Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File: ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier: IUqqe1YNSYPRFaaw23TmNHFaDVsKyYWkP0CPIQg+QAo=
Subject key identifier: BB:B3:81:F2:8F:57:98:F9:8B:34:BC:64:B1:08:BD:2D:F6:DE:8A:21
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial: 019D38D320C2C1DE994458A67AC3A04356D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: JF5HZsn7h3hTXeSm3T5gZ-J45no.roa (hash: nH/dD1vhkAFkX+8w5fK7+63eCRhFsEpgDdLpvN3kRkk=)
2: XGanTFBQAZ33sQ9Am0M5XIEmOKo.roa (hash: tk+B6re3rpRoBjg7UDNsVYSuSSnejyoxsoqWHW24Ts4=)
3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: XjLniSW4p+oxrRN15C37WEWvs+m5N3PryJ2LBRdd4ys=)
4: jUxm_qgfh3IYfHDY4BsRtkkVL0w.roa (hash: JmlPibEqMfscplOPIOSacxthvDnFR9Ge2IhPMvlaWZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:20:c2:c1:de:99:44:58:a6:7a:c3:a0:43:56:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=bbb381f28f5798f98b34bc64b108bd2df6de8a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:79:3f:7a:4a:f0:f7:3b:30:19:dd:6c:18:
a9:74:00:81:86:c1:83:95:3f:ca:b5:db:64:ea:f8:
ed:b9:bd:b2:8c:b8:b2:0f:a1:c9:47:92:53:d1:3e:
67:ee:b8:64:64:3c:c0:9c:cf:45:e6:d2:c2:d2:d7:
89:f7:2b:97:cd:45:05:9c:fd:9b:4b:88:0f:07:ea:
15:72:08:e9:d9:50:3d:70:62:30:6c:9e:6d:9b:74:
eb:1a:1c:89:43:99:56:c5:dc:ed:20:82:61:de:6a:
9f:80:dd:ad:ff:78:61:35:29:a3:4c:b2:65:94:21:
8c:d9:82:a0:7c:c7:c6:1d:cb:07:4c:54:81:01:88:
3a:72:08:d3:3a:0b:8e:58:13:c5:21:d7:63:c4:3a:
a7:7f:11:a8:93:75:59:ba:d3:ea:b8:e6:14:f2:41:
d4:62:18:24:ab:c1:25:e6:09:a0:15:0b:06:7d:be:
b8:49:e6:7f:7d:59:2c:66:a2:bb:50:b5:34:f4:ab:
0d:92:f5:83:b3:4b:5a:0b:a9:7a:d4:ee:cf:9c:6f:
d9:aa:3f:d2:10:e4:17:60:09:88:2a:96:31:c4:11:
34:4c:4e:6e:fe:0f:b1:94:f3:6b:17:94:e7:32:51:
81:2c:19:46:d8:8d:71:1e:b8:88:3b:e9:32:5c:90:
f0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B3:81:F2:8F:57:98:F9:8B:34:BC:64:B1:08:BD:2D:F6:DE:8A:21
X509v3 Authority Key Identifier:
keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:40:ba:b8:ce:3b:a5:1d:8e:ee:a1:f7:30:01:ca:51:f1:e6:
07:b1:8e:26:e2:0d:9d:34:28:88:0e:9d:d9:05:4f:bc:87:d6:
e4:6d:c0:30:53:b4:7d:1c:91:c6:fe:08:89:ab:52:ec:76:c2:
68:00:96:76:9a:dc:a7:18:46:d8:60:dd:cc:c1:d8:ec:7e:82:
4d:04:57:d0:e9:b6:59:e3:8c:fa:e3:8b:ad:42:b9:1d:b9:9d:
e5:23:72:74:50:e5:f7:6e:ae:78:f4:e0:07:6f:0d:30:58:37:
b0:2a:10:cd:24:20:23:5b:95:53:ce:05:86:df:25:f1:c2:3b:
00:29:ea:70:63:d9:68:9f:20:7a:cb:64:b1:83:9f:d2:d9:0d:
2e:b9:ec:eb:20:c4:9f:e9:59:52:da:3a:55:3c:f7:9a:69:9e:
4c:77:00:e4:d3:34:c6:72:dc:fe:e0:10:59:12:72:81:23:86:
f5:36:ae:16:de:07:26:08:c2:02:85:aa:84:86:03:99:2a:8c:
ed:0a:d9:ad:2c:d8:73:1f:75:c8:13:ab:ab:7d:04:14:98:1d:
4e:73:23:97:31:55:78:19:32:6f:64:39:a5:36:dd:71:64:aa:
5f:2d:79:25:18:68:3e:6f:9b:7c:01:81:03:9b:a1:1e:db:bd:
94:38:e6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:08 2026 by rpki-client