Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
File: moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json)
Hash identifier: vW0jWONPr+e3WhKyLEeP8RiKpfTD7QpZ8PY6blnLHhs=
Subject key identifier: 15:82:6C:85:9E:4B:83:6D:C5:D0:06:E4:02:D2:76:98:6C:DE:63:38
Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
Certificate issuer: /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Certificate serial: 019D996246673337FFEDB765920AB40FC101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
Manifest number: 08F9
Signing time: Fri 17 Apr 2026 03:00:47 +0000
Manifest this update: Fri 17 Apr 2026 03:00:47 +0000
Manifest next update: Sat 18 Apr 2026 03:00:47 +0000
Files and hashes: 1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: BQnHNx98Gstb1IK39JfSG+Biq2CqglfwOzdpFNqld1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:46:67:33:37:ff:ed:b7:65:92:0a:b4:0f:c1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Validity
Not Before: Apr 17 03:00:47 2026 GMT
Not After : Apr 18 03:00:47 2026 GMT
Subject: CN=15826c859e4b836dc5d006e402d276986cde6338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:db:82:d3:74:bd:d6:6b:e3:33:8e:28:98:
fd:f4:1e:b9:a1:d9:96:eb:33:fa:74:b5:f7:cd:6e:
f8:d3:c5:69:bd:60:9c:c6:2d:79:17:d9:c1:5f:fd:
9c:63:61:12:e0:3c:c1:f6:e4:e5:dc:39:72:e3:05:
23:30:01:5d:76:95:71:26:30:5d:12:82:b7:a1:b4:
7d:db:b1:04:a2:14:ca:49:4f:63:7a:8c:7f:05:92:
17:66:a9:98:2c:a4:f4:95:91:50:85:0c:c7:6d:ef:
fe:68:ba:9b:df:7a:35:60:18:f5:41:b1:04:ba:3b:
15:d6:2d:8f:91:a1:20:2b:1f:b6:bd:74:1a:2e:cf:
ff:cb:dd:0b:d3:5f:89:50:ce:4c:01:e7:f1:4a:3b:
41:14:ff:0f:ac:e1:a5:d9:5d:a6:cb:e0:e8:19:48:
ab:2e:86:ac:9f:fa:8e:cb:ab:c1:fa:0f:34:69:bb:
23:2d:4b:b1:c6:32:b7:9a:58:fe:e4:c8:8b:6f:bf:
dd:4e:d7:c8:51:72:bd:90:ed:52:81:0d:a8:1b:f8:
82:e9:f1:87:de:9f:21:b7:8c:31:9c:fc:19:bc:36:
71:77:87:f7:b2:7d:bd:bc:bc:79:10:ce:b7:77:ce:
9d:64:19:c7:d9:31:01:72:89:3a:b8:e7:70:7b:8d:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:82:6C:85:9E:4B:83:6D:C5:D0:06:E4:02:D2:76:98:6C:DE:63:38
X509v3 Authority Key Identifier:
keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9e:cd:11:e4:f9:21:31:8d:40:9b:b5:4f:7a:60:0e:12:8a:
31:bd:8e:10:07:f9:60:77:c7:a4:80:27:38:c0:6a:86:dc:ea:
43:6c:01:76:1e:23:6e:74:5a:91:97:2f:8a:23:93:e4:32:f5:
76:59:65:7f:b2:32:5e:b0:a1:e5:bf:ff:a5:8c:65:3f:9a:2e:
b0:0c:f7:f9:e5:32:b6:81:3e:d7:32:5e:79:09:0b:a7:2e:d3:
2b:4a:f8:38:ae:d3:e2:40:ec:40:60:37:c8:0d:ff:70:ae:48:
8f:56:e5:42:bf:66:46:75:8f:d9:dc:1d:bd:44:a6:87:0b:4b:
38:b2:05:19:c9:b0:79:19:ce:38:de:bc:24:28:ce:f1:34:e0:
34:a0:09:88:48:50:94:ea:cb:70:fa:25:79:1b:2c:95:fb:f9:
fe:34:c6:2b:3c:2c:3e:1a:26:df:77:3f:c6:3f:a9:93:1f:17:
0a:de:69:57:f8:fb:97:5f:4a:d5:42:36:6a:ef:1d:f0:fa:4b:
cb:eb:6e:b0:15:71:23:f3:ea:a7:48:60:03:3f:e2:66:b5:ce:
05:00:ce:9c:ce:0c:6c:c1:a6:77:45:f3:18:c4:71:d9:9a:94:
b9:d9:ba:59:47:36:8c:5c:a8:cf:68:97:6e:77:cf:30:05:fb:
c8:74:c1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:43:06 2026 by rpki-client