Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier: O5G6FHsxd95c4dtL9oktGv4pohfmNYZ3+QggY3hUV+Y=
Subject key identifier: D6:62:10:C0:01:0D:C5:1E:0C:B7:15:78:E8:B6:FD:46:65:2A:A4:B0
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial: 01A0C4B2EE8BA5CCEE8053A5DE6CE7EE69B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number: 1A5F
Signing time: Mon 21 Sep 2026 16:00:55 +0000
Manifest this update: Mon 21 Sep 2026 16:00:55 +0000
Manifest next update: Tue 22 Sep 2026 16:00:55 +0000
Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: 1UxJXwH1yBM4uHbFsAJboORxOI0l9MN0gDdUsm0yRwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:ee:8b:a5:cc:ee:80:53:a5:de:6c:e7:ee:69:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Validity
Not Before: Sep 21 16:00:55 2026 GMT
Not After : Sep 22 16:00:55 2026 GMT
Subject: CN=d66210c0010dc51e0cb71578e8b6fd46652aa4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:17:e4:ff:ef:e0:7f:b4:02:b7:75:2a:ce:
0f:ff:ad:9a:d3:c9:b6:1c:dd:a4:27:00:d6:1c:95:
e0:b1:f5:37:94:2b:98:69:53:ae:40:f1:02:3e:16:
1f:5b:a0:55:ad:a1:c9:09:08:2c:cd:aa:2d:79:ea:
4a:45:ee:30:8b:77:f6:90:7a:80:a8:7b:be:91:0d:
ef:0f:83:9f:b6:2a:ab:c0:d7:37:db:8e:35:3b:9c:
28:18:ac:b2:19:9b:f0:09:f7:82:c9:fe:7d:81:7f:
5f:8c:9c:da:6a:49:28:37:c3:8f:dd:e9:1c:90:58:
ab:d3:f1:df:eb:34:d4:99:f8:91:03:80:e3:c9:a8:
d8:97:d1:d2:b6:74:71:33:b6:b0:6d:99:32:6c:90:
a6:89:c9:e1:c1:b1:64:e9:2d:f1:98:39:ef:05:45:
de:3e:e4:80:82:e1:4a:8f:c3:36:b9:8a:e4:a7:51:
e6:de:0c:9b:68:cc:57:d4:63:a0:05:33:4e:e6:b4:
40:86:5c:83:e0:a5:08:d8:9c:2a:22:07:0c:19:21:
93:b9:59:24:dd:e5:64:2d:11:ab:50:ed:f7:03:fe:
29:a2:bd:cc:2c:9f:2a:d9:6f:34:f6:2a:be:f8:e1:
40:8a:db:8b:03:15:a3:c0:f5:3e:10:87:dc:cc:c2:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:62:10:C0:01:0D:C5:1E:0C:B7:15:78:E8:B6:FD:46:65:2A:A4:B0
X509v3 Authority Key Identifier:
keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:56:9f:23:21:21:ac:f4:8b:6d:0a:90:7a:83:65:a3:46:a6:
92:90:6c:20:3b:0a:d1:28:3b:9c:66:93:30:28:9d:41:d5:ab:
bb:9a:69:6a:d3:c6:35:02:ca:f9:4f:23:03:09:f8:5f:b3:89:
89:e3:46:7a:fa:d2:73:f0:51:95:aa:91:a9:64:3d:d6:8f:a2:
0f:39:0b:a5:e6:a9:bf:b2:b6:e7:99:7a:65:e7:0c:9e:f7:12:
51:81:91:31:b4:3b:80:39:b7:7d:48:25:e8:e2:da:b2:d9:33:
38:28:96:a7:40:fc:e7:b5:2a:2c:3e:83:f2:3b:6f:7f:77:bc:
1e:77:4f:8f:bc:bd:92:88:07:9d:27:a6:d2:e7:cf:92:97:6d:
ec:61:7a:5c:8c:05:f0:0c:7f:f8:f1:ce:30:a8:49:48:01:08:
6a:67:63:05:df:da:ed:88:47:c3:93:c0:20:07:5e:96:c9:28:
84:0b:e7:5d:d9:ee:65:6e:03:9d:b3:6f:14:66:e3:b2:6d:17:
97:36:5b:03:a1:c9:73:d0:31:0a:93:d6:3a:49:c6:dc:3e:a1:
b7:93:f3:a7:b8:81:35:af:27:8a:b3:74:2b:84:3f:61:8e:3a:
e4:3f:b3:c2:41:7f:ea:1c:76:ee:cc:de:2f:7b:24:04:e3:bd:
09:df:9e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:54:44 2026 by rpki-client