Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
File: mo9LAp4p7t8n1FzU05AQgya-JvA.mft (raw, json)
Hash identifier: Vpfirpxr3c/nWqF5DjsBuTN+Pvrvks0xVLaBjGy3FAQ=
Subject key identifier: CD:3B:03:32:62:7B:87:AB:D5:85:7D:39:C9:94:C2:4F:80:59:E9:66
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Certificate issuer: /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial: 019CAE6C58DA1627054A0F74151327FA0F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 12:01:02 +0000
Manifest this update: Mon 02 Mar 2026 12:01:02 +0000
Manifest next update: Tue 03 Mar 2026 12:01:02 +0000
Files and hashes: 1: _V7Cb-NwO8anySMSbrwiBhmYglM.roa (hash: Ahe9bG/97BT0KbQWugP0o5eBZCTOE3ZbuxcW7SXy2go=)
2: mo9LAp4p7t8n1FzU05AQgya-JvA.crl (hash: CUOhF4Gi9WhK2PKZjU9CDkY60nvb2RZk4I/taU8/FrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:58:da:16:27:05:4a:0f:74:15:13:27:fa:0f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Validity
Not Before: Mar 2 12:01:02 2026 GMT
Not After : Mar 3 12:01:02 2026 GMT
Subject: CN=cd3b0332627b87abd5857d39c994c24f8059e966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:10:50:96:91:8c:a1:be:2c:ae:13:9a:7c:88:
51:c9:8f:9d:f7:1d:ca:31:c2:b9:77:70:94:85:b4:
b3:5e:51:a3:01:7d:43:d2:56:23:f9:13:b7:f0:c5:
13:89:0a:91:3a:51:52:4c:b4:7e:00:df:4d:17:44:
67:3b:53:64:e0:27:14:ed:73:72:55:3b:f7:27:1e:
4f:de:9c:cb:bb:9e:1a:57:50:27:a5:8e:42:a9:46:
8a:a3:0e:b5:bc:68:c0:22:8f:60:00:eb:2c:f7:99:
2d:3f:84:5e:48:59:a1:fa:94:7c:56:10:d1:84:78:
0a:6a:84:2d:73:be:9e:c0:d4:d1:02:49:4d:7e:59:
9a:2d:32:71:f2:d0:f9:97:23:d0:e6:26:5b:45:f4:
0c:06:b3:e7:b3:12:2e:9a:fe:63:9b:3c:df:76:55:
d2:29:4b:64:8e:d7:c8:f5:8e:ea:c1:68:7b:f0:79:
14:25:0c:bf:45:13:b2:7b:55:4f:de:bd:43:8c:05:
55:1e:b2:b5:d3:07:2b:4b:a3:4d:84:a4:1c:d1:2f:
21:4b:49:dc:78:a9:e4:b9:d7:8a:4e:8f:7e:48:da:
0f:64:34:e7:67:11:f6:26:5f:56:56:c2:5a:73:f8:
08:1e:57:5c:a0:45:79:91:7e:da:97:51:8c:66:7b:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3B:03:32:62:7B:87:AB:D5:85:7D:39:C9:94:C2:4F:80:59:E9:66
X509v3 Authority Key Identifier:
keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d6:1c:1c:d6:0a:31:3f:44:70:55:8d:fc:9b:89:74:a0:59:
34:ca:c5:4c:3a:ab:fb:c9:0a:94:fd:18:21:f7:3e:a1:7d:78:
af:d7:7c:17:a1:79:ad:83:e9:f8:4d:21:58:8f:df:f0:09:6f:
21:06:93:2a:a9:7f:28:e7:5a:19:8c:c5:e4:28:ae:cb:ad:ba:
23:49:21:51:0b:b9:83:4f:64:42:20:ad:1f:54:0d:e3:ae:35:
27:8c:1f:45:aa:00:04:c7:d7:bc:37:58:70:65:8a:95:83:fc:
6d:b7:13:ff:2f:17:95:0e:05:7b:4a:81:f2:8c:d8:5f:8f:ec:
83:2c:bd:ba:d7:af:e6:77:dd:f2:52:e3:f6:6c:87:02:f0:08:
18:ff:74:a3:db:92:1f:0f:9c:82:3b:b1:ba:99:75:e3:c5:f0:
e6:7a:45:86:a1:84:02:fb:cb:e6:a7:6c:ff:73:be:47:5b:67:
37:d0:98:87:f5:5e:05:6f:f6:11:4a:1e:bf:6f:d0:ea:58:af:
09:24:df:82:7d:7e:7c:ec:93:c4:f8:39:45:4d:e2:bc:ab:bd:
b1:f1:9e:e4:67:1e:27:74:20:a5:bc:1a:c9:07:8e:b2:e4:0e:
fa:69:12:87:09:ce:e4:aa:43:1f:b3:1c:76:33:6f:08:d4:92:
05:d5:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:43:31 2026 by rpki-client