Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier: Y0fCPAfDgVEEXgcZ0mYQ0bieQ8rGs+zXZXw3MH4wWCY=
Subject key identifier: 7A:60:4B:71:2C:76:37:B2:BA:48:BA:89:18:91:BA:0F:A0:CD:6C:1B
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial: 019D38664756971C26EAF1C9E339A8DE5F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number: 0CC8
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: b8zP5MqjPgH5GE+KoFo9RxW1llHiHpdAHL2/n9xKsvY=)
2: d5odnptrjJaW4wbv5e-w-InznHA.roa (hash: HdS9hjcjd6FA7NCMLYoBnDJO3cACO6YPZ4nZtli4PVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:47:56:97:1c:26:ea:f1:c9:e3:39:a8:de:5f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=7a604b712c7637b2ba48ba891891ba0fa0cd6c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c8:b7:bd:15:fd:e6:47:cb:97:18:4f:13:c7:
ea:90:b5:10:27:f5:15:6d:94:69:fa:58:6f:7f:a4:
64:e6:aa:91:c3:53:d1:61:6c:e6:12:d8:76:54:3e:
a6:83:ca:4f:a4:14:f3:a7:a4:ef:4d:03:5a:ed:ef:
bf:4f:31:ab:d6:8c:6b:e5:d5:96:f0:14:6d:57:7d:
11:dd:b4:dd:a1:f4:b6:01:35:63:36:09:de:dd:9d:
df:b5:11:9c:d6:f5:d2:0c:46:df:96:3b:f3:cf:1f:
c3:63:24:4c:75:2a:8f:13:29:9b:51:59:bd:37:92:
77:3d:0d:4e:89:a6:37:e9:a9:d5:6e:2d:b0:26:d3:
3e:2f:43:6f:4e:24:cb:1e:6b:36:a3:d0:51:a9:5e:
a4:ab:42:d9:98:89:80:74:99:ca:1e:bf:2e:7e:f3:
80:08:ff:06:25:0a:60:56:d2:cf:6e:da:bd:8c:79:
cf:aa:35:86:70:40:48:c5:b2:c7:30:da:c8:5b:ef:
e6:b1:a1:93:67:ff:31:4f:b9:52:2d:21:17:15:20:
a1:0f:76:78:4c:c0:b9:64:3d:85:53:a0:f1:6b:47:
94:80:f8:d1:10:5c:b4:fa:92:e9:76:a9:91:70:06:
08:0d:ef:57:e1:af:e2:6a:60:04:ea:f2:f9:64:05:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:60:4B:71:2C:76:37:B2:BA:48:BA:89:18:91:BA:0F:A0:CD:6C:1B
X509v3 Authority Key Identifier:
keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:80:a3:ad:7c:1b:7a:11:4b:c1:1b:52:0f:8e:ae:e7:e9:9e:
9d:74:3d:ab:d6:8e:a2:df:f3:12:54:be:43:23:94:1a:77:c4:
c1:31:85:08:08:f7:fb:85:03:a8:d3:f1:0a:2d:a6:6a:96:ba:
0d:cd:8b:e6:2d:8b:63:83:d0:85:8e:a1:10:bd:5d:8f:36:3e:
d8:e1:5f:eb:23:d0:99:ca:6b:c3:b2:f5:39:0a:54:33:7a:14:
cc:c3:b8:0d:a7:64:64:19:ae:ed:28:32:6c:fc:28:61:48:04:
79:0e:58:e1:00:86:61:53:63:cd:f9:c7:74:ac:4a:8e:f0:9f:
bb:5e:94:bb:ff:cc:8c:e1:cb:ac:a1:4c:4d:c0:ca:61:9a:d9:
c3:ec:7f:c1:ae:90:96:dd:fb:84:c7:53:76:d4:ba:7c:10:e7:
85:30:74:e0:25:11:8b:85:f5:ad:b5:91:4e:4d:85:7e:4b:fb:
20:29:2d:d3:20:69:c5:e8:f8:d6:47:20:ca:83:fa:02:7f:59:
a0:86:d5:d8:fe:dd:88:72:3e:01:37:31:75:e1:2d:26:99:da:
cf:83:9e:d5:e2:b6:44:33:d6:a9:4b:c2:0c:22:9b:e1:f9:b2:
3b:92:ee:3c:a8:24:2a:7c:f6:68:cc:c4:4a:8c:6e:1d:17:e8:
e4:dc:71:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:43 2026 by rpki-client