Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier: tIjrFWjDkFVXJlsypKBIMFmt4n7k1zOhG/x+g0vzIDI=
Subject key identifier: 29:B8:86:E5:E7:2F:D7:B9:68:E4:DF:7C:AA:21:74:B6:4C:47:68:80
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial: 019CE6363D434BB25633EC7B60DA22875560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number: 16DB
Signing time: Fri 13 Mar 2026 08:00:40 +0000
Manifest this update: Fri 13 Mar 2026 08:00:40 +0000
Manifest next update: Sat 14 Mar 2026 08:00:40 +0000
Files and hashes: 1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: OJTe3x9EbRotI73JBmKarfHp//5f7SeSma//cbBgfS4=)
2: BrhtiCQ6piwiqQ1pBvv28oLuyG8.roa (hash: ryijqGxwQHpnmrcmVfe+7BnWPcERkXO0XSnxMSNhaks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:3d:43:4b:b2:56:33:ec:7b:60:da:22:87:55:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
Validity
Not Before: Mar 13 08:00:40 2026 GMT
Not After : Mar 14 08:00:40 2026 GMT
Subject: CN=29b886e5e72fd7b968e4df7caa2174b64c476880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:c7:54:cc:9e:67:da:67:27:69:e3:b9:a0:
6d:78:ca:da:cd:6f:03:4c:4e:3d:8b:81:cf:97:a0:
32:01:9a:ef:dc:aa:31:91:d8:0a:78:c1:5c:e8:f9:
ae:ad:7b:86:24:e2:d7:bb:3b:66:69:6f:fa:0c:7c:
00:eb:74:34:3a:22:84:94:73:18:aa:00:79:f6:08:
28:69:8e:d5:af:ea:c5:59:d8:75:04:74:63:29:69:
7d:ff:04:f7:49:49:a9:2f:ff:1e:26:7d:07:26:cd:
70:9a:14:c7:4f:f2:2d:d4:00:c6:a2:5b:6e:93:eb:
70:79:a3:be:84:3e:3e:d0:61:6e:66:ef:92:77:28:
98:94:08:62:79:31:4d:60:21:d4:c9:6d:f5:c4:d8:
d9:c6:17:fe:98:f7:ab:05:0f:54:fd:63:88:1b:64:
d2:93:bb:58:a3:b6:41:91:c4:75:69:c8:da:9e:ce:
da:df:33:3d:88:ac:67:36:d2:68:98:64:c0:8c:7a:
ad:4a:df:66:47:32:14:b7:85:ee:64:98:34:6c:a6:
d8:e8:5c:4e:6b:1f:e2:0c:74:7b:31:1e:35:21:c7:
23:dd:69:82:78:6f:a4:56:18:7a:00:28:28:f4:eb:
fd:65:ff:da:73:d6:87:18:36:6d:65:71:73:41:c0:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:86:E5:E7:2F:D7:B9:68:E4:DF:7C:AA:21:74:B6:4C:47:68:80
X509v3 Authority Key Identifier:
keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a3:2a:72:86:c1:69:35:a3:05:d9:7b:62:0c:3e:1f:12:ea:
c2:d2:e8:81:d1:b7:ae:ec:c6:b7:92:a3:a5:2d:b4:f1:41:98:
a4:14:d5:4b:bf:d0:d3:66:73:88:7d:3b:ea:0e:a1:9f:b4:e5:
cb:da:60:56:a8:b2:c3:29:0a:d7:d1:7d:90:91:af:54:59:a9:
ac:f2:ac:23:6e:64:34:f5:4b:11:52:70:7c:5c:5e:72:b3:19:
79:33:9d:96:6b:69:94:f5:e1:3b:69:08:df:a0:1c:7a:c3:f8:
1c:bb:d1:0f:05:13:71:53:27:5f:38:8d:c2:51:ee:16:5e:38:
e3:6b:9f:e0:cd:bd:32:6f:00:a0:43:92:25:27:01:e8:55:96:
5e:9b:26:3a:c4:03:7f:0e:ab:ef:ec:25:45:51:01:f1:84:20:
d1:29:c8:c5:5c:5a:f7:d7:0c:ad:7c:40:bb:46:7f:b7:d7:4d:
7c:3e:b6:a6:5b:53:0e:04:58:7a:a2:b0:0c:c2:d6:6e:f1:d7:
d4:6d:d2:13:cf:b0:6e:3a:39:5b:18:36:d5:51:55:2a:0d:67:
97:08:0e:83:d1:22:38:91:25:87:d7:1f:a7:a5:7b:2a:cf:f2:
b5:95:3c:0d:0f:5e:12:ce:77:9c:76:47:9c:27:ae:4f:30:77:
c6:27:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:29:34 2026 by rpki-client