Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: lssggD2626LGn5p+/qQs4yjQDDyIxiwiv/j3aRJsDz8=
Subject key identifier: F9:C3:34:80:C4:9D:75:70:59:C7:88:99:DC:7F:47:AC:4C:3A:F0:C9
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 019D390A5244CF18390198837D0A31362C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 0874
Signing time: Sun 29 Mar 2026 10:01:10 +0000
Manifest this update: Sun 29 Mar 2026 10:01:10 +0000
Manifest next update: Mon 30 Mar 2026 10:01:10 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: vefa4jwHWiTRKcxFx71ia44Nr0Ifpa7qqMvZBRBnmUM=)
2: rHQdQwrAVRUi1O-wNwGNXoOAwg0.roa (hash: 99E6Pbyu+albbhKOZ1Sk3PoNSHlEGTIbABGjf0VzSBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:52:44:cf:18:39:01:98:83:7d:0a:31:36:2c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Mar 29 10:01:10 2026 GMT
Not After : Mar 30 10:01:10 2026 GMT
Subject: CN=f9c33480c49d757059c78899dc7f47ac4c3af0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:7a:73:37:93:95:fe:82:3c:a9:b6:f6:f7:
9a:e1:42:3f:a1:9f:cb:17:01:34:66:75:5c:03:e1:
42:4b:f9:f2:d3:48:a0:b0:39:13:01:6c:90:58:42:
8f:63:c3:d0:1e:19:31:0a:d7:9f:61:43:22:84:d0:
0c:f2:e6:f7:d0:bb:cf:54:19:3f:ef:a2:1a:44:22:
9f:ac:9a:fe:92:83:88:fc:bd:90:ab:75:8c:db:5b:
55:a8:a5:0f:9d:8c:bb:9a:24:a9:7d:e0:46:4a:f8:
db:7c:36:62:b0:db:e1:4a:6d:1f:44:8f:d6:71:7a:
0b:da:24:f8:e5:f2:44:df:f5:34:80:12:5a:02:40:
54:f7:dc:41:81:d3:b8:16:89:49:e2:f9:37:30:1c:
27:3e:ff:86:4d:91:50:8a:9e:d7:88:b1:2f:d5:15:
c4:a2:58:7f:9e:aa:13:80:8f:41:73:16:3c:48:6f:
5f:a4:c1:f3:05:85:68:38:3f:85:79:66:65:1e:a7:
e6:32:43:fc:1e:64:5d:48:f7:d6:e9:57:e8:76:5a:
51:a1:57:a9:ab:ae:0f:fa:b4:7a:8f:4a:2d:eb:15:
7a:82:b5:72:33:14:40:18:78:81:74:5d:a3:7a:cc:
8d:9a:fd:50:1f:d3:20:fa:69:22:3a:32:bd:74:01:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C3:34:80:C4:9D:75:70:59:C7:88:99:DC:7F:47:AC:4C:3A:F0:C9
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:09:e4:fe:d5:98:c2:e5:db:d8:a1:d2:f2:b6:86:55:0c:25:
8a:4b:fa:ab:81:c4:3a:61:a5:f5:9c:7a:7e:59:e0:8a:33:8f:
b7:62:2f:85:13:ad:53:72:bb:9f:62:e2:be:da:ed:63:48:cc:
37:10:35:b9:9d:3e:f2:37:23:54:50:8d:d4:b4:3a:8a:24:7c:
6a:25:8d:9b:e5:4c:80:5c:64:f4:9c:1f:d4:0b:a3:ee:7d:94:
ce:39:b0:a6:65:40:4e:5c:78:4f:0f:32:9b:f2:36:31:89:fe:
48:6d:c7:0f:4c:07:50:78:33:f9:f6:33:1d:c9:2c:9b:af:a4:
55:ec:95:3a:76:5a:90:6d:79:c4:8d:31:d5:05:57:86:10:32:
2b:3a:f2:49:da:37:53:c5:3f:b7:3d:83:0b:b4:73:69:b2:ab:
e2:75:99:5e:eb:40:1d:1c:a6:df:6c:38:a3:96:86:77:c1:3e:
9e:ca:6b:74:fa:8e:00:6d:28:34:6b:06:71:f5:16:1c:55:5c:
1a:02:13:58:e2:89:d3:3c:5b:b3:f1:c6:8b:d5:8b:18:61:3d:
ea:63:9f:07:c9:68:f5:69:e2:12:08:02:f0:c6:f1:c3:fc:35:
e7:05:27:6e:17:55:af:a7:7a:4f:9b:d1:4d:69:92:d5:bd:f7:
66:e0:d4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:30 2026 by rpki-client