Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
File: moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json)
Hash identifier: Ucp9HSMM4IUmhmzW1MREQVHZ841Ou1SYgrXujNE5mJs=
Subject key identifier: 4F:2A:17:5C:8B:83:79:D0:4E:8E:4B:62:85:A9:2B:24:F9:2A:36:A4
Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
Certificate issuer: /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Certificate serial: 019CA9EA95456A39CAD8E1B1B627C4014022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
Manifest number: 087D
Signing time: Sun 01 Mar 2026 15:00:48 +0000
Manifest this update: Sun 01 Mar 2026 15:00:48 +0000
Manifest next update: Mon 02 Mar 2026 15:00:48 +0000
Files and hashes: 1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: GaibjuSZnsa5eb32k5gbxEfO+rItEp1V263SBJSJhZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:95:45:6a:39:ca:d8:e1:b1:b6:27:c4:01:40:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Validity
Not Before: Mar 1 15:00:48 2026 GMT
Not After : Mar 2 15:00:48 2026 GMT
Subject: CN=4f2a175c8b8379d04e8e4b6285a92b24f92a36a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:f6:ee:b1:01:9e:15:53:41:a7:bf:bd:70:
2a:ae:ef:da:3f:7a:fc:f4:18:1a:ff:f4:46:8a:c5:
7e:b4:78:f0:8c:21:b2:96:a1:50:4d:2e:57:0d:e2:
0f:c6:bb:dd:4d:42:22:8c:90:09:7f:49:ad:dd:7c:
0c:96:9f:d5:c5:6d:9f:06:ea:66:06:86:02:8f:17:
da:2e:9b:f9:1e:cf:c9:48:64:53:dd:50:b9:0e:90:
5c:6f:3c:98:73:fe:64:28:b4:66:d7:b1:f6:6b:b4:
d4:bf:57:f2:95:57:ed:9b:4a:56:fe:77:92:36:48:
cc:da:ae:2a:43:5f:4d:d6:ba:a5:07:89:fb:13:81:
94:60:d0:2f:5d:2e:32:45:03:26:82:0c:dd:98:8e:
36:23:3e:fc:13:61:27:94:d0:91:01:c5:d8:16:cb:
d4:92:79:4d:5b:bb:08:4f:4a:a7:e5:33:5a:53:a1:
89:24:65:1c:7d:e8:7c:6e:d1:1c:18:98:a5:26:d4:
ae:c7:a9:82:02:78:bf:c6:6f:67:35:74:2f:09:95:
7d:61:e4:1d:0f:ed:3f:06:6e:0f:fa:5a:9d:60:32:
b4:c9:cd:f6:a2:f6:fa:86:d6:ec:9c:cc:ce:0b:90:
de:fe:84:c8:81:fa:ef:4f:36:dc:9e:57:e4:75:14:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2A:17:5C:8B:83:79:D0:4E:8E:4B:62:85:A9:2B:24:F9:2A:36:A4
X509v3 Authority Key Identifier:
keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:79:ea:41:a4:4e:b8:14:78:a7:0d:62:d8:d6:06:31:d7:95:
29:f6:61:87:56:06:7b:fb:21:26:bf:ab:7d:a1:d3:cc:e2:5c:
b8:95:de:64:fc:d9:00:8f:1c:5b:37:42:4b:0e:80:39:08:14:
c0:ee:23:34:83:a4:ea:36:61:ed:42:cd:a8:63:35:26:f5:cd:
75:71:ad:aa:5b:27:8d:7a:6d:64:8e:db:96:bd:27:bb:c9:b3:
d1:a2:a1:84:95:2d:3a:06:9b:d1:2b:7b:b9:1d:94:03:15:16:
3e:fd:ac:6e:20:22:ad:13:50:9a:66:1f:da:3a:d5:c4:f8:bb:
7e:dc:9c:26:c9:28:9d:1d:a9:b5:72:7b:9e:02:55:b4:7c:99:
64:7d:ea:7f:eb:34:ac:3d:ee:f6:ab:75:af:34:2d:97:31:be:
1f:ab:26:8c:10:bb:4d:0f:1c:bc:07:ca:73:87:1f:55:d1:51:
8d:cd:37:fa:dc:08:5b:bc:c5:6e:71:a7:5e:9c:cb:ac:0b:91:
c8:40:d0:12:78:f8:c3:56:86:38:aa:6d:69:b5:02:0d:60:a0:
1f:23:b4:48:f1:65:cd:bd:6d:e4:c7:75:7a:1b:0d:d8:21:16:
2c:15:d2:94:b7:42:69:98:49:ee:da:fa:1a:05:e3:a0:27:1b:
24:16:5f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:45 2026 by rpki-client