Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
File: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft (raw, json)
Hash identifier: kT2aefB5UhnYFlIW5ASjH+u813hka6+TUY6kuNLpuxs=
Subject key identifier: 13:44:D5:BF:94:D1:93:69:22:67:1E:27:8C:64:BF:38:A4:DA:91:F2
Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
Certificate issuer: /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Certificate serial: 019CA9EB9B48587E4C980CF30A4E8F33FB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
Manifest number: 6D
Signing time: Sun 01 Mar 2026 15:01:55 +0000
Manifest this update: Sun 01 Mar 2026 15:01:55 +0000
Manifest next update: Mon 02 Mar 2026 15:01:55 +0000
Files and hashes: 1: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (hash: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g=)
2: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl (hash: W2rX0gyxp8yQyHnLg6/vPmhr34Craky1IWCJm0yn3f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:9b:48:58:7e:4c:98:0c:f3:0a:4e:8f:33:fb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Validity
Not Before: Mar 1 15:01:55 2026 GMT
Not After : Mar 2 15:01:55 2026 GMT
Subject: CN=1344d5bf94d1936922671e278c64bf38a4da91f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:fe:4c:45:47:f9:fb:a6:c4:e6:9f:19:12:
22:15:9a:ad:3e:1f:40:58:ed:29:49:d6:32:f0:c0:
08:fb:2f:86:34:b5:9a:40:3e:a2:17:5f:58:74:09:
83:b8:e2:38:27:1d:c3:77:11:26:85:54:26:04:72:
8b:17:63:bf:e9:6c:eb:0f:4c:8b:e8:3e:a1:18:5e:
0d:cd:ec:b6:f0:c0:e2:06:1c:f1:14:8d:5e:ea:f1:
8b:99:e7:c8:63:5d:16:b9:47:02:d9:ff:95:ce:f9:
27:4f:84:95:54:d7:5f:b9:a4:ee:72:3e:6d:1a:ad:
d3:9d:7b:d5:a0:89:b0:94:a4:5e:87:01:01:ad:ab:
08:33:9a:74:8b:76:60:73:e7:c7:44:1e:a9:bc:39:
ff:af:bf:a9:59:66:42:f7:4a:2d:7e:4c:f7:f8:38:
bc:af:24:d8:e4:9e:2f:2a:ff:56:79:30:6e:84:50:
b1:df:75:c0:af:70:61:c0:fb:25:a5:1e:57:5c:fb:
19:40:43:7f:d7:57:99:89:2e:21:cf:f4:6a:89:c9:
56:84:3e:f9:69:ba:95:d5:43:fc:f5:7e:af:de:fc:
6a:80:c9:cc:de:20:94:87:c8:c2:32:1d:91:ab:b7:
0d:3e:0d:18:25:ad:c3:35:e6:e5:af:c1:34:9b:55:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:D5:BF:94:D1:93:69:22:67:1E:27:8C:64:BF:38:A4:DA:91:F2
X509v3 Authority Key Identifier:
keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f0:f6:24:eb:d7:87:1c:56:51:52:94:1f:a1:2e:ab:4f:92:
95:88:dd:46:a5:a3:bc:cc:1d:26:5e:00:a1:31:4b:c7:f5:00:
79:f8:12:4b:12:84:ce:6f:6b:00:09:64:3d:0c:ba:a3:70:30:
5c:16:c1:dd:6a:d1:82:8b:e6:73:61:c3:fc:26:39:9d:be:b3:
30:45:13:6c:68:93:a3:1e:ba:18:75:99:8d:78:88:53:02:6b:
09:93:d5:32:96:a5:9a:07:49:77:3d:fe:e8:c4:ff:ef:60:c0:
2c:d1:cb:8c:4c:7f:34:92:a7:53:57:18:78:89:9a:db:7c:e8:
01:4b:3f:ec:c7:6f:3f:fa:05:df:c8:29:42:ad:5c:31:b0:7d:
e2:4f:4f:12:11:a5:6b:8c:7e:d7:21:1b:1b:aa:f9:f3:88:88:
69:d4:6b:22:06:94:e5:6d:e4:88:ba:14:ef:d3:df:86:55:fc:
7d:84:01:bf:4a:ac:9d:af:0c:ec:2f:38:b7:76:6c:dd:db:e0:
b8:32:e8:5f:8a:a5:7d:03:87:4d:78:d2:e9:a6:ac:81:73:e5:
a6:79:9a:10:cb:c5:35:95:4d:df:ca:dc:eb:d7:4a:06:4d:54:
f1:f0:26:5f:67:31:3c:bd:5a:e6:97:68:34:51:c9:30:d2:3c:
62:7b:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:26 2026 by rpki-client