Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: 8IF53hpsP3jSasDT5S5UDEZc3SvFTmJQc24VUYx7s6w=
Subject key identifier: 5F:53:04:AF:01:F8:03:95:3B:ED:88:99:4E:F3:9A:2E:0C:17:B1:4D
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 019CAC46A748CA22E03680862C28CC6613D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 02:00:37 +0000
Manifest this update: Mon 02 Mar 2026 02:00:37 +0000
Manifest next update: Tue 03 Mar 2026 02:00:37 +0000
Files and hashes: 1: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: vQBLPS6FZTh0jmjLqSdkNdYl8eORIbdxBCb+WlphKB8=)
2: YOETByGoQWvX1MVQbtKSNQjPq4I.roa (hash: e5Ix1WhHdMT4rCzknHHsERtns5aDH3xdPuHebqlTS6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a7:48:ca:22:e0:36:80:86:2c:28:cc:66:13:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Mar 2 02:00:37 2026 GMT
Not After : Mar 3 02:00:37 2026 GMT
Subject: CN=5f5304af01f803953bed88994ef39a2e0c17b14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:42:20:7e:1f:d1:71:38:24:6d:65:fd:0d:
b5:9c:af:7d:22:72:ee:b3:2e:4c:13:b0:48:b7:84:
88:ce:e2:07:39:c8:c8:2e:1e:a0:0d:38:7b:c2:bc:
8a:f6:8a:35:f1:16:95:8b:57:a5:61:7b:96:62:df:
a9:a9:05:59:0c:6b:fd:18:f6:f2:5d:29:ac:49:14:
20:3c:57:2b:b3:b4:55:cb:10:87:4d:51:f9:df:17:
8b:b4:9c:f9:41:8e:d0:74:e6:b9:12:36:94:3f:12:
8d:25:52:82:62:73:4b:26:11:90:6a:72:fd:8c:9b:
6d:98:41:6c:6d:02:db:6a:f0:2f:cb:cd:ad:d3:92:
ce:cf:a7:9c:85:5c:b4:a4:b5:10:e7:c8:fd:1c:1b:
e5:21:e7:01:f3:74:e8:10:27:22:2d:6d:07:6a:65:
aa:a6:54:64:1d:35:2a:60:3e:2e:ae:96:2a:0f:b6:
8b:2e:d6:51:de:d0:3c:ce:82:60:17:08:71:6f:32:
6a:97:bd:f5:bd:19:77:ba:06:8d:cf:58:34:b1:b8:
ec:08:77:13:b9:19:93:c0:02:36:88:3d:bb:5b:e3:
76:5e:3b:b8:32:d9:56:f9:e6:06:42:ae:d2:50:95:
ee:b8:67:1b:8f:ea:f2:e1:da:c8:32:d5:20:f3:c3:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:53:04:AF:01:F8:03:95:3B:ED:88:99:4E:F3:9A:2E:0C:17:B1:4D
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b3:ef:db:51:87:7d:8d:2a:8d:43:a3:25:d4:bb:22:19:4a:
8b:08:7a:4e:b5:f5:87:2d:9e:a2:2f:b9:87:2e:34:e3:78:01:
3f:3b:26:51:af:29:6e:78:37:ef:13:0f:af:c0:b8:16:31:2e:
cf:f7:9a:23:7e:2c:82:c4:e0:c2:a5:d9:cd:c9:9b:fc:6b:fa:
4c:b6:11:17:21:00:07:19:4b:e5:85:65:25:8d:b7:92:5f:5c:
26:15:9e:87:c7:2b:b7:38:0a:8f:56:4f:28:2c:a1:28:db:3a:
f0:2c:0e:1c:ad:e7:78:de:ed:46:11:08:ee:12:17:93:70:85:
f3:f9:67:6f:7b:3b:3f:b3:70:e0:58:07:05:ff:96:fe:53:f8:
16:cb:e4:4a:0f:db:c4:df:ba:74:79:55:df:39:4c:4c:22:6f:
ea:05:55:e1:d3:39:77:18:8f:a4:07:c8:4e:e7:e4:59:47:3e:
f5:49:94:70:85:61:db:36:b9:59:dd:07:0c:1e:7c:fb:08:16:
42:a3:b8:8c:33:7e:46:66:95:f3:fd:42:e2:db:57:0e:17:b2:
44:43:bb:c5:71:9d:e4:b9:5c:22:bd:59:d3:f1:59:21:98:90:
bc:da:a6:f0:7d:d0:b5:5f:1a:d7:ef:ee:70:0c:04:b8:14:d7:
f2:97:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:39 2026 by rpki-client