Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier: bDqWOp9BO8eNwCy4tgeWxAC/6WOdLJd4S8U1u6n4KeA=
Subject key identifier: 0A:4A:E7:AA:B4:03:A4:15:1B:CA:8E:F8:37:0F:5A:B0:8F:C3:C0:96
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 019CAB34623C0A45A217431CB9302DF5AD9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number: 1130
Signing time: Sun 01 Mar 2026 21:01:02 +0000
Manifest this update: Sun 01 Mar 2026 21:01:02 +0000
Manifest next update: Mon 02 Mar 2026 21:01:02 +0000
Files and hashes: 1: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: C9FGSwX9dUPaymA5Y3F3g+SHN4w+IBBAjcYfs1DD5HA=)
2: oGvgPtzFT-aTFQ_B85J22DwDAck.roa (hash: 6nOejPxS/rpc0rhO5giVJoyCV3cG0CBp7/FNYjbRlys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:62:3c:0a:45:a2:17:43:1c:b9:30:2d:f5:ad:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: Mar 1 21:01:02 2026 GMT
Not After : Mar 2 21:01:02 2026 GMT
Subject: CN=0a4ae7aab403a4151bca8ef8370f5ab08fc3c096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:cb:12:3a:27:a3:91:50:05:56:c1:85:20:
96:7a:1b:58:fc:30:96:91:67:50:cb:90:5f:51:ba:
61:1a:45:4a:85:d7:11:19:3f:32:6e:4a:89:08:5c:
64:8c:30:9f:28:61:fc:90:76:ff:64:d0:71:88:4a:
5d:e2:fc:eb:c2:35:16:fe:94:29:0b:d3:b8:d2:cd:
59:93:e0:a2:7e:f6:39:d6:36:11:56:94:e4:cd:f0:
67:3e:6b:ca:3a:a3:f0:c8:fe:5e:00:86:47:42:c7:
4f:89:f4:a7:0c:39:0a:82:48:fd:0c:1a:e2:0f:29:
d8:33:5d:de:46:8a:b4:51:04:08:d2:63:6f:94:55:
2f:6a:8e:e5:b6:1c:29:08:c7:39:28:26:b3:8f:de:
f2:de:22:39:92:89:87:8f:1e:bf:28:af:af:0c:fc:
15:25:e4:8b:2a:d4:90:52:80:84:14:14:a6:49:88:
e4:ec:5d:80:33:ad:ad:00:41:6a:bc:a4:76:e7:2f:
26:bf:b3:1e:37:5e:75:df:7b:d7:83:1e:2d:ad:05:
b9:7a:d9:95:d0:2f:32:1b:13:e1:2d:4d:2b:94:6c:
1f:47:7e:d1:ca:01:91:5b:ca:24:21:36:3c:01:92:
b6:ea:0d:31:92:c3:d0:85:04:4e:5c:04:b6:e1:0c:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4A:E7:AA:B4:03:A4:15:1B:CA:8E:F8:37:0F:5A:B0:8F:C3:C0:96
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:62:49:8d:f9:6f:da:ce:71:59:3c:50:da:52:0c:69:7c:ac:
4c:bd:0b:a6:c6:c6:d7:2b:77:e0:78:8d:59:06:34:09:a3:3c:
6a:f9:ca:b2:b9:b1:c0:13:1b:52:85:dd:65:e7:35:8a:af:a8:
40:03:28:e6:e7:de:66:0c:24:19:0f:1b:ac:5f:7c:8b:84:38:
26:6c:81:ce:5f:cc:cc:69:f9:1e:0b:8a:1a:7d:60:30:01:f7:
9a:f2:da:43:8b:22:91:cd:21:dc:31:c4:7a:cd:74:5a:1c:6c:
db:d4:83:6f:23:66:26:f8:05:f0:16:f7:d3:91:55:d9:0f:ef:
2b:1f:43:b1:b8:be:19:c7:09:b4:51:84:b6:61:6a:af:22:c2:
82:6f:c8:21:29:4b:fc:c8:c5:4a:e8:d7:9c:f0:1b:aa:60:2c:
96:fc:c0:7c:b7:d1:e9:3c:08:e4:8e:8b:92:e8:03:a0:a3:f8:
7d:33:83:9b:b3:b3:26:8d:93:bb:26:ef:6c:1a:e2:78:8a:aa:
ce:5e:ac:a5:d9:b3:3a:77:3a:64:b8:8d:60:fe:a8:fc:d8:12:
89:a0:70:2e:52:a5:d7:d2:be:d0:3a:e7:fe:07:7c:ec:f6:75:
ac:96:50:04:15:10:75:cb:8e:77:77:7b:1d:00:54:b2:4f:a5:
33:f9:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:02 2026 by rpki-client