Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: 3k4W8FRZRwF+agr00mJ5h2an/WFH41zg5t73ABizuGw=
Subject key identifier: 8F:29:AA:D7:37:82:D0:66:BC:80:A8:E1:9E:7A:83:70:C7:E9:43:49
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 019D38D31CA93A6F342E0446FCCE1AA04C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 15CB
Signing time: Sun 29 Mar 2026 09:00:52 +0000
Manifest this update: Sun 29 Mar 2026 09:00:52 +0000
Manifest next update: Mon 30 Mar 2026 09:00:52 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: +e41aSd55Lvo7Gp9kXzbfiQXFt63DS/8Zc75SKVoU1s=)
2: mEgDM3l5c0LrVuCqn477ft25k3w.roa (hash: KJ2JP42lCHcxJukTZAz4D69v5GnFU1eWXwSmVHNVnQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1c:a9:3a:6f:34:2e:04:46:fc:ce:1a:a0:4c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Mar 29 09:00:52 2026 GMT
Not After : Mar 30 09:00:52 2026 GMT
Subject: CN=8f29aad73782d066bc80a8e19e7a8370c7e94349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:14:f0:5c:ac:fa:63:02:0e:7d:3b:59:01:
ce:55:aa:8a:5f:fa:09:5a:6a:7d:41:df:96:da:a9:
bf:5e:84:65:2f:f1:f2:32:1b:c5:60:33:78:10:f1:
94:68:67:f3:49:62:63:35:46:30:83:10:77:7d:7a:
5e:45:1c:9b:2a:21:60:5c:57:50:21:6d:55:40:81:
a8:18:c3:81:56:9f:b9:c0:1f:33:6e:77:00:da:9d:
99:61:83:fa:f9:6e:80:bd:d4:b4:10:30:d9:49:bf:
04:e0:bb:79:05:4d:46:0a:f5:9d:f0:38:62:c5:ac:
b5:d8:c1:6e:f5:d5:1b:a5:85:e0:7a:e3:10:e3:c6:
6b:16:cf:c0:44:68:6d:fc:6b:0d:c0:dd:92:7e:2f:
f3:11:4b:96:8d:42:36:ce:91:c0:ad:a0:a7:01:10:
db:92:15:02:e3:48:c8:f7:18:af:85:e6:9e:f5:79:
e4:07:26:ac:1a:49:a1:85:73:95:8e:db:c5:f1:e3:
60:b4:1f:8a:95:7d:43:11:a9:53:87:7a:72:c4:28:
6b:b8:1e:ca:66:a3:44:54:bd:74:5b:8c:64:b8:ad:
f5:cc:59:67:9a:dc:c3:00:e7:d1:c9:03:f5:40:5a:
41:e2:94:d7:c3:e1:98:72:cc:a0:7c:66:c1:53:be:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:29:AA:D7:37:82:D0:66:BC:80:A8:E1:9E:7A:83:70:C7:E9:43:49
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:75:95:14:37:c4:5b:a3:6f:5c:bf:73:3f:dd:6d:9a:53:73:
96:25:d4:45:37:5c:c5:69:e2:d6:3f:71:79:6e:b3:74:c0:26:
6e:ae:f8:f6:cb:07:e0:d4:b5:86:1b:35:34:5e:8a:af:32:21:
86:6c:e3:32:d2:c9:6e:30:3a:a4:45:cf:27:1b:37:fc:d4:f8:
04:1d:31:11:21:3f:e8:b7:35:48:63:1c:d2:1a:63:98:7c:57:
62:1d:d7:ca:50:f7:18:4e:4a:68:4a:2a:da:16:fe:99:bd:4b:
e1:45:da:04:7f:f3:9d:aa:23:5e:3e:16:10:9f:2b:0e:1a:07:
87:0e:ba:77:25:68:ae:48:2c:7f:45:b7:97:01:6d:7a:15:29:
83:61:6d:60:91:ef:b0:95:5f:8e:1e:05:a9:3e:05:b2:5b:f2:
c5:4d:c0:ea:3f:c2:69:d5:63:18:27:64:f2:4e:7c:c8:ad:c3:
b4:e0:3d:4e:c3:37:d5:bf:f6:8d:ee:d9:6d:3d:a2:fc:4d:a2:
4b:b6:4f:41:8b:91:39:d4:63:b2:45:6a:b7:c5:db:b4:a9:0c:
4f:e4:3b:e4:49:e5:c5:53:0a:3e:9c:51:1b:b5:24:de:a4:b2:
37:1d:89:09:41:f2:c1:f1:9e:97:1f:6d:4f:1f:24:b0:fc:26:
2d:86:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:08 2026 by rpki-client