Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: caZ+kSXRvV1yMUyAG8nNgvRVDhVylder56lWzS+OscA=
Subject key identifier: F3:7E:CB:25:C7:BD:56:77:46:5C:01:F1:72:23:EF:4E:D8:5F:C8:A6
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 019CAB6BEE676190754A7B8ABA0CF1A87C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 13C4
Signing time: Sun 01 Mar 2026 22:01:43 +0000
Manifest this update: Sun 01 Mar 2026 22:01:43 +0000
Manifest next update: Mon 02 Mar 2026 22:01:43 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: fVinKa63/Ten7wQ3sTKNbI+kCKhSLizZ/SI7Wxz38WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ee:67:61:90:75:4a:7b:8a:ba:0c:f1:a8:7c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Mar 1 22:01:43 2026 GMT
Not After : Mar 2 22:01:43 2026 GMT
Subject: CN=f37ecb25c7bd5677465c01f17223ef4ed85fc8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:4d:42:e8:94:96:79:15:c0:fb:6a:76:3c:
98:d0:bc:b4:1f:26:1e:72:c4:f9:ed:f1:43:af:78:
18:7b:f0:2f:08:dc:da:a1:a2:98:18:9c:d8:be:0e:
80:60:68:77:2f:48:90:b9:51:0d:8f:f0:8a:63:10:
da:a9:8e:0a:6a:1b:7e:2f:cd:c5:8b:fa:a3:4b:39:
01:05:17:4d:8a:74:7c:41:ec:16:52:b4:4f:80:b2:
d4:49:77:31:1b:38:bf:bc:14:0b:28:b9:01:1d:69:
07:b3:46:6b:69:a3:a1:28:96:25:0d:cc:da:6c:f6:
5c:32:49:5a:b8:6f:e8:d9:b6:7e:88:12:27:80:38:
04:47:47:87:c8:83:21:03:6e:c2:15:17:19:95:f5:
ce:e1:02:2b:70:01:fc:53:f0:40:ec:9c:79:63:2f:
8f:ec:84:56:d3:27:43:5a:4b:38:c6:aa:bc:70:7d:
33:a4:d5:5f:73:c1:f5:bb:5d:5b:ae:0b:44:e6:78:
c1:be:94:bc:15:86:17:a9:12:28:04:1f:ae:86:1e:
31:52:4d:d6:6d:75:71:bd:a6:66:49:43:ef:70:27:
35:14:43:51:91:c8:a3:0a:2c:b9:76:73:22:27:4c:
99:ef:67:d4:8c:89:6f:71:47:1e:35:9c:d2:12:20:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7E:CB:25:C7:BD:56:77:46:5C:01:F1:72:23:EF:4E:D8:5F:C8:A6
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:80:8b:b3:cd:6e:a7:7a:9f:6e:ce:e3:35:a5:6a:9c:06:36:
f0:83:8a:e7:3f:5b:77:ec:e9:8c:67:b8:dc:a1:d0:75:af:6a:
ba:8f:e4:12:a9:ae:0c:c3:24:53:4c:68:f2:3f:25:ce:0f:03:
4d:17:26:f6:0d:90:41:77:1a:e1:83:36:a1:c3:b3:5a:33:34:
96:51:59:1b:70:bf:58:d5:7b:a8:49:f1:ab:56:6d:e4:51:d2:
ad:ad:bc:94:bf:5c:c4:64:01:1e:e1:42:07:48:d9:a4:78:3a:
41:18:2a:86:49:0a:67:48:20:33:12:4d:97:16:b6:8c:52:9b:
77:b4:5f:f1:a1:b4:db:6b:66:d4:95:1f:ca:77:bc:01:dd:c4:
d4:d4:c5:2b:60:bc:e4:f2:aa:9b:10:d0:5d:3f:83:b4:80:b4:
77:fd:84:63:46:97:22:2f:83:16:3f:e4:33:06:11:84:8a:5c:
e8:01:df:9e:19:67:a3:a3:b2:67:f9:b7:69:ee:5c:ca:4a:9e:
53:e9:0a:b6:12:23:d1:6d:e2:82:18:a4:48:2f:ba:9b:1b:99:
d8:6d:dd:0f:ce:c7:dc:48:11:14:2d:1f:5c:27:ff:31:fd:c0:
94:50:16:40:cb:ef:33:e5:ab:83:64:08:99:1f:b9:70:7a:24:
42:15:8d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:39 2026 by rpki-client