Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: xocGAPdEWb5BY//abxcg91LJtQ2uFildAL9XFmPx3MY=
Subject key identifier: F6:D7:A9:B2:15:F6:25:36:22:D1:A0:C9:8F:13:BC:54:5E:2C:4E:92
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 019CB2802643B655FDB10991189DE8DE27FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 17DB
Signing time: Tue 03 Mar 2026 07:01:08 +0000
Manifest this update: Tue 03 Mar 2026 07:01:08 +0000
Manifest next update: Wed 04 Mar 2026 07:01:08 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: Hc4axRQS6ML98WinpEApshUzPmT2oPOsh4rpG9nQVLs=)
2: n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa (hash: 20MmpTiNHIRI615LwLOcDmRN7JohlEVDp5KlQ4ApT5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:80:26:43:b6:55:fd:b1:09:91:18:9d:e8:de:27:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Mar 3 07:01:08 2026 GMT
Not After : Mar 4 07:01:08 2026 GMT
Subject: CN=f6d7a9b215f6253622d1a0c98f13bc545e2c4e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:f1:18:64:69:1a:61:82:d8:7d:b6:0d:3d:
ff:05:ef:19:74:1e:e6:20:3d:09:c3:a5:0c:b1:5f:
2f:66:bc:c1:e9:b9:55:18:e2:f0:fa:80:22:84:ed:
3c:19:56:2a:e8:74:11:38:56:de:74:73:02:38:67:
12:4a:26:08:2d:8d:f8:32:03:a4:05:29:6b:3d:9d:
99:0c:a7:15:9a:f2:8a:1d:ea:53:af:18:bf:ac:c7:
1c:bd:67:25:6c:5d:22:49:c1:68:b7:2f:7d:5c:44:
0c:73:38:b3:64:69:40:89:e9:b8:41:2d:27:fd:34:
f1:e2:6e:00:b0:18:09:96:5e:45:af:fd:82:1a:48:
43:51:bd:14:02:c9:8e:3a:2a:84:4e:1d:a5:22:ac:
7d:38:6e:4b:b1:f0:bd:8e:79:38:02:8c:77:6f:23:
88:b2:a1:a3:1e:52:8d:f0:4a:a3:0b:b8:5e:69:d8:
12:9f:e6:a2:5e:f6:9d:6f:b1:61:ec:65:f4:5c:aa:
7c:57:61:f2:cd:02:68:49:ad:07:01:88:6e:0d:b0:
f2:0a:60:60:2c:bb:d2:d9:4d:9b:c3:b8:93:3c:db:
7e:1e:da:45:35:a0:52:1d:06:4c:0a:5e:cf:93:23:
2a:39:b8:81:d7:2e:ea:ea:ba:f5:2a:88:6e:78:67:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D7:A9:B2:15:F6:25:36:22:D1:A0:C9:8F:13:BC:54:5E:2C:4E:92
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:31:29:a9:20:ff:0e:da:81:76:fb:fe:ff:2c:b2:55:21:fa:
b2:da:e5:2e:27:f5:35:b5:b4:56:79:11:df:b8:fc:98:d3:da:
7a:b9:c9:ca:fc:f9:ec:b7:df:28:76:b4:8f:0d:22:72:72:a6:
01:7a:e8:7d:d1:e9:f5:a9:ef:38:e4:93:2b:11:32:d9:db:3c:
26:82:11:d1:44:e4:31:01:a6:31:a3:b0:0f:d8:b1:25:a3:ad:
45:38:cf:0f:e2:18:c7:ef:a1:54:8e:30:dc:c2:68:63:e3:03:
b5:7b:16:cb:96:e7:18:f1:8c:7f:1b:94:64:15:37:d9:55:c3:
52:f2:8b:6a:b9:dd:49:6b:ea:43:60:0b:79:81:a0:a4:d2:a0:
2f:08:a2:8b:11:47:82:34:6c:71:4e:09:01:d9:9f:ae:ca:ea:
13:42:1b:6c:77:a9:a2:4d:f0:50:3e:1d:2e:78:ef:e1:4a:24:
8e:b4:8b:2b:07:d6:94:88:ec:3e:e0:b4:b4:8a:16:c5:36:41:
59:aa:b6:c3:1b:41:bd:49:ca:24:06:3f:ab:1a:a7:10:1f:2d:
7c:5b:87:33:75:13:d7:80:f9:c0:34:65:30:3e:23:07:f1:26:
74:97:34:5f:8b:73:bd:8a:eb:9b:cd:84:ef:9a:4d:ea:c7:5c:
eb:79:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:58:41 2026 by rpki-client