Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: qqjpEfcu4fECOmf/2PEtsG8qLIzSvWfLdeaicFWGx+M=
Subject key identifier: C7:10:88:89:72:06:DC:0C:FC:8F:94:68:F2:AA:34:0A:F6:1B:2B:25
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 019D9961FF207876D8531642ECDE5CC0CFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 03:00:29 +0000
Manifest this update: Fri 17 Apr 2026 03:00:29 +0000
Manifest next update: Sat 18 Apr 2026 03:00:29 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: W5XYqRXsOjykLrX9fT8dGhsQSG2yhYZyo97gGYhhId0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:ff:20:78:76:d8:53:16:42:ec:de:5c:c0:cf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Apr 17 03:00:29 2026 GMT
Not After : Apr 18 03:00:29 2026 GMT
Subject: CN=c71088897206dc0cfc8f9468f2aa340af61b2b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:77:a1:69:c2:eb:ce:12:4a:40:5c:8a:c9:
69:09:f8:48:e8:c7:3d:4f:5a:ed:3c:7e:d9:f8:30:
14:70:7b:44:18:1e:e3:a9:41:fa:5a:47:b3:f9:73:
7e:d1:55:7a:13:72:cf:00:b5:12:55:ee:fd:03:bd:
bd:2c:1d:2d:04:06:3c:2a:35:19:b7:bb:6c:96:06:
6f:0e:3c:12:2f:f5:15:32:b9:9a:20:f0:6a:83:79:
eb:5e:c8:fd:f0:19:1c:bd:54:43:d5:45:d5:87:d1:
be:2d:6c:9f:5d:59:07:a5:f5:8a:3d:4e:b4:ad:8b:
b1:1c:78:51:2b:5c:f3:8d:6f:6d:f0:ef:83:7f:74:
89:76:89:50:9b:29:21:fa:83:fd:0b:be:0d:18:0a:
19:56:30:85:05:58:56:cc:8f:ab:6f:9f:e9:27:81:
0d:88:aa:39:a8:5c:ab:5e:0a:9d:81:e0:fd:61:f2:
e9:8c:08:bd:64:86:fd:90:fa:03:1d:5a:33:8e:8a:
fa:08:52:dd:65:da:b6:46:5e:6e:95:60:82:b9:1e:
ae:87:7b:33:12:c8:2e:13:4a:13:f2:3e:47:98:51:
c4:23:dd:4f:55:34:08:15:08:fb:21:d6:37:59:2d:
9e:f8:6c:76:3b:61:60:a4:15:30:43:c0:4c:dd:20:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:88:89:72:06:DC:0C:FC:8F:94:68:F2:AA:34:0A:F6:1B:2B:25
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:9f:45:45:33:3a:dc:15:1f:4f:47:bc:7e:7e:a5:be:cf:82:
a5:fb:cd:4e:87:77:d6:61:eb:03:6b:e0:27:c6:b9:c6:00:7e:
cf:ce:2f:f5:65:8b:42:65:08:be:30:05:6a:16:cb:1b:20:94:
8e:11:8c:86:55:f9:a5:ab:75:f9:6a:84:b9:99:be:c3:1a:ca:
eb:c2:4b:d6:db:e2:e4:9f:1f:d7:08:f6:ec:07:c4:99:11:68:
62:b5:5a:3f:3f:eb:f6:f8:13:69:6c:fe:26:b8:7f:3e:8e:9d:
cc:39:4e:89:39:f3:c8:b6:8c:04:08:33:0a:b3:5f:4d:0f:48:
96:84:de:f1:d9:14:a6:45:d8:b6:18:c2:50:2f:dd:57:38:17:
6d:9a:d1:2e:60:e5:9f:c4:9b:ca:5c:b6:68:b2:0a:8e:20:35:
86:4c:b3:e4:d0:e5:61:0b:f2:77:fd:30:9f:52:39:07:79:fa:
d6:f7:c6:0e:08:0b:77:14:f5:b0:b2:c7:07:d8:21:2e:5c:58:
f8:7c:99:46:89:56:e3:53:2e:b8:24:e7:8b:04:cc:55:d9:62:
74:42:31:d0:b0:27:e6:e0:53:2f:d7:4e:ae:50:52:54:16:e5:
c8:2e:4c:93:70:f8:dd:b2:dd:bd:1a:68:29:69:39:c6:e5:5d:
96:74:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:40 2026 by rpki-client