Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: t7HGuJZRrJbyVzM3aQ/L2NzlW2OD7XseH6puy0mwQ5A=
Subject key identifier: 8E:80:27:C6:94:C5:0D:B0:4C:3E:20:BB:B5:1F:89:84:48:6D:69:56
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 019CACEB85F696CCA71E5970628980397EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 14CB
Signing time: Mon 02 Mar 2026 05:00:42 +0000
Manifest this update: Mon 02 Mar 2026 05:00:42 +0000
Manifest next update: Tue 03 Mar 2026 05:00:42 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: QUdtutwq8owJg3vpD2Tri8ffDf4Ga+Ak+N78Ip4WseE=)
2: p9afRUC51SfaJyMaCVZSnQiB2hY.roa (hash: 6VxOCyWy4+A0UX6VtaLP95X/pFp2fxpWhbFoynGWOGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:85:f6:96:cc:a7:1e:59:70:62:89:80:39:7e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Mar 2 05:00:42 2026 GMT
Not After : Mar 3 05:00:42 2026 GMT
Subject: CN=8e8027c694c50db04c3e20bbb51f8984486d6956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:91:04:12:72:ed:ee:30:6e:ea:56:a5:2b:
00:ee:33:37:a4:80:bd:97:54:a7:03:2a:2b:b0:55:
f9:83:39:e3:8a:4d:da:9c:d3:83:80:fa:53:be:73:
95:71:81:16:91:7a:78:17:ad:45:5e:c5:93:77:11:
f0:38:10:02:89:4b:eb:7a:b1:31:19:5e:3c:52:2a:
2c:04:07:cc:8c:e3:83:0d:cb:6a:74:99:8b:54:eb:
99:9a:39:d7:06:c1:f3:c1:33:96:e9:8a:25:86:d0:
4b:7e:0c:82:38:c1:ff:92:74:70:b7:43:98:ec:b4:
ed:61:a9:42:64:f8:5f:db:24:ce:d5:18:c9:17:1e:
21:54:39:55:06:b2:17:12:83:0a:72:1b:26:d2:ec:
9c:3d:99:6f:da:4a:ff:38:ef:87:9e:e5:61:3a:0b:
2e:bb:92:a4:41:d4:ff:e0:61:00:9b:c1:ca:74:de:
b8:00:dc:5d:47:d6:4a:49:bc:88:9e:c8:3b:5d:0f:
97:7f:65:a2:78:71:74:6e:04:0d:ee:44:a1:01:9a:
d4:e3:0a:a3:21:b8:35:65:eb:9b:97:16:d5:11:cd:
25:24:ae:62:b1:b4:41:fb:d1:34:b7:43:7a:34:8e:
3e:58:d3:3a:80:ed:7f:2d:69:1c:d3:6c:e7:ce:d8:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:80:27:C6:94:C5:0D:B0:4C:3E:20:BB:B5:1F:89:84:48:6D:69:56
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:dd:78:d2:96:81:a3:b9:e8:3b:71:0f:6b:1c:62:36:48:e7:
4c:90:c9:86:6e:cb:98:54:87:ec:07:e0:00:41:92:b3:40:a3:
9b:5a:ab:00:6a:46:46:ec:d3:39:d1:54:ba:77:ba:b3:55:83:
8c:d6:e2:91:26:67:ff:0d:e5:a0:55:a8:26:57:98:e1:e1:be:
64:36:ac:4e:5a:77:6f:ff:ea:b1:f0:d2:33:76:b6:f2:65:96:
c7:30:2b:43:14:69:51:b8:35:80:91:9e:bd:1b:97:39:b6:ad:
f1:8f:a2:f9:3e:d3:56:7a:e2:62:26:1d:01:c9:6b:17:7b:ee:
0a:0f:7a:49:c2:b5:53:57:ee:e8:82:20:c7:b4:49:ac:4d:77:
06:71:94:9c:57:4d:9b:bc:74:8f:c3:71:dd:72:73:76:f1:a2:
04:dd:f6:ed:29:0d:1c:21:6f:70:ba:9c:e0:87:a1:e9:95:fd:
a9:c8:e6:ed:0b:68:7e:4e:69:b6:04:bb:f8:5e:9b:7d:7c:da:
ca:75:3f:f2:d0:93:b9:18:5a:07:b6:4f:51:e6:ff:af:4e:f6:
db:94:15:64:08:39:c7:ed:78:15:6b:db:91:37:64:51:56:72:
70:9f:bd:68:0e:9b:af:70:6f:d0:f2:3f:d0:58:93:60:15:ed:
ad:e3:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:49 2026 by rpki-client