Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
File: 9uGk5drZ5MwU4BaRDsS2adXjq5w.mft (raw, json)
Hash identifier: mcy7rONSEWmlNt1dP2e7od41BuQ3kv25o8xzuU5W+aA=
Subject key identifier: 54:41:89:92:3F:96:3B:D0:D6:1C:65:11:4C:77:DC:0F:EA:07:21:9E
Authority key identifier: F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
Certificate issuer: /CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Certificate serial: 019D39419CD654D42BCB64CC739C5F9F10F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
Manifest number: AD
Signing time: Sun 29 Mar 2026 11:01:34 +0000
Manifest this update: Sun 29 Mar 2026 11:01:34 +0000
Manifest next update: Mon 30 Mar 2026 11:01:34 +0000
Files and hashes: 1: 9uGk5drZ5MwU4BaRDsS2adXjq5w.crl (hash: I0a/vxJihRHCt66xenMjSRDhHxQQpJDxJjGG3GzOFA8=)
2: H_uYynhuG6l8wZqNzHCCCngrv6I.asa (hash: cNBW9xKMdJGhXlb3YQvmEsKCGDZEJR6jaSu58wTwgns=)
3: SRCK7Ufu64KsijFRcRFiAbmnlfM.roa (hash: r3tIqkepOEqyJpInWtiArXc2WfvA20Y21WU/4jD8OPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:9c:d6:54:d4:2b:cb:64:cc:73:9c:5f:9f:10:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Validity
Not Before: Mar 29 11:01:34 2026 GMT
Not After : Mar 30 11:01:34 2026 GMT
Subject: CN=544189923f963bd0d61c65114c77dc0fea07219e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:d4:a5:c9:30:fb:94:90:e5:68:bc:5e:b5:
b2:b5:a0:e6:ed:94:e7:ac:4f:94:9a:67:3d:2c:2e:
61:0c:dc:4c:cd:02:23:ad:a1:f5:14:3e:c7:eb:8c:
37:a6:f6:95:08:39:55:14:3c:7c:86:b5:f2:98:50:
93:f5:b8:eb:e6:31:b8:5c:cd:c1:13:ba:ff:72:8c:
c3:bf:bd:58:ff:99:af:73:67:72:b0:68:31:8d:f8:
cf:94:a6:ef:cc:0d:8c:59:c5:b2:75:d9:2c:d8:53:
1f:bc:4b:cb:69:f5:0e:b6:c4:c5:9b:8f:d9:0a:4d:
8c:11:33:a8:0c:6f:19:e5:f6:ba:5d:be:50:a8:4c:
a9:66:88:a1:4b:bf:46:37:ae:a1:a9:1a:c6:37:0d:
85:37:cc:68:03:39:9b:40:94:57:b4:ff:30:a7:e8:
90:2e:c7:3b:d5:52:ef:f7:85:3a:94:34:db:69:6b:
25:a5:f7:b7:91:6a:41:32:29:3e:5a:45:46:cc:b8:
a2:ae:e8:99:18:e7:74:79:58:01:f4:e1:44:70:d2:
96:e2:5a:42:9b:c7:8f:68:0c:63:b6:12:7e:b3:0f:
e6:6b:a0:ee:bd:ac:4c:cf:da:4f:b4:d0:cf:01:af:
e2:0e:33:72:07:a3:5c:6b:cb:2d:00:3b:6b:95:e8:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:89:92:3F:96:3B:D0:D6:1C:65:11:4C:77:DC:0F:EA:07:21:9E
X509v3 Authority Key Identifier:
keyid:F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:36:38:75:31:08:25:ce:69:2f:0b:ed:74:15:54:4f:56:54:
3c:6b:53:ad:68:83:42:c3:34:8e:40:97:3e:32:98:55:81:9b:
4b:d4:7e:59:a3:cb:12:6c:ac:ee:91:ee:75:14:6e:88:a6:73:
d4:f0:76:80:5c:45:b2:5a:78:a3:88:89:d2:a5:f1:4c:1b:ca:
e6:7c:3c:94:96:db:5a:b4:2f:2b:31:0a:95:46:a6:a8:af:d7:
97:5b:22:7f:25:58:85:f6:54:4b:3d:5e:06:72:86:c8:87:f2:
49:8e:56:e8:17:f1:05:8b:b4:66:38:6c:b5:b7:ac:1c:34:eb:
23:2d:dc:5a:c8:1d:93:d3:c9:55:2e:7f:1e:cc:b7:2a:32:63:
78:82:c8:1a:9b:a6:df:b4:b1:df:92:56:bd:0a:dc:c7:07:02:
c9:59:bd:3c:24:93:31:2c:2b:55:f2:1d:e6:63:8b:68:1b:46:
17:e7:b7:e0:cb:7c:04:ce:d8:62:e0:71:bb:a1:77:8c:c8:03:
89:8e:48:8e:91:a6:28:8d:4c:a6:bf:f0:50:49:02:29:9c:7b:
19:fe:68:70:73:9f:d2:61:84:b1:f0:d1:1c:ee:d6:0d:e4:24:
3d:5d:93:86:61:c2:30:5d:1e:ac:c5:4d:05:e1:19:f6:96:d0:
27:bd:71:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:33 2026 by rpki-client