Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
File: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft (raw, json)
Hash identifier: 3zUNa2eg8YkwBMFKQiQm+wQOh6PX7Oks+2B+dlSgaEs=
Subject key identifier: A1:A7:FB:D4:87:B8:49:11:F0:34:67:13:AB:36:67:60:7C:BC:BC:60
Authority key identifier: F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
Certificate issuer: /CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Certificate serial: 019D38667F35173076AE76B74CAA24BEA5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
Manifest number: 043A
Signing time: Sun 29 Mar 2026 07:02:14 +0000
Manifest this update: Sun 29 Mar 2026 07:02:14 +0000
Manifest next update: Mon 30 Mar 2026 07:02:14 +0000
Files and hashes: 1: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl (hash: m72ir+wjuj4PW95u/VeSUo5bqtfjZHcySPmMqFuR6Kw=)
2: JXm4LWXIpBMGqgHbvgoYihKzBVk.roa (hash: 5kQxFCRpZBFMUqQXhqZK+G8qNHh71Y8GlKTBlJe50XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7f:35:17:30:76:ae:76:b7:4c:aa:24:be:a5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Validity
Not Before: Mar 29 07:02:14 2026 GMT
Not After : Mar 30 07:02:14 2026 GMT
Subject: CN=a1a7fbd487b84911f0346713ab3667607cbcbc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:b2:af:16:e6:db:74:3c:0d:49:82:e7:ea:
51:e1:65:47:4b:92:f8:51:3f:7b:ee:08:2c:19:7a:
de:b3:95:3a:7f:86:ab:83:87:65:bc:c2:37:c1:eb:
24:c2:73:cf:98:2b:1a:f2:6b:cb:6f:35:6d:b2:63:
00:ac:d2:bd:ab:9a:a3:ff:92:6d:a0:0b:4c:d3:6c:
36:14:10:ba:94:f2:c6:28:cc:3a:58:c9:2a:61:cf:
41:dc:09:38:d3:e6:7e:a8:ab:03:3e:96:81:a0:76:
c4:62:e1:ea:99:eb:8d:8c:b9:5d:87:cd:94:51:8b:
13:c6:27:7f:e8:02:94:2c:91:cc:11:41:9c:74:31:
29:18:0e:16:3d:e1:a2:f0:71:5d:0b:99:e3:b5:68:
ee:da:7f:d3:be:a9:08:dc:3e:50:7b:c8:7d:00:cf:
a3:7e:5a:79:71:b4:4f:16:da:98:f8:be:ed:20:d4:
46:10:20:b7:ad:45:29:88:82:f9:6a:c6:11:23:ca:
cf:e6:b2:61:c8:b0:1b:2d:4e:2e:43:64:6b:2a:fd:
73:43:c0:a7:4e:6f:43:5d:e9:a8:f2:df:0a:32:10:
79:1f:f2:5c:fe:b6:36:2e:2c:fb:8f:3e:4c:2a:1f:
bf:e5:8f:74:a6:51:47:b2:68:5e:1c:a6:35:c5:f1:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A7:FB:D4:87:B8:49:11:F0:34:67:13:AB:36:67:60:7C:BC:BC:60
X509v3 Authority Key Identifier:
keyid:F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d7:e6:58:27:30:3b:a6:c8:f7:af:d7:c0:c5:a1:b8:61:17:
3a:0d:ab:09:9f:33:ad:c9:c0:67:53:5c:76:12:57:da:7c:f9:
d9:bc:9d:19:9a:93:8c:f1:9c:59:dd:e2:25:4e:d3:d9:1c:df:
75:99:ff:8c:4b:53:94:c4:51:91:42:ba:cf:7b:25:81:b5:9d:
75:8e:fe:89:a0:d3:7a:3f:2c:ab:b1:9e:10:a6:55:ad:c0:3a:
7c:7a:18:c0:28:0a:77:f8:b7:90:84:84:2d:7d:01:52:9d:b0:
71:64:45:6f:57:e1:1a:2b:e4:79:bc:ca:63:29:dc:7d:b9:26:
ec:dd:d3:ce:85:20:cf:f1:f9:dd:b3:de:e0:60:3a:c3:d3:80:
8c:ae:a6:ee:bf:eb:4a:da:92:19:b5:76:7b:9b:30:0d:63:bb:
a6:18:7f:54:df:ea:37:15:1b:a4:c6:5b:2d:a8:17:8d:c4:9a:
9e:2a:06:dc:34:0b:4c:37:1b:04:96:8c:28:30:7f:a4:cd:ef:
94:6c:d1:45:37:ea:4b:bc:b9:8c:30:a0:0e:9f:1b:5e:30:23:
05:40:f3:e6:92:d6:b6:5e:1a:70:b0:5f:2b:76:e8:13:70:30:
87:7e:50:4a:58:94:5a:a8:f4:90:e0:18:d1:64:ed:6d:21:3b:
f4:79:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:12:42 2026 by rpki-client