Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: fbvYR85BZ6V63VmcR76o8igLQcAYw5yLN35jwMpGBaU=
Subject key identifier: D7:69:19:D8:C2:8E:BB:B7:CD:94:E8:78:AC:87:45:9E:9C:19:EE:79
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019D382E0C5F620DFD4027B48CB15DC2AB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0A0B
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: mC656UXjpL7IF72tWxfWdDup3LTxNVYZuzjAXt/yjOQ=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0c:5f:62:0d:fd:40:27:b4:8c:b1:5d:c2:ab:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=d76919d8c28ebbb7cd94e878ac87459e9c19ee79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a1:07:72:47:63:0e:c6:0d:aa:cc:fc:a2:42:
2f:81:04:9b:de:15:2d:0f:a1:23:27:cc:ca:e8:8e:
8b:90:0f:3f:8c:6b:32:d0:05:b1:a1:80:a7:a3:cd:
a2:f0:d7:08:11:51:fe:c7:8b:c2:39:87:2c:8b:e9:
f9:1c:69:c0:a4:55:01:57:47:5c:8e:db:69:43:3f:
c6:32:3d:53:27:2d:a0:4c:e3:28:ce:fa:b8:49:a1:
88:67:55:4d:9e:71:73:c4:56:17:d6:ad:a2:00:f9:
d2:2d:60:c7:58:1e:79:fb:da:71:a4:0c:ae:90:ef:
45:1c:c4:09:50:67:45:4b:80:21:74:e6:b1:f3:5a:
b3:72:60:79:46:04:ad:21:29:b0:e9:6c:22:46:c3:
e5:80:04:f7:b7:09:d1:4b:00:67:02:b7:7e:1f:f2:
66:59:09:5b:16:a0:f7:90:5c:26:7e:8e:95:53:b5:
f7:cf:1b:93:96:fd:26:70:af:b6:92:c4:52:0f:b4:
65:4b:d6:e9:1d:96:b7:9a:53:79:08:8f:d6:9d:65:
cf:62:90:c0:46:52:80:fe:64:26:0f:30:fe:27:74:
dd:66:8a:b8:61:95:51:4d:22:38:29:c5:d9:99:43:
75:c9:11:2b:f9:e6:9b:82:16:4a:e8:73:f6:6e:4d:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:69:19:D8:C2:8E:BB:B7:CD:94:E8:78:AC:87:45:9E:9C:19:EE:79
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e6:37:14:bc:a1:e1:8a:21:b1:2c:6b:cf:08:24:97:ca:ed:
9e:5a:3d:2c:8d:0f:86:62:71:e6:b8:b2:f4:ac:7a:43:e5:02:
5b:8a:a2:9f:f1:92:70:4b:87:a2:56:c6:10:ad:4e:30:45:fc:
3c:2f:3f:8a:d7:ce:b4:86:57:f0:f7:17:b6:0d:a6:66:b1:9b:
e3:84:58:4e:ca:77:74:8f:7b:9a:84:44:c7:9c:68:bb:2e:4e:
d8:55:27:06:74:ab:c3:db:32:ca:fd:a6:22:b6:6e:d9:1e:75:
f8:d5:c1:2b:71:72:bc:fe:7e:12:35:70:b1:16:b9:8b:fb:a2:
40:dd:9d:f8:c2:07:6d:b7:f8:77:2b:f6:55:16:28:bd:a3:15:
07:29:1f:52:f3:c5:ce:f1:3d:b2:6c:5d:8e:7d:60:10:c7:74:
32:93:14:f8:0e:dc:e7:c2:ac:39:30:ec:9b:99:b0:e1:a5:64:
ed:c9:11:6a:9f:0c:d1:d1:c3:d5:30:c0:be:7c:0a:fc:38:7a:
e5:02:ba:fa:62:3e:3d:6d:0c:e7:b1:6e:cc:ed:90:ec:5b:60:
a1:56:44:ee:33:67:0d:c9:9a:ce:a6:c8:ad:2d:a9:e8:0f:32:
3a:a9:29:76:5e:e1:14:98:aa:69:c3:fb:67:a9:d0:db:93:29:
9a:7c:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:56 2026 by rpki-client