Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: fX762KjDv/1mjnQZzHQCjTbLXex3yi07unYWXQe5dos=
Subject key identifier: 7F:55:F2:3D:E9:4B:8A:66:6C:D4:7D:88:8F:38:FB:75:6D:DA:6D:94
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 019CABA2486CA8495DD64C01AFCEED1B7A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:01:05 +0000
Manifest this update: Sun 01 Mar 2026 23:01:05 +0000
Manifest next update: Mon 02 Mar 2026 23:01:05 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: nnri/T7QGz10Qn45avKNXkql2WuuRbu+CZALUHa0mC0=)
2: FXnznPhn55vYjBoYQttg28E4IK0.roa (hash: Dl0FXZLA3s/7+Hd8tk5PaoTmm8/8008Q5/BvoslwSfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:48:6c:a8:49:5d:d6:4c:01:af:ce:ed:1b:7a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Mar 1 23:01:05 2026 GMT
Not After : Mar 2 23:01:05 2026 GMT
Subject: CN=7f55f23de94b8a666cd47d888f38fb756dda6d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:02:42:dd:61:ff:21:16:f3:0e:86:ef:23:
af:e4:c1:74:9f:bc:2f:7a:a3:64:5a:ac:56:9e:21:
f8:9d:3f:33:e3:53:e1:a7:b9:af:9f:c6:2e:f2:c7:
28:72:c8:70:60:34:26:a6:75:e8:4e:97:76:22:b2:
a1:60:88:4c:47:12:40:75:8b:92:34:fb:52:a0:1c:
04:1f:60:42:9a:ff:eb:4f:6a:1f:fd:10:d4:e1:54:
07:17:b3:d9:ba:58:57:08:47:14:4b:47:9b:34:7b:
bb:d4:20:82:ec:f7:57:d1:38:75:e0:27:a2:62:0e:
f9:0c:1a:5c:a2:fe:85:b1:22:af:e2:0a:a6:d2:35:
a6:dd:81:03:2b:1b:2a:73:a8:86:8a:56:20:15:8d:
c5:37:13:eb:f4:63:1e:81:79:cd:e4:3c:81:9e:47:
fd:21:e1:00:0f:2c:87:bc:f2:f4:ec:bf:59:9a:09:
a2:c8:eb:d4:bd:f5:6e:15:67:ad:f0:0d:8f:79:f8:
06:37:ed:55:ce:fc:17:f6:7a:df:7c:11:4a:2c:71:
b0:68:d5:8a:18:aa:db:a5:da:cb:e9:7a:e6:95:92:
fc:a2:20:b4:e9:f2:04:66:7a:0a:94:b5:b0:fe:99:
ee:b1:bc:95:c4:2f:cf:87:b5:b8:6b:19:c2:53:79:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:55:F2:3D:E9:4B:8A:66:6C:D4:7D:88:8F:38:FB:75:6D:DA:6D:94
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7f:05:87:16:25:d4:1c:a9:ca:90:9d:6a:ae:57:d1:ec:44:
c6:2a:d9:8e:76:6d:a2:e3:7f:68:66:10:dc:fa:54:b6:63:b8:
80:04:b9:7f:eb:ce:4d:94:12:c5:d8:b6:37:a1:01:fa:ae:41:
a8:9f:60:47:40:8d:66:a0:df:b3:8d:37:6b:fc:18:ec:a3:d8:
91:64:52:e0:fb:ad:ca:0e:06:a0:2d:03:2b:7b:b8:68:fb:d0:
a8:ae:e9:61:8d:6e:80:44:b1:33:cc:fd:9f:0b:df:33:2a:1b:
30:c0:dd:6b:bb:54:69:24:97:e6:e9:58:d9:09:92:4e:f7:b1:
00:2b:6f:58:8b:09:21:c3:ac:46:94:e2:af:63:65:ba:78:2f:
e1:c5:18:01:53:8b:cb:23:4d:27:29:0c:06:bd:82:84:0c:dc:
9e:c4:f6:33:70:e0:a3:b2:e5:84:53:f0:08:7e:c9:05:45:c4:
22:0e:4f:87:b2:20:5d:25:6f:35:27:cc:19:2b:92:55:36:f9:
79:fe:e8:2f:7c:17:3d:2b:a7:51:a5:34:5f:cb:59:c6:53:8f:
37:d4:8c:1a:0a:2f:32:99:80:8e:be:c2:fa:f5:7f:20:24:94:
45:d5:48:f9:85:3e:5c:90:ee:6a:58:f0:2c:1e:5b:f9:57:89:
ad:90:7f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:32 2026 by rpki-client