Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
File: 0c9dkt13uO9-1s1XyqoQr9mOnlo.mft (raw, json)
Hash identifier: Hex7H9AXmoeZCVWdEWgh5bd6qZrnX4P0gZz2MaOtKo8=
Subject key identifier: F9:CC:BB:DE:28:F9:98:D4:78:87:30:9E:07:6D:05:3E:3D:EB:98:91
Authority key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
Certificate issuer: /CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Certificate serial: 019D9B87749A24A4BC627B84020D13B81352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
Manifest number: 0148
Signing time: Fri 17 Apr 2026 13:00:38 +0000
Manifest this update: Fri 17 Apr 2026 13:00:38 +0000
Manifest next update: Sat 18 Apr 2026 13:00:38 +0000
Files and hashes: 1: 0c9dkt13uO9-1s1XyqoQr9mOnlo.crl (hash: Hw9buJVZ4Og3c/hZi6XWYf2mO5rYaXlSBnbZXvsL4U0=)
2: aRPei__YV55E5LayLWDZlLmCI2M.roa (hash: Cq96j35j1pjMRWQ8I4PQ7Ruzt7oVF+lvmFKi5QfS62o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:74:9a:24:a4:bc:62:7b:84:02:0d:13:b8:13:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Validity
Not Before: Apr 17 13:00:38 2026 GMT
Not After : Apr 18 13:00:38 2026 GMT
Subject: CN=f9ccbbde28f998d47887309e076d053e3deb9891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:57:31:f6:d1:55:85:86:b7:c8:3b:d3:9d:
26:5a:cf:7a:86:53:6c:59:d4:a8:18:48:46:95:c4:
ad:d4:d5:2c:6b:d2:0c:76:96:ea:d4:b2:a8:a1:c2:
85:7c:14:a9:7d:85:a9:c0:94:ff:c9:ff:bb:39:4d:
91:99:ba:2c:82:7c:7f:90:9e:18:21:41:40:8d:51:
f9:9c:50:da:49:9e:e4:52:80:c7:bb:52:18:bc:d5:
54:2d:27:6c:ac:ad:ad:a6:79:bc:0d:a1:0c:e9:c4:
96:d4:14:e4:ba:cf:be:76:7b:dd:13:b9:5f:70:ca:
0d:96:48:59:df:3a:dd:b0:db:87:e7:11:08:81:1e:
51:1b:05:48:a0:c0:94:be:c5:aa:eb:37:c7:3a:3b:
ec:58:48:8c:43:59:e8:99:c6:f1:64:8c:59:54:2b:
be:3d:7a:a0:24:d2:70:d4:74:1d:78:a2:f7:50:eb:
76:64:03:97:28:f4:d1:9a:74:a6:83:85:cc:87:b3:
b6:db:4d:b9:71:fd:41:63:22:8e:88:6c:f9:46:0f:
8a:2f:6a:83:ec:48:f8:80:ed:82:9d:b9:e8:52:21:
c9:b3:04:79:32:fb:b1:24:04:79:f8:2a:08:f6:16:
ee:4b:03:25:e8:3d:37:5c:60:c9:cc:35:18:28:f1:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CC:BB:DE:28:F9:98:D4:78:87:30:9E:07:6D:05:3E:3D:EB:98:91
X509v3 Authority Key Identifier:
keyid:D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:31:89:e5:95:2d:f9:a0:7a:0d:b4:b3:0e:36:f5:34:0b:86:
32:43:ef:a5:9b:b8:b2:3f:c4:db:c3:c3:c2:d8:e2:46:ab:52:
6d:f3:9c:56:cc:1f:d6:d5:9b:a0:87:0d:56:b2:aa:4d:8a:61:
b9:c4:9b:2a:9c:83:02:4c:61:8d:e8:17:c8:b3:57:0c:a1:bb:
58:aa:40:06:1d:c7:65:86:1a:ce:82:23:fd:72:77:a8:49:a7:
86:a3:42:90:5f:58:45:ee:93:fe:13:8b:fd:4d:91:3b:61:e5:
39:2e:6e:42:68:9e:a5:59:8b:73:c5:c7:21:8e:82:22:df:13:
e1:ca:c8:e7:ce:b5:91:a9:7e:4d:8f:bf:2d:3c:da:02:10:bb:
e2:08:af:d5:2a:bd:b9:a6:79:73:de:95:c1:5a:6a:ea:22:90:
58:4c:24:85:1b:3b:74:04:30:44:30:6a:96:2c:cc:df:0f:97:
4e:8d:a2:cb:a7:74:93:87:18:c8:a7:bc:98:d8:b5:c5:a3:88:
24:77:6b:23:c9:aa:35:94:c5:96:14:4e:6e:48:ef:6b:55:24:
06:2b:26:ce:81:d6:2d:ff:d8:f3:a6:71:b3:51:ef:93:49:72:
e3:f3:f6:23:e8:9b:51:8e:22:83:92:f8:93:93:c7:41:20:54:
5f:2e:74:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:30:16 2026 by rpki-client