Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: i/X2rzMcZS6bmHiYzgSrspi0BzuzslIT69V6/LtDsFQ=
Subject key identifier: 72:04:F9:05:73:22:43:84:CF:4B:02:F4:0B:12:FB:AF:BF:B6:B8:43
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 019D9C638D0799A8B46D351247831919A4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 1547
Signing time: Fri 17 Apr 2026 17:01:02 +0000
Manifest this update: Fri 17 Apr 2026 17:01:02 +0000
Manifest next update: Sat 18 Apr 2026 17:01:02 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: mOEarbcAkNxBygTYweKIii28MLfN/LCW0qY/xhOaSQY=)
2: p9afRUC51SfaJyMaCVZSnQiB2hY.roa (hash: 6VxOCyWy4+A0UX6VtaLP95X/pFp2fxpWhbFoynGWOGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:8d:07:99:a8:b4:6d:35:12:47:83:19:19:a4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Apr 17 17:01:02 2026 GMT
Not After : Apr 18 17:01:02 2026 GMT
Subject: CN=7204f90573224384cf4b02f40b12fbafbfb6b843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:4a:4b:cb:db:94:ea:8d:98:a2:06:be:67:
a5:d9:55:66:8c:55:1a:de:c7:91:83:ee:ea:b5:31:
89:fe:08:8c:66:3c:27:7e:57:39:49:7d:e3:ae:5e:
c1:67:d6:7b:d4:a9:cf:e0:b5:e5:02:02:c2:66:ca:
9f:ac:82:e1:d8:ab:db:1f:ee:af:44:95:8e:4f:1f:
2d:54:b9:89:77:7b:07:01:61:f5:a1:5f:33:ef:9d:
57:d1:88:7e:85:ca:bc:b3:42:d8:58:da:d9:dd:b0:
a6:08:3c:f7:43:3b:9e:b6:81:b4:96:ff:60:14:58:
c8:81:5e:67:bb:23:e4:52:e6:82:9f:de:e7:0f:39:
01:47:5d:72:36:37:e4:87:ad:4f:26:61:33:b1:c7:
41:da:6f:32:8b:b3:5f:25:3f:c1:f1:3b:60:94:f7:
8c:f6:9b:75:87:df:7b:de:27:2c:f6:07:70:a9:c3:
6a:6d:ac:15:a6:6b:3a:0b:d2:c6:26:8d:73:76:e6:
0e:6d:a2:7c:73:64:6d:7e:c9:0a:cb:ab:e9:58:36:
a0:bb:60:78:5b:87:bb:b7:f6:b1:64:60:79:f7:44:
ec:5e:88:c3:23:a7:6d:21:c6:dc:17:76:68:a2:6e:
6c:8f:75:36:ff:2c:74:b7:4a:47:04:4a:f9:ad:a7:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:04:F9:05:73:22:43:84:CF:4B:02:F4:0B:12:FB:AF:BF:B6:B8:43
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:12:63:27:61:40:f9:07:80:0d:f4:15:2d:33:13:a5:43:1b:
09:4a:6f:2e:ea:9e:52:0e:02:8f:bc:5f:03:dd:30:85:28:b6:
c7:11:fa:6e:4a:0a:62:f0:58:67:50:27:e5:62:50:3b:47:9a:
fd:56:ac:1f:47:96:c8:10:33:e7:46:94:22:72:33:1a:a2:66:
5e:b2:e2:e4:3d:9f:f4:83:32:f7:ba:6f:7c:da:5c:61:55:9f:
4b:d2:b2:c7:5a:17:b7:45:93:af:81:81:eb:48:98:c8:f2:4e:
ae:aa:41:8a:c0:c6:0d:c8:21:94:e5:9f:00:71:a6:86:20:d4:
3d:96:5e:2b:b9:61:ba:b8:f7:d4:ed:54:0b:d4:58:3f:c8:18:
21:3e:31:d9:0d:58:d6:f3:6a:63:d5:ed:b8:3a:3c:30:ab:db:
c2:8f:2f:60:a0:ee:62:53:fb:ee:99:9f:88:ff:1d:48:aa:06:
41:66:b4:4b:d7:cf:28:a5:ee:c9:8b:c5:a5:b0:b4:81:3f:c4:
05:08:0a:70:5a:f0:86:d6:99:47:82:6c:e1:4c:a2:78:83:97:
59:cf:12:ee:2b:df:d8:1d:e3:a0:f0:c1:1c:83:3e:b4:c1:45:
bf:80:28:56:8d:ff:6e:d4:a3:bf:7a:06:14:af:57:cc:7d:a4:
b8:e1:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:06 2026 by rpki-client