Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
File: 9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json)
Hash identifier: hR1oIENWTlS1++leqW1hkPr4cWhqi4g3UXZgNeESR2A=
Subject key identifier: 34:40:74:BD:44:86:B0:B3:CC:F4:E6:AD:92:1C:92:25:8F:4C:1F:B5
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Certificate issuer: /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial: 019D3909F07FF3A446D7B324EE140C30AF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
Manifest number: 1367
Signing time: Sun 29 Mar 2026 10:00:45 +0000
Manifest this update: Sun 29 Mar 2026 10:00:45 +0000
Manifest next update: Mon 30 Mar 2026 10:00:45 +0000
Files and hashes: 1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: TSiIZUixa1VxzFhoy8cCh+/jTA2bJgkakWMTJ0wdx8U=)
2: ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa (hash: /54TVaQGpWQlA0th+KPLCMlkXLtNsFvetSrJmgBZFMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f0:7f:f3:a4:46:d7:b3:24:ee:14:0c:30:af:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Validity
Not Before: Mar 29 10:00:45 2026 GMT
Not After : Mar 30 10:00:45 2026 GMT
Subject: CN=344074bd4486b0b3ccf4e6ad921c92258f4c1fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:aa:49:2f:70:ed:b0:1c:f5:21:7d:58:bf:e5:
b0:e0:02:76:ba:20:f9:a9:da:ac:aa:6c:ba:ea:22:
d4:dc:f4:70:70:61:7a:e8:31:fc:c3:01:73:24:e9:
35:50:00:f1:dd:44:e3:0d:ac:7e:ab:47:4e:12:45:
ad:8c:79:af:06:8a:b6:e0:7a:ef:0a:fd:49:78:f8:
d3:13:72:86:77:72:2d:e3:53:e2:4c:51:da:a0:b2:
0d:a8:b2:ca:ce:e5:c0:3f:65:eb:19:59:6c:f3:65:
fa:51:85:90:37:42:01:24:47:ea:0f:be:15:19:4d:
d2:ff:0c:d5:a6:4c:92:fd:22:e7:2c:4d:67:96:19:
55:53:34:f8:9c:a2:dc:10:be:9a:bc:0a:2a:37:76:
01:ce:82:03:e2:a5:6e:36:81:7a:02:c5:7a:b0:80:
a4:1c:94:a1:a7:a5:92:b7:51:c9:22:3e:87:ed:25:
0e:3d:27:38:c8:a8:c1:db:6d:4d:45:e6:d0:59:dd:
04:86:2e:af:b8:a9:a9:31:61:a9:49:84:73:f9:7e:
06:c4:23:e3:2e:58:2c:85:00:8d:47:0d:35:c0:f9:
d0:d7:7d:2f:56:12:8c:c5:19:a4:fd:3c:d4:47:e4:
cd:2a:2b:8b:7b:4d:bc:78:c9:4d:8c:1c:b4:54:81:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:40:74:BD:44:86:B0:B3:CC:F4:E6:AD:92:1C:92:25:8F:4C:1F:B5
X509v3 Authority Key Identifier:
keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ec:6d:8e:a9:04:d4:df:3b:77:eb:96:b6:27:72:6b:31:ad:
28:10:9a:d8:e1:26:a9:d4:09:f4:38:2f:bd:89:dc:20:77:30:
29:df:0f:49:d8:36:8e:85:b0:77:64:96:13:c0:c0:b0:64:1e:
60:85:78:65:f4:de:5e:87:1a:b5:76:b9:4c:a1:c4:70:db:12:
0a:1e:ac:6f:59:12:62:42:f3:98:2e:c2:7a:ca:4d:a8:9c:e2:
40:70:99:7a:62:73:c6:b1:59:74:c4:b2:76:b8:e8:74:cc:ed:
ed:a1:62:3e:38:b2:14:a8:89:bf:8f:ea:1d:85:44:7f:36:c9:
9b:64:b5:54:f5:b2:62:65:2d:d9:cc:12:65:a4:a1:52:9c:9b:
2f:eb:62:bc:42:c5:a9:37:fa:bc:f4:14:c0:a3:cf:17:60:bb:
09:2d:83:58:6b:4e:75:58:a4:1a:0c:e0:72:d8:d8:0f:4d:3f:
6e:f1:23:b5:5c:a0:ab:02:e5:94:05:a7:35:4e:5d:86:dd:90:
b6:36:a5:2d:ea:36:00:b4:f4:6b:07:66:49:d0:80:10:8a:6b:
0b:94:aa:72:0d:3c:a5:86:bd:df:ae:a7:af:64:0f:09:ec:4a:
df:6a:8e:3f:30:2d:3b:18:b0:b6:95:5c:a9:f7:d4:b7:3f:8a:
a9:fa:1f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:56:20 2026 by rpki-client