Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
File: 0c9dkt13uO9-1s1XyqoQr9mOnlo.mft (raw, json)
Hash identifier: Ra67UpD0YM8SHu9nROuNFeKqg+vE+qFJBCSChbHXy+k=
Subject key identifier: 61:99:EA:35:F3:DB:0F:20:8E:7D:40:EE:2B:A8:32:03:92:14:20:E7
Authority key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
Certificate issuer: /CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Certificate serial: 019CAFECC4098A4899072EEAF26E2FEB9E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
Manifest number: CE
Signing time: Mon 02 Mar 2026 19:00:55 +0000
Manifest this update: Mon 02 Mar 2026 19:00:55 +0000
Manifest next update: Tue 03 Mar 2026 19:00:55 +0000
Files and hashes: 1: 0c9dkt13uO9-1s1XyqoQr9mOnlo.crl (hash: QQByL4lMURi6r/FBKtfmJhf34ss/pH//SKl04hsrqCo=)
2: aRPei__YV55E5LayLWDZlLmCI2M.roa (hash: Cq96j35j1pjMRWQ8I4PQ7Ruzt7oVF+lvmFKi5QfS62o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:c4:09:8a:48:99:07:2e:ea:f2:6e:2f:eb:9e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Validity
Not Before: Mar 2 19:00:55 2026 GMT
Not After : Mar 3 19:00:55 2026 GMT
Subject: CN=6199ea35f3db0f208e7d40ee2ba83203921420e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:e9:47:9d:9d:67:eb:1c:cc:38:bd:81:79:
a1:5e:7a:56:59:1a:c9:09:5c:a4:c0:2d:0c:db:bc:
d9:55:08:98:41:b3:50:5f:ca:a6:43:2c:bf:45:ab:
f7:71:30:3d:b2:d3:06:ea:52:12:c6:ed:55:5d:cd:
d4:fc:ea:48:cc:53:05:0b:8f:c1:53:f4:21:f9:f7:
5e:e7:8f:81:2e:e8:af:8e:35:59:b0:d0:cf:da:38:
3d:52:40:8c:e3:19:a0:ab:ee:06:9b:e4:60:fd:13:
88:bf:2a:5a:33:df:bb:c8:db:e7:d5:69:0f:1c:d8:
a8:07:3d:34:2e:88:b1:91:43:38:03:fa:1b:91:74:
af:e6:fa:07:6a:f4:53:cd:bb:01:30:ee:8c:c5:50:
bd:74:52:f1:d6:4f:c6:85:9b:39:38:4d:2f:e8:71:
72:b5:b7:c9:e3:62:cb:1f:f8:94:8a:09:ef:79:74:
81:f3:65:18:0f:b1:7e:da:1c:db:90:0c:94:71:da:
fb:5a:9d:e8:cd:c1:f0:21:54:3a:85:49:8f:55:d6:
71:6f:b1:51:5e:e6:28:2b:fb:91:8a:69:94:51:48:
ce:2c:4b:91:9f:b7:f3:e0:9b:cd:8b:91:11:9d:a4:
6a:a1:ca:5d:8c:b1:dd:60:3e:92:c6:0e:48:c1:51:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:99:EA:35:F3:DB:0F:20:8E:7D:40:EE:2B:A8:32:03:92:14:20:E7
X509v3 Authority Key Identifier:
keyid:D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:54:25:e9:54:e1:28:5e:c8:8d:9f:63:7b:0d:46:a7:bf:51:
6c:c9:12:76:3a:80:a3:ce:18:f7:3e:15:41:fc:9b:76:cd:8b:
46:9b:2f:68:11:c4:46:70:a4:40:3d:d0:9d:7a:4e:c5:1b:58:
f7:8d:49:e4:2e:2e:f6:8c:0f:9e:1f:85:47:8a:a3:a0:c4:74:
b0:a0:11:fa:63:98:ff:70:2e:57:6a:a2:43:7d:4f:26:4f:eb:
3b:98:18:de:3a:06:da:87:f9:f6:72:1a:99:3c:1b:31:c4:7c:
8d:84:04:73:3d:82:9f:3e:a9:fd:5c:84:d5:37:ce:7b:0f:e0:
71:2d:b8:8f:7c:6e:54:c3:a7:d4:bc:ca:7d:cf:2b:ec:cb:bd:
16:ca:09:13:d6:d6:2a:0d:01:d1:67:9e:3b:2e:81:83:8a:05:
00:06:8f:eb:11:71:c7:a3:a1:cc:90:f4:4c:e5:22:3e:8e:60:
ef:21:cc:e7:19:73:ee:1e:89:fd:e0:88:50:8d:e3:42:ec:de:
3b:bc:27:5b:c9:e4:a0:9e:4b:0c:8a:23:49:0e:4f:e3:f5:9c:
fa:a2:2f:37:25:ce:3f:88:a0:6b:27:42:d8:e0:41:3c:d4:fb:
f2:83:28:6b:82:63:8d:40:b7:96:d0:74:e7:70:35:86:5a:38:
6a:74:2c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:43:26 2026 by rpki-client