Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: siGe4n2XdhHuZ9WBJELrDkolWh98p6x75lJtrSAg6nE=
Subject key identifier: 7D:31:FC:AA:24:C3:0C:96:D4:30:9C:0C:0F:98:37:73:85:64:59:2C
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 019D37F75C0E3FB49CE48CD691C45FF7D68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 1513
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: qghQKaTPLF7x1PMEbdWYBCC3Wdck5nSfzACs6CFzyN0=)
2: p9afRUC51SfaJyMaCVZSnQiB2hY.roa (hash: 6VxOCyWy4+A0UX6VtaLP95X/pFp2fxpWhbFoynGWOGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5c:0e:3f:b4:9c:e4:8c:d6:91:c4:5f:f7:d6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=7d31fcaa24c30c96d4309c0c0f9837738564592c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3a:4f:54:d1:f8:b2:c5:46:99:fa:97:25:90:
d8:52:30:1e:82:c3:a9:6b:9e:58:a9:41:6d:70:26:
aa:96:cf:8a:14:9a:55:76:04:ba:58:82:ff:3d:65:
77:84:3b:aa:50:27:c8:8c:69:42:1e:e7:cc:f6:e3:
32:67:cf:da:22:bd:40:42:0a:50:de:19:96:8e:74:
f7:45:77:6d:c5:eb:17:0d:97:f0:43:10:18:42:f7:
36:30:ec:48:6d:f9:52:5d:21:29:0b:aa:63:40:70:
82:e3:20:43:b6:13:f1:87:40:22:f6:4d:dc:7c:9a:
00:a7:20:0f:46:0f:53:e8:70:15:f7:8a:e4:a9:36:
3b:8d:5f:44:2a:2b:9d:7f:a8:be:40:51:b1:cf:44:
0e:f3:40:69:60:11:c5:1a:92:df:14:b2:1d:17:06:
a6:3a:0a:1e:9f:ed:5d:56:07:f9:06:e1:e4:96:33:
f2:f3:13:f0:06:b6:b9:bd:01:4f:eb:a2:a6:75:79:
b6:7b:44:4d:f2:9b:9d:9c:26:68:a0:3c:ae:72:1a:
b4:7f:af:c7:92:9c:43:a9:1d:7b:39:54:c0:74:6c:
19:25:72:d1:8b:08:8c:d0:ea:83:85:75:4a:9d:fe:
72:f8:22:44:24:b4:7a:1f:35:a8:0a:d8:9b:a9:5d:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:31:FC:AA:24:C3:0C:96:D4:30:9C:0C:0F:98:37:73:85:64:59:2C
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:97:0a:90:94:6f:1a:b8:1c:e8:85:c4:76:8d:c5:6b:45:57:
44:e5:bf:e6:80:ac:7c:58:64:1b:3f:26:d3:7e:99:43:a1:23:
32:84:60:79:2e:90:94:7e:3a:e2:56:3d:c0:c9:9f:78:0c:96:
ab:c6:b2:40:b5:19:66:e1:06:a1:f9:6b:71:84:8f:30:f6:f1:
84:76:75:c1:d7:06:2e:48:43:d5:25:d2:e8:f4:b9:0e:87:a6:
57:2f:a2:3d:69:5b:c4:94:8b:71:e0:14:43:e3:7d:69:d0:cf:
9c:cc:e3:2e:34:93:c6:75:42:65:d8:e5:63:96:c7:1e:26:75:
b2:25:d2:de:6a:cd:ff:49:77:48:fe:b4:62:45:42:07:6a:67:
49:0f:0f:0a:a5:ac:64:00:bb:e2:a2:4f:79:cb:d2:14:70:61:
80:1c:83:e2:0f:ea:d5:b8:07:b3:0e:47:14:ac:5d:6c:3e:a9:
24:7a:50:54:89:ec:c5:4f:75:2d:e6:58:2e:9f:95:fa:f5:fd:
ca:00:09:6c:ee:6f:5a:ec:12:06:bb:d9:a0:b8:80:f7:1f:3d:
05:c6:18:cb:00:e0:17:fc:86:14:cd:a8:33:cc:3b:dc:a5:43:
e2:bd:34:99:4d:09:f3:bc:4a:b8:b1:e7:42:53:8d:16:7d:78:
c6:e4:23:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:10 2026 by rpki-client