Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: J6SaXcvDEA5sKBMad47HFfxkmPF/QXj7jGzBD9Xm8gc=
Subject key identifier: C4:3A:67:40:1A:D9:29:9C:F8:15:9C:E4:A8:A9:D6:3C:58:7C:A4:3D
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019D148FF6902299408E7CFFF7B43EEE22D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 1671
Signing time: Sun 22 Mar 2026 08:01:12 +0000
Manifest this update: Sun 22 Mar 2026 08:01:12 +0000
Manifest next update: Mon 23 Mar 2026 08:01:12 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: 4YK1aCOffqYjE9najCmIb/rK2KZFF6341WKfSWycEZA=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:14:8f:f6:90:22:99:40:8e:7c:ff:f7:b4:3e:ee:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Mar 22 08:01:12 2026 GMT
Not After : Mar 23 08:01:12 2026 GMT
Subject: CN=c43a67401ad9299cf8159ce4a8a9d63c587ca43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:9a:c9:ed:e9:91:fd:a7:2f:b4:f9:c9:56:
39:dc:63:77:fd:99:5a:4f:9c:fd:db:57:45:ba:a0:
c6:67:07:af:9c:fb:92:c9:15:ed:7e:19:65:2a:db:
f3:8d:4d:69:0c:8d:79:7e:2f:55:af:eb:5c:d8:4a:
64:5e:dd:86:5b:c9:a1:70:75:ed:5d:3c:9f:f2:d5:
4b:0d:30:f2:c3:1e:fe:45:d9:0c:4d:d4:9e:e0:b4:
66:38:65:ab:89:d6:22:8c:9c:b7:7a:fa:6a:f1:d6:
2f:71:ed:39:53:0e:9f:e1:25:9d:3f:9a:95:e5:32:
78:8f:a0:af:ab:59:f2:da:4a:fd:15:f9:b4:6d:48:
80:98:75:9d:df:23:3a:1c:70:14:06:90:50:24:f6:
99:92:1c:89:e9:17:f7:68:0e:ff:f8:7c:ff:24:a4:
0a:51:72:05:a6:99:20:ca:93:29:a1:75:fa:a2:27:
f1:a5:17:a8:73:96:23:ab:b5:9f:10:bc:41:cb:bf:
e7:71:a4:12:91:8b:b6:74:d7:e5:60:6e:9c:c7:de:
15:8d:3b:a0:c2:e9:5a:5a:ba:e7:70:4e:e7:06:05:
1f:3f:80:e8:b7:a4:11:8e:12:86:29:34:c0:b6:34:
a7:03:f3:72:fe:16:06:2c:e9:7f:5e:61:a4:23:49:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3A:67:40:1A:D9:29:9C:F8:15:9C:E4:A8:A9:D6:3C:58:7C:A4:3D
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3c:12:08:dd:dc:5a:14:2e:0f:e8:d1:6f:60:58:eb:e7:2a:
3b:0b:96:07:60:ff:29:13:ae:b5:e0:fb:79:8e:04:5d:35:14:
38:01:d3:2e:02:ee:00:cc:ae:1f:31:f9:41:23:ee:26:70:13:
b0:c8:e2:4d:e2:05:53:1e:42:62:16:40:34:49:de:5e:b5:a9:
c2:a2:c2:a2:45:d9:e7:f4:d9:0f:da:ef:70:35:e1:15:e0:a1:
24:2c:05:7b:30:72:72:f0:6b:6f:e2:85:3a:b4:16:09:6a:0f:
91:b3:f8:60:fe:d7:b2:07:6d:78:f4:10:17:64:db:c5:bb:2c:
d1:4b:3a:c9:28:c3:b3:a6:e5:3a:1e:90:98:04:43:51:41:5a:
39:43:2a:c0:73:d6:2d:c8:7d:e2:15:0e:d6:c9:79:82:cd:6e:
c4:3d:06:8c:a7:9f:db:cc:8f:d7:05:8b:a7:c5:22:97:be:9d:
4d:fd:4e:17:76:be:52:80:42:02:ba:c1:68:63:ab:5b:d0:e9:
23:36:42:27:0e:3f:26:48:b5:73:cf:3a:a3:62:f1:3e:5a:b9:
43:a0:50:08:a1:cc:4d:05:d3:98:85:fb:1c:f5:a8:c8:ec:8d:
c4:e8:ab:56:ba:16:85:ce:4e:22:25:dd:41:94:89:b2:ba:1c:
8a:f5:94:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 14:56:11 2026 by rpki-client