Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: G5/alFqOGiurlJlbHy9HL9bsr2zkt0TgQ41+OM6KBgo=
Subject key identifier: B6:5A:98:9C:D0:90:11:8D:04:F7:F9:DF:18:37:EF:81:20:15:AA:0D
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 019D394114033AB2D5B9E6EC0915A3B50568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:00:59 +0000
Manifest this update: Sun 29 Mar 2026 11:00:59 +0000
Manifest next update: Mon 30 Mar 2026 11:00:59 +0000
Files and hashes: 1: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: oQaxQaa/GPT0CdWKvG5Vlsx6ZiDbEhAIIYPEv8eWMqM=)
2: YOETByGoQWvX1MVQbtKSNQjPq4I.roa (hash: e5Ix1WhHdMT4rCzknHHsERtns5aDH3xdPuHebqlTS6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:14:03:3a:b2:d5:b9:e6:ec:09:15:a3:b5:05:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Mar 29 11:00:59 2026 GMT
Not After : Mar 30 11:00:59 2026 GMT
Subject: CN=b65a989cd090118d04f7f9df1837ef812015aa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:e1:c5:b5:a2:78:cf:1e:cc:90:9a:21:0d:
b8:fa:20:82:a7:ab:0d:c3:7c:09:3a:87:43:0c:c5:
f9:c2:62:e6:d6:e1:13:84:a9:47:6e:1a:79:6f:9d:
b4:e9:0d:da:3d:a2:e7:07:48:43:14:31:0c:68:7d:
1d:93:19:06:54:c3:26:8e:6d:9b:0e:eb:d3:26:0e:
c9:ca:91:c1:4b:fb:37:78:e4:e0:71:43:0b:a0:a7:
2f:4b:d8:de:48:bd:af:3f:c7:02:b6:5a:83:60:00:
23:fd:35:a8:ed:db:17:c7:e9:8b:f6:99:3f:8a:aa:
36:d0:18:e4:a8:a9:6c:25:94:97:5b:8e:d6:de:aa:
b7:fb:bd:42:55:9d:e3:20:5f:9d:2c:f1:c3:57:a5:
71:6f:b3:e2:56:f3:f6:19:bb:62:cf:d0:1c:84:3b:
57:59:30:d8:0e:a3:fa:a0:ae:1c:03:ff:fc:6b:4c:
a1:a3:64:42:0e:b0:2f:6c:25:3b:e6:cd:50:cd:9c:
c7:75:ff:2c:7e:0d:94:58:17:ea:0a:ea:0b:05:7b:
12:63:a7:fa:19:7e:96:e4:f3:7b:e9:7d:6a:d5:63:
f5:cf:90:d6:61:91:5c:e4:3b:48:f6:5e:5b:46:70:
c6:ce:19:94:1d:07:24:d2:72:ee:81:f3:1a:54:83:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5A:98:9C:D0:90:11:8D:04:F7:F9:DF:18:37:EF:81:20:15:AA:0D
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:36:04:0c:d4:37:99:a7:ec:1a:a1:96:23:55:a4:c1:d5:f4:
5b:4e:ac:6d:66:30:4d:62:19:da:bd:60:bd:cc:7c:bc:b3:98:
bd:af:7f:d7:34:29:78:0d:ef:a5:35:04:20:d7:11:c7:dd:bc:
8c:b7:84:b6:3d:b2:ce:13:26:73:e3:ce:14:14:61:d8:3c:dd:
35:cc:1c:ba:81:ea:09:d8:f0:9a:ad:47:cc:ed:53:07:2c:5a:
b0:2a:14:01:71:8c:ac:1d:ad:d3:85:4c:a6:99:05:9f:fd:ce:
b7:82:52:f6:78:c3:bc:d8:de:a7:5e:e4:9b:c7:76:41:84:4f:
05:6a:20:66:00:53:7d:f3:24:09:2b:e2:e5:ad:d8:10:37:81:
77:4a:45:e6:1a:76:c7:7d:4b:46:ce:7d:1d:4f:82:8c:7e:f3:
20:0c:12:65:bb:ee:35:e2:a8:82:43:04:53:5a:6e:b0:28:bc:
92:ca:3d:38:4e:de:a6:4a:95:01:1a:c0:f3:7a:5b:59:90:e8:
47:e6:8b:b4:15:2e:4b:15:41:38:02:0c:80:64:b1:5c:37:d1:
63:aa:b0:92:35:18:40:49:70:19:4d:ef:86:ce:e8:e5:f0:81:
45:15:ac:79:b6:8d:30:2e:9a:ca:8f:25:9f:f2:8b:c1:f0:d7:
f8:09:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:51 2026 by rpki-client