Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier: P1k6Cio1DXg4aAwm07AzW1rlX6YHDc4iL5KwGmL2GKY=
Subject key identifier: 39:1B:09:83:F4:7D:DF:FC:9A:5D:2E:CF:65:BE:D2:63:1E:13:06:49
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial: 019D386683407514E04263DA9CDC168BCEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number: 06FC
Signing time: Sun 29 Mar 2026 07:02:15 +0000
Manifest this update: Sun 29 Mar 2026 07:02:15 +0000
Manifest next update: Mon 30 Mar 2026 07:02:15 +0000
Files and hashes: 1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: a1VN1f+zX1kYnffCQ/VPPb69JLl1eyjB0XeJWDXtLlM=)
2: b1tEVuM57ah52OvUq3Fvdd-4XkA.roa (hash: Odyf//1QBuLxW+qHnAmLWghjISD9y11hRldd+HjGtOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:83:40:75:14:e0:42:63:da:9c:dc:16:8b:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Validity
Not Before: Mar 29 07:02:15 2026 GMT
Not After : Mar 30 07:02:15 2026 GMT
Subject: CN=391b0983f47ddffc9a5d2ecf65bed2631e130649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:51:97:99:31:28:b4:1d:23:e0:f2:df:5d:
f9:8f:f5:e5:66:b7:5f:51:35:a7:04:ef:93:a5:1a:
e4:ee:a1:34:94:87:bc:94:f6:18:d7:0e:ca:67:b0:
23:f6:a9:01:82:39:6e:f6:83:ab:4d:0a:47:09:c7:
4c:c4:65:ab:ae:a4:f7:e7:ae:3b:af:0e:1b:7d:d9:
0b:83:b0:e6:ea:5e:2d:33:73:ff:e1:73:d1:b0:e7:
ea:f4:69:66:19:8d:b6:65:f7:3d:a3:1d:38:1b:97:
8a:af:3a:de:78:97:d2:ec:25:7e:3a:82:b7:30:6b:
52:f2:61:62:0b:14:ff:7d:5a:2a:c1:06:0d:a6:3c:
32:57:da:70:76:38:1b:a3:da:64:b4:a9:f8:81:57:
b1:67:77:0a:86:e9:0c:65:11:6d:9d:16:b6:4f:2a:
97:18:0f:3c:c5:dc:34:10:14:2a:3d:87:33:5a:45:
14:b2:6f:de:5d:6c:cd:93:3c:d1:55:23:a7:2f:3f:
0d:6e:3f:ea:39:2b:ba:9d:7c:53:df:74:05:59:0c:
c4:5b:e9:86:ac:7b:5c:1c:3b:d1:64:54:20:76:1e:
04:f6:9a:f4:0a:e6:53:ac:0d:02:79:0f:e8:b3:2b:
5f:bd:5e:14:6b:60:10:dc:e5:ef:52:bc:74:06:df:
1c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1B:09:83:F4:7D:DF:FC:9A:5D:2E:CF:65:BE:D2:63:1E:13:06:49
X509v3 Authority Key Identifier:
keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3f:87:48:f6:b0:b8:f7:f3:77:9a:03:ff:3a:ec:59:29:8e:
82:43:58:e7:26:18:c3:e8:1c:b5:90:0d:5a:32:65:e3:76:54:
54:34:28:df:83:30:43:b0:89:14:29:df:39:07:a5:29:6d:81:
27:d0:fc:58:a1:1c:01:6a:1e:a7:a0:b3:9f:49:28:df:af:27:
f7:2f:b6:5a:7c:9f:4e:1f:2f:bb:7c:48:e4:24:81:b4:c5:91:
72:62:28:78:be:dd:b4:33:3e:bd:4c:d5:cf:9d:28:c5:28:90:
ef:c7:dd:55:3b:54:ff:8d:dd:b2:07:b1:67:0f:2c:05:1f:2f:
35:d8:78:da:7e:05:df:26:74:f3:58:4c:09:86:bc:0f:96:49:
d7:27:f2:dd:5c:a0:ea:e2:de:ba:f0:93:7c:cb:56:04:ef:c2:
f9:17:25:35:4b:fc:3e:83:8a:54:9a:90:3f:f3:b9:ea:54:df:
f8:24:4c:9f:00:43:3f:99:db:c9:26:1a:15:22:b8:a3:e4:38:
ad:4e:20:9f:3a:21:11:38:55:63:b1:c4:d7:18:7f:00:24:cb:
e4:db:5f:1e:d0:9a:c5:38:de:7f:cb:0a:11:8e:85:fb:6f:76:
4f:72:e4:74:68:3a:d1:37:a7:61:2d:eb:c9:d8:4e:20:9e:36:
1d:b1:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:22 2026 by rpki-client