Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: gPKYN4K0+DSUhgxxCwK/vf43TImAfnE9rPx+7UQ3cr8=
Subject key identifier: FA:40:BA:60:5B:39:32:3D:76:2C:F7:D2:27:B0:43:39:69:02:BC:15
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 019D1CB8091FE71846537A3ED8CB95D9EA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 04EF
Signing time: Mon 23 Mar 2026 22:01:56 +0000
Manifest this update: Mon 23 Mar 2026 22:01:56 +0000
Manifest next update: Tue 24 Mar 2026 22:01:56 +0000
Files and hashes: 1: 682zs4Hcg3A9tAlB0aIHnZEDnoM.roa (hash: C08P14YIy9ohegdz9OY/EiQStApMK1bKQ9gOr6T/J5E=)
2: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: nhkX7ivCQkHrV4csMonU3Hffaa6nk49iH8Egh5Lf8L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:b8:09:1f:e7:18:46:53:7a:3e:d8:cb:95:d9:ea:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Mar 23 22:01:56 2026 GMT
Not After : Mar 24 22:01:56 2026 GMT
Subject: CN=fa40ba605b39323d762cf7d227b043396902bc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:c2:a3:a4:b7:14:68:86:2c:ac:4a:e1:5a:
ad:8f:7e:36:eb:2f:34:a4:a3:4c:dd:53:99:2d:7f:
3f:82:1f:28:5a:51:3c:f1:cb:1e:c3:fa:df:53:8c:
32:8d:78:78:a8:2c:1f:60:d3:9a:a6:1b:93:e4:7e:
a9:fa:a6:59:37:7a:c3:4c:48:5a:0d:7f:ae:62:80:
a5:56:f1:ce:be:99:38:cf:24:0e:9c:d0:bc:1a:c9:
2d:1a:00:35:0d:e4:2e:15:06:af:1c:17:64:da:63:
5f:bb:10:f7:ba:32:88:55:ba:d8:5c:84:f4:84:e4:
c0:7f:34:26:40:1e:8f:be:7b:81:59:59:1f:15:9f:
ae:19:b7:c4:16:ca:43:ec:e9:0b:ff:84:dc:2d:3c:
9e:db:dd:ec:e7:70:92:51:6e:61:60:be:4a:c7:ca:
dd:56:9b:8f:fa:ba:af:58:8e:34:68:3b:61:57:77:
37:d5:60:85:32:6a:9f:f2:96:31:3d:6d:1d:46:01:
50:84:dd:bd:9c:4a:a7:9c:f5:2a:5a:93:75:76:ce:
93:cd:d8:64:a8:79:92:f9:7f:2e:3f:0b:1e:64:61:
4a:9d:d5:7f:2c:09:5e:d9:79:2f:3a:8a:29:72:ea:
d4:e1:90:b9:5d:8a:a3:05:1c:f7:7b:49:11:dd:2a:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:40:BA:60:5B:39:32:3D:76:2C:F7:D2:27:B0:43:39:69:02:BC:15
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3d:72:fe:0f:af:90:b8:76:25:16:30:e9:8e:ea:39:97:c7:
ef:13:d6:1e:3c:8c:d4:f5:8e:8f:4a:04:83:66:78:c8:fc:e8:
63:4f:8b:7b:ca:99:54:66:d8:91:64:4d:9e:64:2e:bc:4a:13:
4a:99:cc:d0:c8:c4:45:5b:d5:be:63:f2:6d:60:9d:ec:aa:54:
2c:b3:c7:f2:50:bb:c2:83:ed:f8:8f:39:00:ad:66:89:0d:08:
3c:fb:82:1b:cb:4e:08:02:7c:b8:bb:1b:fc:85:3b:8c:66:9d:
cd:9c:99:b5:37:5e:87:06:0e:2b:05:ff:e6:24:9a:91:cc:3f:
66:ff:73:b6:7d:6f:6c:0d:b1:ef:31:5a:71:03:57:55:82:73:
73:95:f7:45:a4:45:03:04:a4:23:82:75:ed:5a:fd:16:68:9a:
e5:d0:24:7d:6f:df:d7:4d:c1:f1:43:d5:18:64:f3:49:20:bc:
df:7b:8d:75:63:b4:b8:20:12:f7:7f:75:b7:76:8c:50:d2:2a:
d3:f6:99:87:0d:55:3d:cf:a2:ed:bc:5c:45:f0:8a:6b:a7:6b:
0a:d0:b2:6b:4b:5e:c6:15:67:ad:ff:f3:69:5e:15:10:02:7e:
e4:9c:ed:64:be:a4:b2:64:12:ff:a9:47:a0:33:da:d6:a2:82:
1c:72:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 03:58:24 2026 by rpki-client