Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
File: 9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json)
Hash identifier: JUZIgkBwOtUwWXP6jlARikIxBKpzclFzf1HvpesFo+c=
Subject key identifier: 94:2C:AC:9B:D0:43:7D:7B:C4:4D:60:C5:34:27:3F:26:A8:48:FA:74
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial: 019D397809EC76EED03FAB3F386EB502A3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 12:01:01 +0000
Manifest this update: Sun 29 Mar 2026 12:01:01 +0000
Manifest next update: Mon 30 Mar 2026 12:01:01 +0000
Files and hashes: 1: 86kV-CBVfnQcJyHUwtgj6mE9ynY.roa (hash: HD7vMFw1ZLvs7IG1Ix80v+8FBmp78WtI8pixF8GnWyU=)
2: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: cIEfN7jrBuHH6urWa0X8ZKLw2v0aQNiRSD1EJP/EUhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:09:ec:76:ee:d0:3f:ab:3f:38:6e:b5:02:a3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Validity
Not Before: Mar 29 12:01:01 2026 GMT
Not After : Mar 30 12:01:01 2026 GMT
Subject: CN=942cac9bd0437d7bc44d60c534273f26a848fa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:db:bf:b2:2c:81:d2:c4:4a:68:94:0c:c4:
6f:99:a6:64:11:19:01:0c:91:a0:e3:e2:78:eb:97:
44:12:bc:5c:0a:f0:98:d0:d5:99:e0:25:60:5c:f2:
5a:29:e6:a8:ba:da:05:84:03:2c:46:b2:ca:21:de:
09:25:08:3f:b5:ea:7a:1b:b3:3c:fb:63:ca:9d:50:
29:d3:bd:36:0b:43:6b:1a:0f:68:f2:20:10:c1:23:
bc:e6:b4:c5:23:f5:e7:34:d0:81:b3:ba:5a:04:a6:
d1:9e:29:5c:e5:73:ef:85:89:21:f8:5d:52:0b:5e:
56:89:5b:8d:09:99:59:45:32:d6:2e:c6:af:b0:77:
a8:c8:f3:43:0f:3f:e2:b1:97:57:ec:cb:0d:f6:7d:
ca:f0:9f:fb:27:6f:44:55:59:d6:d0:df:ee:43:86:
8d:4d:d4:35:cb:7d:38:73:4e:c6:63:6a:c8:d8:27:
e3:cb:ed:7f:f3:4f:96:2c:3d:39:38:e5:34:c3:2a:
88:76:2d:d7:1b:28:e0:45:60:64:a2:38:3e:60:3e:
14:6c:5e:55:57:50:e5:d8:d8:65:b1:5d:08:78:41:
38:55:54:63:61:61:97:b6:97:81:cd:d7:5c:33:eb:
4a:e6:c0:42:a3:ff:ae:67:da:1b:59:34:d4:11:7a:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:AC:9B:D0:43:7D:7B:C4:4D:60:C5:34:27:3F:26:A8:48:FA:74
X509v3 Authority Key Identifier:
keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:23:59:80:4e:dc:c3:e3:d3:15:09:02:6b:27:a0:50:72:aa:
99:3f:28:16:0a:9a:4d:fa:bd:57:21:ee:68:60:19:bb:28:e4:
c1:16:7a:23:f5:71:de:f3:15:9f:48:75:82:48:6c:a2:b7:34:
56:39:07:a9:fd:fe:8c:88:08:72:88:8a:0c:4e:27:6d:a0:8d:
26:a8:de:17:a6:19:65:a9:92:0f:44:66:66:fe:71:f9:36:e3:
be:3a:57:9c:ef:2c:10:a0:57:ba:4b:29:ee:47:67:c1:bd:23:
b7:b9:98:1e:0f:36:51:4f:27:b1:0b:64:15:f6:b1:28:55:de:
ca:10:06:9a:25:c1:91:8e:d4:c8:06:20:e9:24:0b:ec:b0:c8:
d9:17:51:9c:12:79:c8:e9:3e:67:54:db:6c:2b:58:e7:28:87:
c7:64:bd:1e:66:f6:58:04:86:bb:81:92:f4:fe:74:a6:d5:2d:
c3:15:dd:e3:eb:80:a7:78:22:f2:b3:4d:98:2f:03:b6:27:30:
7d:21:19:19:24:a9:8f:be:5a:6c:90:b4:50:21:d4:65:cc:78:
c5:1c:77:aa:b2:30:67:5f:09:91:81:1a:19:d7:86:3d:fc:50:
60:d8:6a:e5:e6:52:e7:9e:49:f5:23:3f:d1:38:56:85:3b:9e:
aa:69:ed:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:05:33 2026 by rpki-client