Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
File: 9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json)
Hash identifier: 1D6jZT8wch+P26hvpMhmmRnX/MbLRr2V57ou9fe6WUE=
Subject key identifier: 65:30:7E:00:83:49:77:E6:5F:BD:1A:75:30:47:CA:77:1F:D2:25:D5
Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
Certificate issuer: /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Certificate serial: 019D3789C97CB50BC49E98ECA53FF5A8CFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
Manifest number: 0B89
Signing time: Sun 29 Mar 2026 03:01:09 +0000
Manifest this update: Sun 29 Mar 2026 03:01:09 +0000
Manifest next update: Mon 30 Mar 2026 03:01:09 +0000
Files and hashes: 1: 99vNYm11Abb46yGkbIvnhElSUKk.roa (hash: kaM8j0/7vV6OtesnBvSal75AKpJWv23ajsp4aKhWL4M=)
2: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: KJQzhIrqwZs4O84+zQkBjm/Wtl/ZDBla6NB1okJN5zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:c9:7c:b5:0b:c4:9e:98:ec:a5:3f:f5:a8:cf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Validity
Not Before: Mar 29 03:01:09 2026 GMT
Not After : Mar 30 03:01:09 2026 GMT
Subject: CN=65307e00834977e65fbd1a753047ca771fd225d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:f4:94:d2:54:1b:19:57:66:d0:e4:18:33:
af:a9:0b:88:94:b9:20:64:6f:48:cc:bf:2d:73:a4:
69:a2:13:ee:54:ee:80:86:fe:a4:63:2c:17:54:bd:
dd:c0:3e:96:2e:9b:e2:45:9a:eb:9f:d6:e5:e4:80:
fa:c3:29:2e:d1:6b:fc:15:5e:28:9a:44:9e:4b:c5:
2c:25:70:06:00:ed:14:d6:4c:07:d6:a9:ca:78:e2:
e8:bf:af:e1:a8:c8:af:1b:37:b3:9d:90:82:a1:9d:
b7:73:a2:b2:d9:e4:a6:4f:83:cd:c9:f0:7c:2b:d8:
a0:5c:e6:c6:b6:9d:91:0f:c4:a4:0a:c6:c4:12:1c:
64:ac:db:ab:e7:29:e6:d4:de:49:84:2e:91:b4:77:
6b:a1:6e:80:a4:12:7b:cf:6f:61:ee:74:ea:88:ef:
b9:28:87:f1:cb:33:66:57:8e:e7:8f:6a:ad:c1:cc:
ea:30:48:90:fb:3c:09:bc:8f:8c:50:02:a7:d0:bf:
75:7d:22:0a:f3:fa:32:d5:0d:cd:7a:7b:f0:20:23:
1d:9a:51:8e:57:5e:52:2f:90:74:b0:a4:c8:62:f4:
2b:87:1d:44:11:f1:ee:bf:76:a6:e6:93:0c:e3:c5:
b9:53:c8:2f:ff:fa:6d:35:3e:28:44:41:5f:4f:f4:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:30:7E:00:83:49:77:E6:5F:BD:1A:75:30:47:CA:77:1F:D2:25:D5
X509v3 Authority Key Identifier:
keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:21:7f:7c:e0:ba:82:2f:52:0f:2b:a6:a2:dd:87:24:44:a3:
55:1a:95:fa:f3:27:ea:dc:94:ee:7c:e5:a0:16:40:e7:9e:85:
4b:1a:17:e9:3a:e7:de:2c:0f:fe:51:7e:4c:72:fb:e1:bd:11:
ea:1c:bf:fa:63:a7:52:a1:5a:ba:cb:18:7a:00:4d:b8:2f:a7:
2f:67:2f:1f:fb:74:54:f9:d1:42:64:84:5f:97:f2:89:e6:de:
cc:6a:09:39:f5:16:08:b7:de:2d:c7:79:7f:03:20:a2:0e:b2:
b6:9c:b6:66:a4:9d:19:29:23:11:ec:cc:53:9b:77:04:41:10:
4f:c0:c7:d1:7a:49:f4:30:7e:13:2c:48:71:56:a5:e5:b4:32:
84:fe:04:1f:ea:90:af:d1:76:ab:ea:dc:ec:0c:d8:22:63:74:
b2:6b:2a:de:06:4b:13:65:85:ff:4e:61:f2:ec:cb:52:9d:81:
0e:f1:14:4f:3e:34:f4:44:bb:d1:ad:38:7f:e6:39:e7:37:79:
08:23:dc:d3:cb:ca:ca:1e:22:8a:b7:57:82:75:7d:ba:ce:79:
6b:88:14:51:04:32:fc:c6:1c:a2:0f:31:d0:45:8e:3b:b0:15:
36:08:12:ad:d6:b8:96:a4:52:eb:17:e9:a1:b5:b1:8a:83:12:
b0:af:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:56 2026 by rpki-client