Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: vFBnQ779+t60z7BrtZOkuz2QeG3OCzvBB17xzKfQTwo=
Subject key identifier: E6:C3:04:0B:F4:68:09:16:C2:98:F8:B9:DA:40:A1:06:EA:43:A2:A5
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 019D394197964C667FD7912D8E1BF038E9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 11:01:33 +0000
Manifest this update: Sun 29 Mar 2026 11:01:33 +0000
Manifest next update: Mon 30 Mar 2026 11:01:33 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: Ox57ShrsicLEgzmVwb6OUBEVPLINJMlJHJqmTZXLtk8=)
2: HZePOmsjkPsg7dlktNrDrbvkEoQ.roa (hash: EMtZKX87wa385GEwMyBcWWCzgkUjroenf3wknZ0qOr8=)
3: feUrijd_KveyJ7eNJ1rBQYy4hhQ.roa (hash: 8ChsNr7pTk9JhrykIfRkpxl+JlzU+6lvsFJu1WkZIeY=)
4: jbQbuOumCNgoddvSeNQ0EqiLIvk.roa (hash: r2PNx4QtBVQh/b8nKhzHQVcKqAGoHRGsycMInrQsQyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:97:96:4c:66:7f:d7:91:2d:8e:1b:f0:38:e9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Mar 29 11:01:33 2026 GMT
Not After : Mar 30 11:01:33 2026 GMT
Subject: CN=e6c3040bf4680916c298f8b9da40a106ea43a2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:f0:42:34:7b:a0:19:7e:11:b7:f0:72:aa:
05:f8:96:9d:97:09:78:3d:94:06:56:90:14:9e:60:
4d:c8:16:b7:cd:72:54:94:86:c7:2d:cb:9f:45:05:
ef:d2:1f:bf:de:4b:ca:69:45:a9:3a:c2:11:bb:43:
8c:c4:c3:94:84:74:01:02:cc:83:52:b3:ef:21:49:
fb:5a:2d:f8:87:4f:57:ce:61:f7:77:1b:15:21:9e:
ac:d6:d0:78:ee:fe:6e:84:db:15:82:46:31:e9:10:
6a:ab:42:c0:29:ce:fc:74:d1:87:c5:2a:38:d4:6d:
fb:8c:5b:47:54:dd:00:90:40:36:02:37:bd:23:ae:
ee:b7:37:a9:de:31:26:df:81:49:4e:8a:23:b1:4e:
ce:3f:87:cb:51:fd:d6:90:3c:7a:96:e4:19:35:36:
5e:eb:ca:c4:80:9c:99:07:e6:30:17:2b:17:65:c1:
45:01:86:79:a9:de:8a:4c:51:f5:67:ab:0f:93:43:
99:c1:8f:b0:d2:cb:85:e5:b4:29:7f:cb:f4:af:84:
11:71:11:d3:6f:82:f6:c2:b4:aa:35:41:ec:3e:d2:
a5:4d:c5:8f:58:33:e1:12:2f:93:41:b3:63:4d:1e:
f6:1f:3f:36:4f:b5:85:50:db:e3:b6:3d:2f:fb:ba:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C3:04:0B:F4:68:09:16:C2:98:F8:B9:DA:40:A1:06:EA:43:A2:A5
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d8:8a:24:93:4c:68:37:fb:09:b8:76:77:c1:ed:84:e8:d1:
16:2a:c1:ac:ae:cf:08:32:ab:84:f4:38:5a:13:b8:9a:96:fc:
13:24:ae:f6:84:c9:1c:2d:46:10:64:4d:fb:1b:2e:6c:c4:53:
6f:23:a6:87:34:b3:6b:51:b5:19:11:70:e7:7c:e2:e4:8d:ba:
0b:4a:b8:6b:1f:75:f9:0f:84:26:b2:86:66:b4:14:54:3f:23:
9c:3a:fc:52:56:f0:c7:d4:f0:5e:c0:11:5c:f8:36:c6:b3:cb:
af:3f:b8:52:25:d6:e2:17:2e:c9:91:10:3d:45:0a:e0:9b:cd:
41:5e:9b:d0:af:17:88:87:58:82:cd:5b:fd:13:e8:9f:51:25:
20:ab:12:11:87:af:8b:fa:2d:d3:2c:d6:95:8c:a9:5c:35:54:
e8:28:b9:c6:7b:43:93:a5:62:cf:68:75:93:3f:24:a4:57:8f:
df:76:1a:24:51:99:5e:ce:9e:c2:b2:22:ad:7a:f3:79:68:c8:
f8:02:cc:72:b4:2d:2e:f9:04:db:c0:f3:fc:63:d9:78:7c:e4:
4e:ed:53:56:a8:97:30:69:f1:b9:7b:f6:9d:15:19:42:96:05:
3a:0e:e5:8b:3b:dc:d4:c8:4e:bb:13:68:99:f1:c2:37:6b:33:
fc:a6:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:34 2026 by rpki-client