Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier: wGjk5Am00H0tGxBKnOK+/fBm7gNQ7yaVLj988MinZv0=
Subject key identifier: 1E:23:D0:E4:9A:8C:C5:57:2F:77:8C:9A:DA:27:23:5D:05:0E:40:B0
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 019D38D3C4E8A80EBF5C8DD6A246FD32AE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number: 0D84
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: hPRTnwfEVfOVgDfxPibziwd01MlkH58f0HcdBO4+Teg=)
2: h1BmnlXgB6ac2TWYQTKQ2ChwBMo.roa (hash: yzd9rByRC5Jsp/Gy055ZEn4rSEyip4EOwsA55gh4BjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c4:e8:a8:0e:bf:5c:8d:d6:a2:46:fd:32:ae:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=1e23d0e49a8cc5572f778c9ada27235d050e40b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:0f:1b:54:5b:d5:88:f4:d1:3e:63:16:39:
a5:45:63:f3:fc:35:04:5e:17:9a:3d:c8:4f:c5:57:
30:bf:da:e1:c8:a8:a8:11:3a:45:74:e9:51:5b:27:
ee:fc:fd:79:11:67:a2:47:d9:7a:29:e3:a6:a9:c5:
d2:51:83:6c:26:69:6d:7e:04:1c:1c:d8:36:11:8c:
24:ec:5e:70:8d:d7:ec:06:e4:d7:ea:1d:fa:f2:35:
14:ab:46:53:79:cc:6d:00:65:51:78:24:6e:c8:c5:
ab:ac:d7:28:ac:6a:3d:90:ed:88:a1:59:22:3a:05:
5c:03:3b:61:54:39:fd:27:da:6d:19:f2:b0:1d:63:
c0:70:d5:0a:f4:d5:c2:0d:bf:6b:37:5d:65:7f:61:
60:db:fd:68:01:2d:4e:5c:c5:9d:4c:e5:c0:69:dd:
f4:57:9e:25:ba:0c:1d:7a:a9:1f:55:49:c3:2e:63:
72:89:fd:2b:99:15:67:1e:11:f0:07:d1:21:7b:e3:
70:81:14:81:3c:1d:09:e7:3f:2f:b3:3f:65:c7:10:
e3:38:50:3d:bc:c1:eb:35:c0:a3:8c:ba:13:d3:d6:
2a:0c:fb:2b:6a:17:30:55:01:56:be:59:ed:d3:1b:
f8:c1:61:e2:ff:47:cc:ee:f9:57:12:65:bd:59:06:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:23:D0:E4:9A:8C:C5:57:2F:77:8C:9A:DA:27:23:5D:05:0E:40:B0
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:15:1c:ca:96:fe:7f:a3:2a:da:ca:0e:2e:a2:25:5f:71:be:
12:f9:87:fe:89:4b:9c:20:9e:e3:c3:c1:24:f1:2f:27:e1:83:
67:59:d4:9f:f6:cd:21:10:55:91:49:16:f2:49:2b:2a:b4:56:
d1:54:8d:97:d4:2f:29:47:cb:c2:f2:ab:38:21:70:98:8c:87:
d6:64:0c:2f:44:36:d1:24:e8:30:ee:2f:9b:01:db:70:34:c1:
87:b9:e9:9b:15:f8:6d:83:5e:00:28:65:7c:9e:a7:28:57:c6:
23:bc:2f:84:5b:f7:92:65:e3:0a:77:40:59:c7:aa:99:39:b5:
d7:b8:da:cb:a6:60:27:17:0e:e3:89:52:14:c8:4a:c4:01:dc:
01:3c:33:19:cc:47:53:74:ac:05:36:a3:67:f4:a0:ec:93:45:
8d:cd:5a:ff:f0:64:3b:81:b9:94:db:42:82:55:9c:c0:07:87:
07:af:bc:74:32:59:54:f4:38:05:b2:33:da:f8:b1:8b:3e:fb:
3f:7c:72:02:f0:71:26:9d:99:aa:6c:91:1b:40:f5:9e:8a:e8:
4a:2a:aa:7d:06:f9:cd:3c:82:ba:ac:93:1e:ea:8f:7d:54:43:
c8:27:28:21:0a:40:e5:1c:f5:60:38:e1:8c:4c:ea:42:0c:14:
aa:41:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:34 2026 by rpki-client