Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft
File: 9shwRAz4UVUUmSVRYoEpJs9u39M.mft (raw, json)
Hash identifier: WUIw8ChQ8tPC0vfTAyKCGahO6DFgeWv+vCoHaeSt9oM=
Subject key identifier: AB:97:66:AF:31:99:0D:8D:12:72:D0:E8:6F:55:8C:86:FF:D1:C6:8D
Authority key identifier: F6:C8:70:44:0C:F8:51:55:14:99:25:51:62:81:29:26:CF:6E:DF:D3
Certificate issuer: /CN=f6c870440cf851551499255162812926cf6edfd3
Certificate serial: 019D371C09985C4C47A9993211EF2229BE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9shwRAz4UVUUmSVRYoEpJs9u39M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft
Manifest number: 92
Signing time: Sun 29 Mar 2026 01:01:17 +0000
Manifest this update: Sun 29 Mar 2026 01:01:17 +0000
Manifest next update: Mon 30 Mar 2026 01:01:17 +0000
Files and hashes: 1: 70a0Lc6K02o54FM6PX05XeuuRi8.roa (hash: PtJL+LlSx9gEGZnO3go2ShBwbA0iEFFNYQSTPl1KJgU=)
2: 9shwRAz4UVUUmSVRYoEpJs9u39M.crl (hash: 2tBHlOyxzNrij42LOeqvTAN4LQzuYRnZvzJP/lfRDuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9shwRAz4UVUUmSVRYoEpJs9u39M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1c:09:98:5c:4c:47:a9:99:32:11:ef:22:29:be:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c870440cf851551499255162812926cf6edfd3
Validity
Not Before: Mar 29 01:01:17 2026 GMT
Not After : Mar 30 01:01:17 2026 GMT
Subject: CN=ab9766af31990d8d1272d0e86f558c86ffd1c68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:ee:87:a1:7c:e0:e3:d1:ab:91:2d:90:1c:
b3:08:f2:93:d7:7b:38:4d:8f:6c:40:ad:6d:9d:1a:
33:2b:ea:5c:72:6c:9f:d2:b2:60:6b:04:ea:46:1f:
74:72:23:d2:98:5f:59:6b:10:46:bd:4b:9b:18:1d:
79:73:83:39:99:98:a1:a2:56:43:bf:0b:2d:00:45:
89:c1:67:b0:f7:27:ad:59:85:1d:af:04:37:35:bd:
91:68:01:ea:fe:4e:14:a4:44:93:50:6d:36:c4:a6:
58:d1:a7:55:6a:2c:24:26:b3:5e:86:f2:bc:07:90:
d7:5f:d8:63:aa:01:78:c1:d8:97:2f:e1:4f:0c:1a:
27:c1:53:c0:09:ee:f3:3f:b1:76:73:75:07:86:e4:
8c:93:b8:94:6d:fc:07:06:4e:cf:16:fe:34:5a:52:
58:4e:ef:5f:60:db:1d:fe:b6:eb:84:14:9c:b8:13:
68:09:92:9b:eb:d7:e4:d6:da:18:c6:10:7b:88:47:
35:eb:d0:ad:3c:a6:97:f0:4f:fe:92:39:47:e8:cd:
9e:cb:a6:cb:1f:73:65:fa:77:ee:f8:a9:a7:b0:45:
a4:50:62:5c:7e:b3:df:5c:98:98:97:9e:55:34:95:
9d:2c:6f:d1:22:2f:0b:2b:61:1d:3b:75:4e:ae:a7:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:97:66:AF:31:99:0D:8D:12:72:D0:E8:6F:55:8C:86:FF:D1:C6:8D
X509v3 Authority Key Identifier:
keyid:F6:C8:70:44:0C:F8:51:55:14:99:25:51:62:81:29:26:CF:6E:DF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9shwRAz4UVUUmSVRYoEpJs9u39M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4e:ba:91:71:a3:a2:4a:e9:ad:6b:ac:ee:1c:6f:11:8f:6c:
6f:d4:33:1e:f2:26:4c:c6:ac:e5:98:bb:db:e0:e1:55:5f:54:
90:54:55:81:8d:62:88:b3:a8:2f:38:0f:15:3f:d6:f1:bf:d0:
ae:47:e9:f9:33:bd:63:7b:6d:db:e3:4a:d5:73:bf:11:91:73:
5d:9f:12:9a:de:95:24:de:75:43:c4:65:8f:35:0a:5b:4d:6a:
bb:b7:03:bc:5f:7b:1b:67:4c:2d:45:78:74:5d:1f:3a:bf:c5:
03:bf:ba:e6:14:1a:c3:41:e5:70:b4:14:71:22:92:ed:19:d4:
a1:ca:ac:07:f5:14:d0:88:44:0c:41:aa:af:77:b8:38:26:9f:
06:7f:81:df:28:49:4f:28:bd:c3:8c:5c:80:25:23:a2:ba:54:
fa:93:38:2d:76:df:8b:17:3e:49:5d:c1:fe:27:0f:bc:ae:7a:
7e:be:8f:1c:57:3b:ed:c7:2f:ab:66:20:c4:71:6f:38:2c:db:
67:ee:e7:2a:72:0c:87:f5:79:00:2e:55:57:e4:24:14:4a:72:
c0:07:f5:17:db:d5:ac:6b:8c:b0:fd:a7:2a:45:8b:09:3f:57:
7c:5e:db:2d:34:81:5b:a7:a2:17:eb:61:4f:bf:0b:3e:fa:6a:
57:29:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:42 2026 by rpki-client