Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: eT658x0/AWvKOh7zqeHsPB8LV2RNQPe/Akx8TnMTIOk=
Subject key identifier: 91:32:89:F6:71:F8:D8:39:B8:FE:76:D0:66:89:C5:1F:6B:87:18:D6
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 019DA48AE05AE515BC4DB1F38602AB8B2BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 07:00:57 +0000
Manifest this update: Sun 19 Apr 2026 07:00:57 +0000
Manifest next update: Mon 20 Apr 2026 07:00:57 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: AhBR/52mj4JUzB0v7cZNYr33+p36vfGLRPEi4T4SGsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:e0:5a:e5:15:bc:4d:b1:f3:86:02:ab:8b:2b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Apr 19 07:00:57 2026 GMT
Not After : Apr 20 07:00:57 2026 GMT
Subject: CN=913289f671f8d839b8fe76d06689c51f6b8718d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:4b:cd:2f:42:5b:1a:7a:50:89:44:3a:43:
02:c8:34:d4:44:24:5d:db:5b:7d:a8:42:0d:92:41:
5e:83:97:48:05:60:e5:22:a6:d9:38:e8:4e:ea:93:
0e:e6:87:7b:c1:30:5b:79:d4:21:4a:34:94:89:d9:
34:1c:a9:9e:eb:4f:94:63:53:7c:db:34:d2:74:ee:
95:75:44:e1:aa:e6:4d:8b:a6:b3:59:4f:55:a1:03:
1e:90:56:0f:2d:30:6e:ad:2e:7b:75:c3:da:11:96:
54:a9:2e:15:b6:f7:42:2e:d3:61:87:04:25:62:0b:
d7:98:c7:e6:a6:b9:85:06:0e:8e:68:e9:b5:c3:56:
e8:5a:78:cd:01:13:27:cc:39:58:e4:c6:96:ea:0c:
eb:b6:4c:32:11:ac:c7:c5:ad:b1:3b:d3:af:93:df:
b7:b2:3b:77:e3:60:6f:dd:6d:86:95:02:a4:7e:c3:
86:7e:d9:7d:9c:d4:51:79:32:78:12:0c:8e:a8:a7:
f4:cc:35:43:de:50:4d:6f:0f:1e:07:c7:b1:f3:38:
c4:4b:41:ea:37:0f:3b:73:1f:94:b9:f4:04:c8:95:
0d:cd:14:85:28:8a:bb:45:47:24:ac:14:86:37:04:
c9:a5:2c:36:35:51:6a:e2:7b:f3:06:ec:25:21:5a:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:32:89:F6:71:F8:D8:39:B8:FE:76:D0:66:89:C5:1F:6B:87:18:D6
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f0:48:15:d0:82:cf:a0:b2:34:db:8d:0c:11:e6:51:0b:8f:
d6:4d:c3:1e:3d:c2:a3:c7:1e:21:79:77:8e:26:f2:4f:ea:02:
32:01:1e:78:93:62:c6:91:5b:c7:ee:de:d5:ab:78:0e:24:28:
6c:c0:3f:40:1a:3d:d3:b7:96:d9:c4:f2:6e:4a:8f:06:24:58:
1f:e7:26:aa:a7:cb:97:85:51:d0:2e:a2:45:8e:27:b1:40:d1:
16:c2:09:90:bd:15:5d:72:ac:cf:e6:49:3b:6c:ba:6c:0f:10:
95:c2:34:80:38:c0:24:2c:e5:6c:d2:96:02:8e:11:ef:7a:f6:
3b:e3:fd:5d:71:99:8c:cb:43:85:15:7c:bf:95:89:bd:c1:3e:
2d:9e:9c:70:c8:5c:83:d4:b1:f1:18:30:45:c0:61:7a:a7:a9:
25:4a:c2:d2:78:54:16:a1:40:a1:ca:37:64:c3:d5:4e:9b:55:
fc:1f:b4:0c:7c:b8:86:0a:9d:9d:36:4d:f0:9e:e0:31:7a:90:
82:86:56:b5:10:7d:b7:5e:8a:2a:62:e5:ab:3b:93:ef:54:88:
d8:59:f9:fd:c4:c3:97:15:bd:33:04:12:c7:14:36:a9:86:ae:
bc:44:c2:ac:8d:53:5b:66:5f:4a:15:68:0c:a6:f3:82:f8:7f:
36:aa:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:22 2026 by rpki-client