Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: MLdg1/oVUjm/KZaZI4JCtDs074lX0S57yRk+4BBHF/s=
Subject key identifier: 55:71:8C:8E:1C:A0:E6:23:34:B7:EE:2F:2E:42:D8:B3:37:E4:C6:58
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019D39E59040A9B98DD5DDC3820D4385622D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0BF9
Signing time: Sun 29 Mar 2026 14:00:39 +0000
Manifest this update: Sun 29 Mar 2026 14:00:39 +0000
Manifest next update: Mon 30 Mar 2026 14:00:39 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: T3oNrf/ueGKBXlNzc0hR1GLt3TZdHh7OsUR4OSWsE88=)
2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:90:40:a9:b9:8d:d5:dd:c3:82:0d:43:85:62:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Mar 29 14:00:39 2026 GMT
Not After : Mar 30 14:00:39 2026 GMT
Subject: CN=55718c8e1ca0e62334b7ee2f2e42d8b337e4c658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:f8:ec:69:c8:bb:8a:5c:93:30:e5:ae:91:
0b:0f:4d:27:2e:5f:33:06:0d:72:32:2c:0b:f6:d4:
90:4a:e8:90:51:59:c4:8b:95:d7:b3:bf:bf:7b:9c:
69:35:09:9a:8b:23:a6:1a:16:d5:21:4c:94:3e:18:
a9:28:95:d8:d5:6c:11:67:34:c1:84:ff:77:7d:d4:
5b:a1:9a:8d:50:4f:e1:f2:e8:3c:c5:b8:95:fe:03:
57:cc:81:34:90:de:cd:7d:cc:62:34:29:10:64:28:
53:2d:6e:84:f8:c7:b6:db:b5:3e:dd:64:c2:13:8a:
a5:ca:86:97:b0:6d:58:e7:8b:e0:af:b4:4d:e9:6b:
31:f2:44:a6:33:93:15:df:de:07:f3:6b:86:29:b0:
8c:71:9e:af:c0:84:28:4c:ca:91:56:c5:90:e5:ec:
04:72:e0:32:47:4f:1d:d7:7f:c0:97:a9:42:49:fa:
30:49:f5:e6:e6:5f:84:57:20:5d:80:d3:2a:c3:79:
e2:09:d0:cd:29:d7:54:47:d5:6a:ab:ba:36:8b:07:
57:72:d0:75:fd:d9:22:a0:be:77:ba:66:af:6c:1e:
2f:74:01:d4:bf:2d:82:3d:0a:3b:e3:e8:3e:33:6d:
60:79:d3:17:a2:c9:e1:cc:0d:e0:2c:b9:4b:75:16:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:71:8C:8E:1C:A0:E6:23:34:B7:EE:2F:2E:42:D8:B3:37:E4:C6:58
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:86:85:9f:a1:e4:e0:e0:fe:27:50:74:5b:4f:f2:a0:f5:7c:
7c:fb:1d:8b:43:cf:ca:04:13:3e:ea:67:30:d8:0e:55:73:3a:
9a:9c:95:32:47:ba:50:97:1a:7f:b0:ca:68:27:20:37:43:a7:
8c:d1:43:62:f2:c8:f2:8e:c1:4e:66:cb:64:59:a0:bc:bb:a0:
71:a7:3a:99:51:81:0e:2f:d5:ae:99:39:6e:ec:99:c4:0c:a5:
dd:4b:dd:56:e6:8e:ef:23:c1:d9:3e:74:3f:82:8a:ab:1c:c8:
20:97:df:c9:e3:35:84:63:51:77:db:30:dc:f1:3b:4e:3b:f5:
e6:f9:ae:0b:16:bb:96:de:f2:7c:67:b1:53:93:45:83:e6:89:
54:b1:01:be:d8:fc:dc:fe:7b:d3:48:79:d7:7b:10:f1:ca:72:
0b:34:3d:a6:67:8b:20:75:ce:95:6b:b3:12:1b:44:bd:40:4b:
b6:9b:a4:5b:fc:f7:4a:5d:e7:13:46:e7:bc:e7:b6:6a:10:cc:
e7:02:0e:1a:d1:b1:8b:a1:cb:0c:b7:15:4a:bc:28:bd:b2:ad:
93:40:eb:ba:0a:01:c7:e9:c4:7e:ea:77:2f:ca:ce:48:98:e5:
a1:d9:dd:91:08:64:31:e9:1d:fc:ec:f8:e9:d2:84:01:c5:a7:
ca:d2:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:04:44 2026 by rpki-client