Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: SpM/sEJDwcIAFG7pHU0swYRCbgi8afPLMo339fyZgP8=
Subject key identifier: 3D:45:0A:0D:53:BC:51:E7:2B:8C:8D:46:E4:56:09:92:C4:8C:83:76
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 019CAA58FE8EAA3218D0B276CFB33C6B357B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:01:24 +0000
Manifest this update: Sun 01 Mar 2026 17:01:24 +0000
Manifest next update: Mon 02 Mar 2026 17:01:24 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: 32ySaRQ/BgpQsCeuKDGzhbW4ipg5esBt6VcYbdTVIHc=)
2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:fe:8e:aa:32:18:d0:b2:76:cf:b3:3c:6b:35:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Mar 1 17:01:24 2026 GMT
Not After : Mar 2 17:01:24 2026 GMT
Subject: CN=3d450a0d53bc51e72b8c8d46e4560992c48c8376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:d7:9d:8e:ae:94:9c:74:03:42:d8:08:29:
7c:36:13:75:ea:4c:d4:87:37:c5:c1:c5:22:d0:34:
8a:57:14:05:d8:84:83:a1:77:c7:52:b1:9a:a6:65:
70:92:69:54:1e:5d:43:b8:93:8c:cd:ff:46:f6:ba:
5b:fe:bc:9f:52:53:8e:85:b3:5e:38:7d:71:54:38:
9d:0d:c5:b2:30:e3:35:ad:d4:f5:2a:8f:ca:b5:26:
58:dc:e7:b3:a1:0c:8e:d8:78:a9:74:26:63:57:8f:
ec:6f:74:93:58:2a:88:f2:3b:b9:b3:58:11:5b:31:
8b:3d:52:59:2d:23:df:2b:20:bd:04:da:c8:71:60:
c5:d5:17:2a:ba:b3:f9:bf:85:5e:13:24:64:16:27:
c9:69:b1:3b:2d:27:51:2e:0d:08:5d:ea:54:74:40:
e5:1c:0c:df:e9:8e:39:94:5e:f2:a9:5a:30:1f:83:
9f:8d:cf:30:67:8b:32:a9:98:c4:f8:30:59:d3:fd:
50:bf:52:21:4a:6b:0c:df:5e:8c:ae:f2:28:be:71:
58:68:87:85:80:15:e5:5f:7d:88:45:cc:07:ee:e5:
d7:1b:4c:0f:29:d4:7e:71:30:ee:6a:19:e8:15:e5:
ee:5e:26:2d:fc:c3:37:db:33:6e:b8:dd:6f:b1:8a:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:45:0A:0D:53:BC:51:E7:2B:8C:8D:46:E4:56:09:92:C4:8C:83:76
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:52:1b:e8:ca:0b:cc:86:62:02:2e:73:10:0b:b6:f9:2b:b8:
55:00:30:90:8b:32:32:b4:dd:fe:3f:81:23:79:36:b4:eb:a8:
95:94:92:d4:51:40:6f:e5:e5:a1:1c:22:57:6f:9d:18:9b:d2:
1d:e9:e1:f3:ef:ac:82:31:17:9d:f8:e2:ff:51:2a:16:a1:bb:
22:70:a7:88:95:3a:07:73:c4:c9:f5:08:19:62:a9:8c:cf:4c:
5e:9f:73:69:9b:e3:0f:da:39:18:2c:8e:f3:10:38:48:5f:00:
94:7c:cc:09:e0:6b:81:14:72:77:d9:57:4d:f1:e9:5c:88:08:
24:b3:69:af:85:93:d2:89:5b:4e:f5:04:a0:e7:e9:a5:b7:72:
c2:b8:58:e2:8e:bf:d0:e0:72:9d:19:4f:ef:6b:5b:86:99:e3:
11:7c:d4:66:ed:22:ec:ae:5f:26:ce:53:c8:f3:68:43:5c:5d:
2a:5d:69:f4:89:9e:cf:24:ba:ec:29:73:79:2f:5c:b1:59:85:
5e:06:15:6f:c4:61:20:62:c6:6d:58:e3:df:8a:21:dc:bf:52:
52:d2:41:c3:0a:f9:a1:76:72:4b:5c:fd:29:7c:9b:a4:49:a6:
61:75:10:3d:ed:fd:47:e6:a5:8b:38:7f:b2:cc:05:10:d3:ed:
31:0a:8a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:32 2026 by rpki-client