Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier: C+8B7L5kFL2Pdc8JJrMn3WNHxKCeNWWPkAnWMlx+IFQ=
Subject key identifier: AF:A2:38:97:0C:55:D6:85:37:3E:0F:80:8A:3C:BC:1A:E7:72:F9:9E
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial: 019FA8D066828A6AD66588D7E3AED999022F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number: 19CC
Signing time: Tue 28 Jul 2026 13:00:57 +0000
Manifest this update: Tue 28 Jul 2026 13:00:57 +0000
Manifest next update: Wed 29 Jul 2026 13:00:57 +0000
Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: N4zwjQkeT3M66JMGZBSp67m5OK0TAXQ+QC6C+IVCgLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:66:82:8a:6a:d6:65:88:d7:e3:ae:d9:99:02:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Validity
Not Before: Jul 28 13:00:57 2026 GMT
Not After : Jul 29 13:00:57 2026 GMT
Subject: CN=afa238970c55d685373e0f808a3cbc1ae772f99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:e7:16:20:1d:72:52:30:ef:2e:e4:27:bc:
3a:46:4a:43:7c:b0:bc:5e:c7:6a:87:4f:3a:9b:fb:
a0:60:00:7f:44:15:19:77:b2:68:57:92:7d:83:f6:
a6:cc:a6:e8:57:ab:b8:12:c1:a5:87:1b:75:1c:37:
e8:c2:a9:99:21:d4:6c:38:3c:45:c2:07:87:b7:bc:
7e:a7:c3:77:3c:18:06:08:05:95:91:57:75:e0:65:
e3:34:64:fc:12:66:ee:41:f4:00:20:e9:10:ba:1f:
c8:8b:98:6f:6f:7d:84:75:88:81:57:15:68:dc:62:
83:d1:cd:8c:df:28:c5:23:10:fb:82:6f:18:c3:a9:
5f:a1:d7:90:69:bd:26:31:21:e1:80:4b:8a:59:f1:
77:30:02:ed:0a:f2:1b:80:c9:6b:5f:b5:9e:e7:a5:
43:4f:da:25:ac:d3:b7:dd:17:2e:77:2f:97:74:61:
3a:71:f2:fe:9c:68:6e:30:f7:0b:d2:fc:5b:e3:a7:
6e:c7:83:c7:e0:e6:40:69:4b:50:a9:ac:db:27:11:
1f:b0:25:e1:dd:39:48:a0:4b:a5:a0:e1:ae:86:9a:
76:6d:16:c1:a6:7a:00:73:8a:92:27:31:f5:d3:39:
06:58:6e:6f:a3:0b:cd:e6:cd:16:d5:20:a8:0a:26:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:38:97:0C:55:D6:85:37:3E:0F:80:8A:3C:BC:1A:E7:72:F9:9E
X509v3 Authority Key Identifier:
keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:86:8e:ee:84:c7:ef:da:76:7d:ad:1a:91:2b:91:ac:88:42:
30:ab:9f:41:8e:60:98:42:70:6d:2a:15:f6:91:0f:50:78:8c:
15:bb:34:e2:f1:6f:8d:5d:4d:49:66:3c:e4:14:a2:0e:b7:44:
5d:08:8e:be:17:97:35:e3:19:a5:ba:38:a1:2d:f3:e3:db:f7:
e2:00:5d:fa:16:37:16:ff:5e:6c:01:70:58:4b:6e:db:f0:6f:
92:9a:98:70:68:0f:13:9c:af:b6:3e:4d:b0:c3:ba:60:2f:3a:
03:29:4d:a2:80:69:a6:5f:7d:52:40:5b:20:48:31:80:18:d5:
50:43:b0:5c:3c:fa:9b:6a:fb:29:9c:1e:5d:aa:71:76:2d:7b:
d2:9a:8f:c0:ef:6b:fd:7d:c0:b3:74:4d:b4:1e:ee:0e:cf:fe:
57:d4:06:fe:b4:f1:c0:19:58:7f:73:89:41:c2:d8:3a:97:dd:
e6:83:82:cb:2d:c2:fe:12:bf:f0:02:56:18:9b:37:24:c2:d4:
d5:34:49:ca:c3:72:7e:fc:09:93:cf:ba:5f:01:a6:66:74:8d:
91:b5:8c:14:4b:38:2c:49:3a:af:ee:c4:e4:e2:65:72:bb:f5:
50:8a:dd:35:14:59:d8:10:a3:ba:7e:cf:03:24:6f:e1:1b:46:
5e:24:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:41 2026 by rpki-client