Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File: 9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier: ChuDPCd9u27Jbr2qY70xKjfFyoDodIlsbjYqwtM0MYI=
Subject key identifier: 83:BA:90:86:E1:D9:8D:C7:C8:0D:96:98:F9:39:B8:45:C8:C9:E8:A0
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 019D38D2E2C180F74BB36F9D5B840EC692EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 09:00:37 +0000
Manifest this update: Sun 29 Mar 2026 09:00:37 +0000
Manifest next update: Mon 30 Mar 2026 09:00:37 +0000
Files and hashes: 1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: t3J41PueJgpAU+hmmheqUCYuailwKCGfCYmNGblP/yk=)
2: kemm2WFFjUfdfPOT05bIGh6Qr8U.roa (hash: KeQbE1A9fOz9QJdCPRsOfpL6c34Chbb6zODaWyyEB6c=)
3: q322xaSHMZx1k4xaVe30RdNBWuo.roa (hash: DQXWLyhzw4r+tbYvkotbpHRusQgaYcOI5F7MnlMraO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e2:c1:80:f7:4b:b3:6f:9d:5b:84:0e:c6:92:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Mar 29 09:00:37 2026 GMT
Not After : Mar 30 09:00:37 2026 GMT
Subject: CN=83ba9086e1d98dc7c80d9698f939b845c8c9e8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:3e:71:e0:ed:08:0e:7c:3d:57:e7:40:03:
82:a6:1a:71:bd:a4:b2:8e:01:ed:49:08:ba:5a:95:
39:08:81:3f:12:9a:2f:b5:25:5a:8e:3b:d4:bd:2e:
74:8f:83:b1:67:61:e9:14:0b:43:9e:87:c9:d0:4a:
95:f2:ce:1b:36:38:5a:e7:f4:c4:91:8a:6c:ee:f7:
b6:21:87:e7:73:d0:7c:bd:a3:c7:df:bb:96:48:64:
3b:5c:d2:ea:e5:5e:dc:dc:74:e9:d6:8b:28:83:17:
4d:61:78:00:e0:33:70:fa:ee:73:eb:0f:31:79:77:
10:02:a5:c9:ac:04:22:e2:ea:9a:6f:76:6e:a0:27:
da:4a:b7:15:8b:ee:51:06:6a:d9:16:34:40:e5:ee:
98:3e:2d:bb:94:54:df:82:3a:3b:a5:04:2c:da:58:
88:b5:55:a1:b7:84:dd:57:91:03:f9:50:2c:36:be:
8a:67:7b:d6:82:a4:7a:05:c8:0c:21:2f:15:0d:0a:
53:fa:f8:0e:36:85:83:d8:20:7d:18:94:e6:ac:a0:
64:73:26:47:5e:97:11:27:67:11:a4:d9:17:a6:92:
93:7e:10:5f:8b:28:bc:23:48:a5:cc:d6:74:e4:bf:
e3:32:42:37:32:fb:ca:58:cf:a4:f1:01:49:c9:2a:
48:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BA:90:86:E1:D9:8D:C7:C8:0D:96:98:F9:39:B8:45:C8:C9:E8:A0
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:68:8f:13:c3:09:60:0c:62:18:3e:26:f9:a3:45:87:1b:f8:
bc:8e:d2:c1:5a:04:da:37:b3:fa:35:6b:42:e0:3d:45:e9:c3:
c4:df:a0:fa:42:df:d6:b0:15:dd:35:4f:ca:c7:70:e7:a0:9c:
0b:81:e3:33:2f:de:73:68:36:81:33:83:fb:cb:41:d5:3e:8c:
01:29:41:a5:7d:88:4e:ac:e9:f2:d2:40:2f:1b:6a:79:b1:5f:
3b:db:25:4d:10:92:e3:5d:b2:d6:45:91:87:a9:d7:98:79:2a:
1b:04:e7:75:2f:61:10:26:5c:7c:cc:1b:4e:60:50:7d:7d:a5:
04:26:e0:78:c9:94:63:7e:e7:c0:89:9d:eb:5a:c4:56:9d:ba:
52:74:2b:66:13:8d:98:ad:ca:e2:0c:a7:61:9a:f3:7e:45:f8:
a5:a7:0b:48:a1:4c:d4:98:02:3c:f1:a5:b8:07:dd:c4:dd:b1:
e3:1c:c1:5d:ff:83:e8:27:eb:c8:b7:61:ae:45:8e:1a:71:61:
84:08:81:da:4e:70:da:0d:67:1c:da:6e:bf:4d:2f:83:5c:ad:
bf:91:88:33:28:47:61:ab:c5:73:8e:8b:57:8f:29:59:3c:2c:
1e:7e:93:1a:70:de:a9:bb:96:35:f2:45:3a:4c:e6:96:ba:c2:
69:36:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:31 2026 by rpki-client