Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: esUWCIj6Xme4Bx535WXXr7V8oPbDCnAsKtzZDQ5nj/o=
Subject key identifier: 97:41:4E:37:8D:EE:D7:5B:D8:20:1A:49:96:24:8A:A2:81:9F:B3:99
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 019CAD5A332B677745403189638696B16BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:01:35 +0000
Manifest this update: Mon 02 Mar 2026 07:01:35 +0000
Manifest next update: Tue 03 Mar 2026 07:01:35 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: TG59EPnVHx/YUr0/efIyIeUTvPl07t/9V5VtJjvO/0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:33:2b:67:77:45:40:31:89:63:86:96:b1:6b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Mar 2 07:01:35 2026 GMT
Not After : Mar 3 07:01:35 2026 GMT
Subject: CN=97414e378deed75bd8201a4996248aa2819fb399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:e2:dc:6e:cc:57:38:28:1e:bb:3b:4b:b4:
4a:8a:c8:33:ed:9d:53:f8:54:69:1f:fd:34:f9:04:
b9:3b:7a:d9:a9:9e:d4:8b:53:55:ae:a9:05:c2:48:
e3:90:bb:17:4c:03:a4:6f:00:ea:6a:41:e5:fb:53:
3f:b6:06:8f:91:f4:ec:d1:dd:0e:0f:66:6f:b2:28:
a9:a2:6b:32:85:b4:06:e1:0f:d2:d9:cc:bf:84:07:
c5:b9:7f:e5:3b:cc:ec:92:2a:7a:41:c3:f3:7f:fb:
ca:8a:42:9d:3e:a3:37:76:17:4f:8c:d5:ea:49:bc:
aa:c9:86:ea:b4:e5:fb:1f:7a:d6:1b:ea:c6:f7:26:
7f:5d:78:80:fb:02:c2:f3:60:f8:20:a0:58:02:a4:
61:4a:f3:c2:64:78:95:b6:de:13:c5:17:4c:f2:02:
4f:96:b5:e3:e4:0e:35:3a:1a:24:60:9f:47:55:40:
79:86:a6:d9:12:c2:11:02:38:20:c3:61:38:44:04:
5f:75:00:61:0d:9a:61:03:8f:7e:48:8c:4c:e6:c2:
bb:64:59:9e:f1:14:e5:9a:5a:4d:ac:b9:bc:4a:c1:
ad:3d:05:32:a6:9b:e5:f0:8c:42:45:33:95:53:7c:
6c:25:3e:c5:3b:a0:b5:29:0a:0d:9f:61:9c:c6:49:
45:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:41:4E:37:8D:EE:D7:5B:D8:20:1A:49:96:24:8A:A2:81:9F:B3:99
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8e:db:14:a7:c7:3a:25:e0:5e:64:5d:e1:d8:53:a0:2f:2d:
3f:46:09:4d:dc:da:e6:6f:5b:6a:fa:44:90:36:a5:86:9e:a8:
b5:c5:13:f5:7a:8e:aa:90:32:3b:88:4e:34:85:80:8d:f0:db:
b0:c0:58:44:cc:9a:03:78:e4:e2:02:2d:85:00:93:11:2e:fe:
78:5c:a2:b9:29:a4:49:a0:1f:4d:5b:6b:0d:30:a3:12:d4:1f:
b9:96:81:d0:b1:4c:f1:23:74:60:3c:5f:92:fc:57:13:a3:45:
df:4d:43:d1:d7:3c:35:27:f8:b2:dc:c3:cd:a8:fc:58:a7:fd:
de:0f:d5:3f:75:ec:e8:79:74:a9:d8:ec:70:04:93:62:bf:22:
21:dc:6b:7a:4b:da:0c:2e:7d:1c:66:8b:d3:e3:88:c3:ad:e2:
03:e3:19:46:47:39:8e:98:02:ca:3d:4e:ec:7a:11:29:cf:72:
4c:e7:79:bb:34:76:44:be:28:5e:a1:3b:e7:d0:43:93:0e:aa:
12:79:e1:2d:53:9d:1f:ba:d5:69:9e:1e:b3:30:89:05:03:f3:
01:a0:98:ec:42:51:2b:b1:9d:20:30:a8:a8:26:04:df:07:38:
fe:e9:09:59:bf:10:ab:d3:72:fc:d6:21:06:be:8f:22:f4:f2:
c9:32:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:49 2026 by rpki-client