Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: viRlvto72OrE7M/HSJyKYYj4LJGaiZtHxorbXrA0WjI=
Subject key identifier: C7:22:32:9D:EA:FD:98:72:42:24:3E:68:06:E3:87:75:3C:45:9B:22
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 019D3A5467B95D79E2FCAF3F79E0B6DC4F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 16:01:43 +0000
Manifest this update: Sun 29 Mar 2026 16:01:43 +0000
Manifest next update: Mon 30 Mar 2026 16:01:43 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: /F0ytQCpQmAHwXgsyBEXtBqdNiN9cKhBBCAJEV/1wkU=)
2: MYsq3VI7S6Tys8tH6kZ55isv4aM.roa (hash: nLJu9Ca3UL28v4nK9lRnWd7XxYbaE6zulNTp5ZAXAYk=)
3: q_ccM_3Nsf3YIqRvSxwp7j28WKA.roa (hash: bQAdrUPOpax3Tea6DtDpoS5dYyAQRIvDyf7eum/Y1dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:67:b9:5d:79:e2:fc:af:3f:79:e0:b6:dc:4f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Mar 29 16:01:43 2026 GMT
Not After : Mar 30 16:01:43 2026 GMT
Subject: CN=c722329deafd987242243e6806e387753c459b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:68:d9:cd:d3:8b:31:ea:9c:50:8f:39:4c:
49:c2:ec:b7:52:5d:27:5b:ed:7a:f9:f9:13:4c:11:
79:49:57:f1:a9:9a:51:50:92:ba:83:e9:9c:cf:ff:
ab:00:1e:c0:7c:46:2e:f3:78:ea:95:11:30:fe:7c:
d0:7f:94:a0:aa:64:1c:cd:a0:d2:d4:95:18:23:57:
6c:ae:33:08:08:97:28:25:ca:c7:d9:7e:6c:a3:6f:
18:44:fd:fe:ee:7e:ae:3c:07:6b:8d:73:08:0d:47:
4b:06:5b:e2:06:4a:96:a8:74:1a:df:ea:05:a7:0a:
bc:d6:89:81:f2:b8:75:54:20:55:8f:de:56:66:3a:
06:5a:76:4c:c7:b0:71:55:97:1c:d3:9a:5d:b2:ad:
0e:66:0c:a7:3d:12:18:23:87:50:20:ae:13:4c:1a:
1a:5f:dd:b4:16:99:9b:d1:2c:d2:e6:a8:c5:64:d0:
b9:36:89:b4:61:33:da:05:7d:fc:c0:11:b8:54:88:
84:78:1a:4b:5b:73:6d:69:68:f6:0e:1e:1f:6c:69:
bf:3e:8c:dc:23:32:ff:27:fd:7f:3b:70:70:9f:3f:
03:19:14:44:16:70:8e:d8:bc:88:33:d2:87:aa:21:
9c:b3:16:39:29:c1:9a:71:89:fc:37:85:c5:27:3f:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:22:32:9D:EA:FD:98:72:42:24:3E:68:06:E3:87:75:3C:45:9B:22
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9b:a9:7e:a5:24:c0:3f:32:4b:14:86:b9:c6:9d:02:06:09:
11:0c:9d:aa:74:1f:f1:c5:42:72:84:57:67:53:7d:2a:b2:07:
2f:f3:ea:6c:8d:72:3b:ba:b3:4c:cc:db:d2:6c:3b:13:43:64:
d7:42:c5:1b:24:17:42:f7:a5:53:5e:b3:3b:15:d2:a4:84:35:
54:f1:fd:bb:cd:0c:4a:4e:ee:f1:bd:11:d9:b0:09:2c:6d:ea:
62:6f:21:3a:c2:b7:6b:cf:77:2b:69:1d:37:b6:90:9e:c0:3c:
5d:be:bb:d9:5f:15:c6:a2:d4:5b:ad:f2:c9:0d:43:8f:e6:a9:
d7:e8:4e:58:6b:16:89:a6:9c:10:ed:fc:95:47:76:8d:e8:ab:
a0:1d:ac:2a:f1:c3:fd:a6:07:3b:aa:1d:08:1c:3f:7f:8f:a3:
b7:9a:1f:a9:88:9a:86:0d:ba:f9:62:07:58:6e:6f:4f:36:bd:
0a:d6:c7:76:08:ad:9c:51:9a:68:f0:4f:e1:70:bf:b9:0f:b5:
57:62:bf:d1:72:61:ab:87:38:8d:09:e9:53:af:ec:47:f0:52:
a5:ad:69:17:c2:c7:5f:81:a7:33:57:39:16:62:dc:c8:b6:ae:
23:e6:a1:f3:15:3a:14:2c:a6:46:22:99:8b:bf:a6:a2:bf:b3:
74:3b:9e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:03 2026 by rpki-client