Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
File: 0c9dkt13uO9-1s1XyqoQr9mOnlo.mft (raw, json)
Hash identifier: FhRDEByNjKFMmeZzzrQl8klIYxk5NqD9sIsK3+Hm+t0=
Subject key identifier: 4F:35:F8:F3:FE:8C:CA:64:13:65:B6:59:D4:5D:A1:F8:1A:58:06:91
Authority key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
Certificate issuer: /CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Certificate serial: 019CBF6016724E1BC538C6BC69EAEB9B1A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
Manifest number: D6
Signing time: Thu 05 Mar 2026 19:01:11 +0000
Manifest this update: Thu 05 Mar 2026 19:01:11 +0000
Manifest next update: Fri 06 Mar 2026 19:01:11 +0000
Files and hashes: 1: 0c9dkt13uO9-1s1XyqoQr9mOnlo.crl (hash: tXw4LwbqqEi74B7cUYFoWVKBNErpU6QrUNRGZcQYxt8=)
2: aRPei__YV55E5LayLWDZlLmCI2M.roa (hash: Cq96j35j1pjMRWQ8I4PQ7Ruzt7oVF+lvmFKi5QfS62o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:60:16:72:4e:1b:c5:38:c6:bc:69:ea:eb:9b:1a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Validity
Not Before: Mar 5 19:01:11 2026 GMT
Not After : Mar 6 19:01:11 2026 GMT
Subject: CN=4f35f8f3fe8cca641365b659d45da1f81a580691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:bc:f2:18:a9:65:24:ef:6c:59:99:4a:75:
a2:04:69:7a:b4:bf:e5:e2:00:4c:20:2b:1c:ce:58:
f4:a0:90:17:ca:ba:ca:09:13:61:11:ce:ca:41:ea:
87:5d:fe:23:11:85:13:33:8d:e8:2f:33:af:ff:8d:
20:99:a1:ae:b8:cc:94:29:0d:85:10:5b:7f:e9:1b:
90:ba:40:71:20:8b:d5:90:00:62:1d:8a:05:11:00:
65:1e:cd:4d:77:6b:0e:17:86:68:0d:04:97:a1:af:
15:17:35:f8:d4:ad:f8:16:36:15:77:c2:b3:cd:7c:
75:0a:b6:19:ab:2b:7b:60:84:dd:01:39:56:ae:15:
e1:d6:37:93:1a:43:a2:8e:7c:6a:11:fb:5f:7a:80:
e8:6a:74:e8:5b:44:fe:a8:b5:27:17:7a:56:ad:1d:
1d:d9:71:af:f3:4c:ab:5a:1b:ae:7e:89:34:9c:f9:
a8:ad:32:9d:fc:4d:78:31:7d:33:9b:83:d2:fc:b2:
2d:81:b8:85:0b:d6:f0:41:fd:19:20:20:d3:e1:eb:
2c:bb:39:e5:1c:3b:13:eb:84:18:fa:f3:d0:a8:df:
f6:b5:07:f1:af:5c:ea:4a:c4:d6:64:52:7f:a1:37:
12:bc:6c:3c:f3:0e:39:47:e8:81:c6:5d:1b:f7:c7:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:35:F8:F3:FE:8C:CA:64:13:65:B6:59:D4:5D:A1:F8:1A:58:06:91
X509v3 Authority Key Identifier:
keyid:D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2c:e5:c3:8c:b4:f4:0d:ca:c5:1e:bc:2b:78:73:6c:df:0d:
82:cc:7d:d6:6a:57:36:2e:6a:16:f1:1d:a7:e5:7a:19:13:c6:
84:d7:dc:2c:d0:7d:54:52:39:83:d4:26:51:68:9d:1d:86:e2:
c9:a4:af:95:d8:11:c3:97:b4:66:b3:1d:16:1f:e4:eb:e8:8e:
c1:69:ea:02:7a:4a:6c:14:15:33:f9:65:2b:0f:99:73:2f:e2:
db:64:bf:6d:54:f2:fe:ed:24:60:b9:49:fa:72:8e:e3:6c:81:
73:e4:a2:48:b3:a7:02:5a:38:1e:eb:46:a5:81:88:ac:f4:15:
29:19:05:9c:d9:bb:73:f0:5a:b4:45:a6:cc:dc:55:02:56:f4:
a2:a3:8a:95:90:2c:7e:b6:04:90:52:54:cc:79:39:f2:e4:7a:
7b:19:b3:9a:ae:7f:0c:9d:f1:cb:9a:1c:7e:d0:1c:2a:ec:93:
eb:02:9b:e3:17:e2:54:4a:bc:f4:d1:f2:c1:dd:18:56:81:bf:
6b:23:bd:b3:44:38:85:1e:d7:25:fd:39:b4:ac:90:25:1c:c4:
c4:e3:25:59:17:b8:42:75:8e:eb:85:f6:f2:29:cd:82:12:0e:
7f:de:4a:fa:da:61:73:e1:fa:84:17:b8:bb:17:d8:0f:45:07:
9d:a3:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 04:48:26 2026 by rpki-client