Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: 57Hx5r5EDbJMgNjKdnMvI17c3VjkxTygYloRoFBJYdM=
Subject key identifier: 5C:63:BA:A5:79:A3:18:A5:54:41:D7:09:53:60:64:93:C1:5C:B7:02
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 019D9AE376EFC533FB5D77C57B04B1B03C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 1440
Signing time: Fri 17 Apr 2026 10:01:31 +0000
Manifest this update: Fri 17 Apr 2026 10:01:31 +0000
Manifest next update: Sat 18 Apr 2026 10:01:31 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: um5RovhdedffudedLvO5Kb0QQu2/swJ3lHsNHM8EOso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:76:ef:c5:33:fb:5d:77:c5:7b:04:b1:b0:3c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Apr 17 10:01:31 2026 GMT
Not After : Apr 18 10:01:31 2026 GMT
Subject: CN=5c63baa579a318a55441d70953606493c15cb702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:c0:68:ee:d9:19:b9:c2:52:79:75:67:4b:
50:48:d3:33:cb:05:27:bf:a2:04:b5:53:1a:5e:9b:
98:b9:45:55:e6:37:e8:4a:95:43:e0:b6:56:a2:d7:
8b:63:0a:da:1a:b9:1b:e1:b9:1f:68:32:be:ac:8f:
15:98:e3:35:2c:01:d5:05:bc:07:00:8b:4f:e7:ed:
37:4c:b7:9e:0c:a1:a3:c2:c9:47:88:89:66:53:06:
15:af:41:bc:c3:d4:a5:a2:63:5b:86:54:3c:7d:0d:
7f:33:f3:28:0b:d0:c6:11:89:ae:9b:9d:ad:90:03:
5e:6c:8a:70:9a:63:9c:7a:29:74:5f:9a:11:2e:1b:
1e:5e:a8:9d:d6:e3:fe:b2:0c:ce:b6:1b:f8:dc:0f:
32:49:ff:f3:cc:26:b6:22:d0:fc:8c:67:a3:00:0b:
25:25:e0:f8:79:79:c5:5c:7f:86:a5:5e:61:4b:49:
41:0c:fd:51:64:b8:b5:a8:ab:3b:5f:0f:dd:4b:f9:
9e:cc:7a:c4:9d:62:45:3b:ff:73:f0:f0:2b:0a:d1:
48:e9:d8:23:dd:16:d0:4d:a6:4b:bd:41:71:9c:3b:
94:54:34:0e:08:48:c0:22:ee:92:93:8b:3f:c3:c7:
28:33:f2:e2:7c:fc:44:a8:52:b6:e7:dd:03:5f:d7:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:63:BA:A5:79:A3:18:A5:54:41:D7:09:53:60:64:93:C1:5C:B7:02
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a9:e5:d5:2c:56:e3:40:b1:46:fb:3f:d0:d4:14:27:30:2e:
16:d0:bf:cd:70:71:7d:d7:67:1b:64:a7:f8:1c:78:79:47:43:
6c:a2:ab:4e:8a:84:92:48:e4:d0:a2:6c:81:bc:b9:66:8f:c1:
54:55:92:c7:bf:79:1f:6f:9e:90:41:b7:e5:bc:e2:9d:6f:83:
0c:06:4e:4a:8e:4c:5c:53:92:68:3e:88:77:26:d4:aa:12:0a:
cd:2d:31:db:e1:6a:84:04:f1:60:26:6b:04:be:67:6e:a6:e5:
ac:06:fd:56:b5:b0:12:c8:16:77:82:8c:74:90:5d:61:ae:70:
24:bc:9c:08:08:0d:a4:fa:53:5c:1b:3e:53:c5:ae:01:a8:c8:
cb:b4:14:2a:a6:63:5c:96:a6:9d:fd:0a:f6:6d:8e:32:6c:d6:
60:f1:5d:c0:40:db:76:ac:29:de:b3:ea:67:5a:84:7a:1c:fd:
65:e9:f7:13:ef:a1:af:b7:68:14:77:60:bb:e5:c1:59:50:99:
3f:f6:2a:e6:93:ef:0e:34:40:3b:3f:5a:bb:2c:92:8e:ca:44:
36:f7:7e:8b:35:b7:e5:ea:33:86:29:42:dd:ca:9a:d4:42:b3:
7a:68:eb:0d:06:5b:29:7e:6a:d9:da:97:04:33:20:fe:75:cc:
b0:30:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:49 2026 by rpki-client