Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
File: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json)
Hash identifier: sOv0mdGdXr74li/b2If7tj+/2ON7WRGmWscmOcMwKpQ=
Subject key identifier: 86:85:A2:37:B5:71:16:C2:A8:C9:DA:A0:78:92:2C:D2:18:D3:EB:38
Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47
Certificate serial: 019D37F77500A36E8DCD65C983BE855A5D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
Manifest number: 0665
Signing time: Sun 29 Mar 2026 05:00:57 +0000
Manifest this update: Sun 29 Mar 2026 05:00:57 +0000
Manifest next update: Mon 30 Mar 2026 05:00:57 +0000
Files and hashes: 1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: glg68NvZzkr5ivVFesT1LB4b7tOOq4NNAy7JkbEYma0=)
2: e6cQAttr2HmbOlTBbjKV_2JWo0Y.roa (hash: m4yGQd55Wkn8/VNQHSMkT2U4sSayeuVDo4mzhAL262I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:75:00:a3:6e:8d:cd:65:c9:83:be:85:5a:5d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47
Validity
Not Before: Mar 29 05:00:57 2026 GMT
Not After : Mar 30 05:00:57 2026 GMT
Subject: CN=8685a237b57116c2a8c9daa078922cd218d3eb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:75:01:2f:d3:95:2e:c4:19:e4:67:5b:e6:
59:e3:a8:27:b5:a5:ab:d1:7e:6d:d6:ee:8b:98:80:
a1:96:67:ed:23:e6:19:5a:9e:32:c5:7a:ea:85:1d:
d4:f5:23:9f:8b:5a:d7:ef:18:65:f2:ec:06:b7:ae:
44:ec:32:87:c0:87:f2:5d:fb:18:26:fe:91:5f:16:
37:8d:38:73:48:13:b9:8d:7c:06:ce:63:0e:52:3d:
8f:93:57:84:fe:37:d0:3b:cc:85:f9:70:4e:f9:6c:
20:94:f5:73:f8:ff:9e:a2:2b:76:9f:80:b4:da:25:
53:31:50:7f:65:b4:f2:ad:ac:5f:1b:45:15:ed:38:
3a:d1:84:be:ff:8c:9e:5a:2c:55:91:b0:3f:32:50:
41:60:52:a8:ed:e5:77:5d:ff:07:94:13:ba:d0:fa:
06:21:f8:dc:23:59:14:cf:03:5d:9a:32:56:19:e0:
0c:38:2e:74:21:b4:a5:e1:56:23:cd:81:3e:fb:4b:
34:df:bb:4c:50:e7:50:fe:c8:b4:76:20:e9:13:59:
b7:11:3b:bf:63:8a:db:5c:1a:e9:93:8b:f1:e6:43:
18:ea:19:f0:95:9e:41:ea:3f:78:14:bd:e7:9a:c2:
d2:eb:7a:1e:0f:17:0c:62:25:bf:55:18:c7:a7:5a:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:85:A2:37:B5:71:16:C2:A8:C9:DA:A0:78:92:2C:D2:18:D3:EB:38
X509v3 Authority Key Identifier:
keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:43:4f:b5:23:ad:58:b9:34:46:ad:6f:b1:0f:0c:fe:34:ca:
5d:3b:e1:2f:37:90:12:fa:36:2d:3c:cd:29:65:e9:00:07:e1:
0a:4e:b7:b1:9e:df:e5:1f:d8:0b:78:7e:0f:5b:5a:e6:3e:e5:
14:48:3e:d6:ff:a4:f2:a2:c4:6e:c3:d7:1d:2e:87:dc:39:3e:
d8:8f:7f:58:94:48:cb:33:a4:70:5e:e7:a7:78:39:5f:31:62:
24:95:38:b7:ac:01:45:a6:e3:2b:13:c0:a6:f0:aa:e8:e1:3b:
61:c1:f2:e0:1c:bd:bf:43:0f:ac:db:cc:a3:ca:ce:82:4a:0f:
ac:60:5d:b4:bb:77:d5:cd:ba:13:6a:f0:c0:8a:72:e8:8f:52:
b2:c1:6d:07:99:26:ca:d4:57:38:a0:8e:50:a6:6a:a7:54:b5:
88:e5:40:33:33:ec:cd:ba:c3:f1:ac:ab:12:37:27:d8:db:79:
c9:7f:b0:4e:ce:e6:3b:f9:a2:9a:be:b8:93:7e:ca:32:a9:e8:
0b:83:0c:d5:75:c8:1c:eb:f0:38:c3:8e:8f:71:a0:04:9d:cb:
fa:97:87:89:eb:2c:bc:76:ae:72:c9:bd:2e:7f:07:9e:b5:74:
1e:93:98:10:99:6a:70:42:9f:0d:dc:ea:9e:d1:1e:38:81:af:
d1:80:68:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:21 2026 by rpki-client