Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
File: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft (raw, json)
Hash identifier: x+qLzt3/VpPwEfXV/APMoO4XMcE251JwMheeV1uVpXE=
Subject key identifier: 31:E1:EA:D6:A1:8A:07:F2:96:6C:33:67:21:AA:77:62:7D:33:05:40
Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
Certificate issuer: /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Certificate serial: 019D9B5154F7458509DFE1EE344698409533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
Manifest number: EA
Signing time: Fri 17 Apr 2026 12:01:31 +0000
Manifest this update: Fri 17 Apr 2026 12:01:31 +0000
Manifest next update: Sat 18 Apr 2026 12:01:31 +0000
Files and hashes: 1: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (hash: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g=)
2: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl (hash: Bqk/9GBVMUWvEnJiT7GMjlptIGoM21usheXHu6UOSXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:54:f7:45:85:09:df:e1:ee:34:46:98:40:95:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Validity
Not Before: Apr 17 12:01:31 2026 GMT
Not After : Apr 18 12:01:31 2026 GMT
Subject: CN=31e1ead6a18a07f2966c336721aa77627d330540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:23:58:b1:0a:89:e6:48:42:7f:29:07:2b:
19:a5:e5:de:10:86:72:0d:45:9f:2c:ad:4b:7a:3a:
ee:93:5f:51:8d:99:41:58:9f:25:47:d4:14:69:c9:
d1:db:d2:99:ac:a6:c1:67:b7:9d:cb:73:51:1b:b8:
3f:97:de:e7:b4:76:d6:23:5c:89:a8:07:0f:fd:d5:
db:bb:eb:39:e2:0c:7a:9b:84:29:05:5f:bf:81:b7:
6e:0a:e7:bb:86:74:fd:30:19:a8:a2:40:d9:e4:3d:
1e:88:fb:66:76:c0:f8:28:09:dd:f8:3b:eb:c3:4f:
a8:7b:9a:e6:4b:43:95:b5:4d:80:58:42:b7:3e:d5:
d5:20:ff:15:ca:e1:6a:24:bf:e2:45:50:ab:42:49:
3e:ba:1d:06:27:01:f9:e8:f1:de:1f:f5:f0:ac:aa:
81:1e:c7:89:fd:0f:3c:09:78:f7:44:19:b5:41:fb:
ad:4c:b9:c8:d1:ec:50:43:f7:eb:26:ee:9c:34:84:
00:a8:f7:a0:20:3a:2f:b8:9d:35:ed:c6:05:f0:46:
c8:a1:f1:6f:2d:32:0b:c4:b3:17:71:87:20:0b:64:
6a:ff:7d:17:ce:f1:71:c2:6d:93:8e:25:d4:6e:ef:
f8:a6:4d:43:93:b4:14:5e:e8:a2:25:ad:45:49:62:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E1:EA:D6:A1:8A:07:F2:96:6C:33:67:21:AA:77:62:7D:33:05:40
X509v3 Authority Key Identifier:
keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d6:23:7d:97:cb:91:23:c4:b0:5c:f9:bf:0b:e2:44:de:74:
79:08:ef:3b:e9:55:e9:ed:f5:78:55:51:29:27:65:de:1f:af:
8f:85:90:15:b3:34:09:ba:13:50:3a:db:7d:8c:44:1c:9e:1d:
14:17:80:f9:9d:a7:60:43:56:4a:e2:a5:be:c5:6a:1d:40:01:
49:41:71:f9:6c:ba:28:89:3e:76:ca:d3:8c:40:66:6f:43:2b:
ec:88:50:2e:92:04:6c:24:c6:92:ae:e3:fd:c3:55:9d:e4:0a:
6a:8d:65:e7:c9:5c:32:2b:c4:45:21:ab:a7:5f:89:16:ba:c9:
9c:df:25:fd:00:4b:c6:f8:1b:5c:3b:88:48:f2:02:ee:74:33:
0b:7a:e3:22:b4:b4:63:3f:bd:1a:63:35:7b:e8:1f:45:64:7d:
16:0d:c6:f3:6a:d2:8a:07:dc:25:4c:41:39:f7:d6:8d:fa:53:
e4:20:50:22:ee:b2:f1:3f:ae:07:b6:7f:f9:c4:48:66:96:aa:
f6:0c:69:77:97:de:1e:f7:e1:86:a4:57:35:88:ba:de:c1:c9:
56:a7:57:12:22:a5:4e:1c:4b:55:a9:48:51:7a:f4:e9:00:c3:
1d:18:f2:2a:51:86:4b:d8:a2:45:1b:92:33:06:db:a3:54:37:
83:e6:cb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:57:20 2026 by rpki-client