Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: GbSSQFCwcuHh7t/ef6Bw0iu67pt7GkVL28BtiHg0p8A=
Subject key identifier: 58:7C:A3:0E:45:9D:93:85:03:06:0E:DA:24:EC:9B:4C:ED:D2:1E:B0
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 019D37891F6B68D41AF270963D6A3080D1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 03:00:26 +0000
Manifest this update: Sun 29 Mar 2026 03:00:26 +0000
Manifest next update: Mon 30 Mar 2026 03:00:26 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: IfCX2lZcJuobpRMmBhqjiCX3iGokizOdioyg6/hO8d4=)
2: T5JGF7B12Y-OhHm1OYqXkm7-lXg.roa (hash: KwWOzAO8pCz7VGjCCS1zx6R3CR7E9zIHXknJYnIgWh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1f:6b:68:d4:1a:f2:70:96:3d:6a:30:80:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Mar 29 03:00:26 2026 GMT
Not After : Mar 30 03:00:26 2026 GMT
Subject: CN=587ca30e459d938503060eda24ec9b4cedd21eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:45:53:ed:64:56:89:50:8b:47:a1:32:a0:
75:9b:ea:4b:a4:7d:80:ef:50:dc:f6:46:d0:37:e5:
3e:ae:92:26:bd:8a:a4:91:d4:23:63:6c:21:a0:6f:
8d:55:6b:b5:3d:9d:f6:e7:18:98:f5:a7:a8:f6:0e:
b3:19:e1:50:79:6e:be:fc:91:1a:e4:88:e2:7a:5a:
58:d6:0d:12:1e:d6:54:7c:b0:d7:b2:71:9d:7a:22:
3b:43:a1:c9:31:e2:aa:ac:df:2e:2a:09:e2:0e:41:
e1:6e:ce:8b:d8:29:45:a7:0e:0f:37:2a:97:dd:eb:
1f:a9:a2:75:7c:21:69:5a:fb:7b:14:06:3f:df:f4:
d1:33:65:f0:4c:23:f4:14:5e:fd:dc:5b:26:8e:ba:
e0:f9:a1:6b:fc:76:9d:61:b4:63:9e:4c:8a:9a:d8:
87:26:19:5d:20:34:2b:83:36:14:0e:08:c1:9f:ae:
34:bb:be:2a:66:6d:67:6e:65:07:2b:e1:e5:95:df:
fb:37:1f:17:fa:1b:9f:4d:74:e3:b2:c5:a6:79:e2:
1d:8c:9a:3b:8e:9e:d9:fd:79:6c:c0:ce:8b:b0:d6:
aa:f8:e0:cc:ba:d7:e6:de:f0:bf:4c:36:92:0c:99:
2b:7d:80:af:7a:87:fb:6c:94:29:aa:5c:5a:ec:c6:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7C:A3:0E:45:9D:93:85:03:06:0E:DA:24:EC:9B:4C:ED:D2:1E:B0
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:44:eb:fd:62:a3:ec:8b:78:89:0f:ce:1f:81:90:35:78:93:
2a:8c:b3:9f:25:00:89:6c:83:5e:84:d6:ed:b1:9a:da:e2:27:
3a:93:22:92:cc:04:f9:fe:fd:9f:95:41:96:5c:d9:69:b2:ab:
d1:f6:35:84:12:e1:55:73:62:5e:8a:dd:92:37:27:49:c4:43:
9a:46:ae:8b:40:e4:4e:cb:6a:13:a1:49:18:b0:d6:70:c2:17:
0c:87:1d:3b:0b:99:06:8a:03:22:9f:19:a9:74:ec:ec:e9:8e:
04:d0:37:4b:f6:86:62:5e:95:99:09:b8:c1:42:bb:90:15:2e:
3e:1a:02:81:6b:7f:c6:95:a8:52:10:25:8d:95:66:10:30:63:
98:8a:be:ac:80:c8:28:11:c1:98:5b:0f:5f:d2:79:d2:5a:38:
5f:a1:0c:37:53:24:5e:f0:ca:57:5e:97:66:13:8a:5b:e5:ad:
bf:36:43:05:8a:38:52:c2:7c:8a:91:a6:7f:d3:b0:19:fc:75:
e6:ce:6e:63:11:66:33:1a:9e:67:77:28:ec:d4:32:92:04:d1:
55:6b:56:4a:75:16:29:73:16:ba:78:e1:4b:96:10:6f:3c:3d:
14:55:1d:f2:4e:62:04:14:97:33:87:ce:54:18:a7:53:60:32:
a7:3f:f4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:23 2026 by rpki-client