Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: D/exV3Ypgi/8DonZqPzb1gYRPoUYfAg7/gZ9X/asOtI=
Subject key identifier: C1:E2:6A:8D:74:3D:D0:DF:07:FD:B0:D5:01:4D:DF:83:4F:1C:75:64
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 019CABD94944039C43198B21094D9C080657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 00:01:09 +0000
Manifest this update: Mon 02 Mar 2026 00:01:09 +0000
Manifest next update: Tue 03 Mar 2026 00:01:09 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: R9dlkeCk6SxRoCNP8Iio5CNnWKDL96k6Aoj8NND1MgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:49:44:03:9c:43:19:8b:21:09:4d:9c:08:06:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Mar 2 00:01:09 2026 GMT
Not After : Mar 3 00:01:09 2026 GMT
Subject: CN=c1e26a8d743dd0df07fdb0d5014ddf834f1c7564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b5:15:db:ce:fa:75:a7:e2:e9:5d:37:15:1a:
78:1a:85:21:d2:de:30:89:25:bd:2d:f2:61:7f:e7:
77:aa:27:8e:ca:1e:dc:31:ca:08:c5:f5:0e:4e:5c:
1e:fe:81:eb:8c:d9:8f:52:6b:e7:fd:c2:9a:58:f8:
e8:30:74:75:91:b8:c2:cd:67:2e:83:3c:e9:af:b2:
bc:0d:23:4b:a3:f6:72:ef:0b:46:b9:cc:ae:76:d2:
3e:70:73:20:aa:7d:f1:ca:b7:1a:84:e8:39:66:11:
39:0f:fc:5c:7a:5b:19:cb:06:46:44:75:11:08:c7:
21:ab:20:8c:3b:d8:cc:37:f2:d4:75:1e:50:d6:29:
b9:b2:4f:e4:e8:fb:4c:46:6b:ce:b7:d9:f3:8c:0b:
2c:45:49:33:d5:53:cd:de:fc:c3:f9:f3:d3:17:7a:
b1:b5:57:44:67:d9:4b:5d:fc:59:6f:93:5d:46:32:
1a:7d:84:ea:35:79:50:e2:68:42:57:e6:12:97:ea:
d6:52:97:57:d4:a1:35:82:0b:cd:a1:2d:31:ba:34:
45:cc:ba:cb:9e:9c:c3:52:75:93:25:78:35:05:26:
91:02:20:1a:6e:b0:0f:c4:67:9c:7a:ae:37:7e:96:
67:2d:82:4a:a2:96:78:55:a0:81:2e:bd:5b:4d:2e:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E2:6A:8D:74:3D:D0:DF:07:FD:B0:D5:01:4D:DF:83:4F:1C:75:64
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6a:59:3e:6e:39:29:d0:3b:25:d5:ad:c9:05:5a:8b:e9:8f:
ad:a4:87:7a:69:7b:83:74:44:59:f3:49:11:1f:f3:e7:fa:13:
23:82:a4:61:5d:c3:39:51:2a:23:76:38:b4:da:cd:6e:7f:56:
0c:b1:25:ae:2b:a8:81:b1:7b:87:b8:cd:5d:10:c3:e3:22:6e:
ca:7a:9a:0c:e5:4d:83:4e:29:e8:ed:65:e2:4d:53:38:f2:4f:
b0:07:8f:88:17:2f:a5:c0:59:e6:48:64:c0:b1:b9:69:33:2f:
d9:45:30:1e:21:61:06:1f:42:e5:cf:ff:bf:75:46:e8:8c:08:
0f:bd:5d:30:99:0e:99:1a:61:9e:31:7f:eb:97:08:14:02:11:
e9:ab:bf:b9:ee:e2:35:9c:bf:92:eb:c7:84:e1:85:c2:e7:0d:
57:8d:21:f6:c8:9f:84:67:1f:89:53:e7:75:57:ed:52:51:35:
09:36:d8:0d:b5:3c:29:07:57:a3:74:95:73:c2:a6:8c:ad:e9:
64:15:41:fe:6a:46:35:57:b5:c3:37:b3:0c:69:3c:12:3c:ba:
14:c5:6b:a7:47:f1:f4:e3:20:2f:14:78:7d:a2:23:02:cd:56:
34:41:2d:d3:0f:2b:34:cb:21:2d:43:98:f6:00:41:59:f6:38:
80:a4:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:36 2026 by rpki-client