b:c3:e0:77:7c:33:53:ed:73:fa:67:6e:
70:bc:cf:8d:5d:eb:83:84:01:56:39:2f:c3:91:39:70:9b:34:
ca:95:41:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:58 2026 by rpki-client