Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File: 9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier: yIH0lFBYs7EhaxTlKbk2b2qCVMsklz1CEFpA66WKnas=
Subject key identifier: 4E:9B:F6:06:B8:99:D3:FD:F8:E7:E4:83:DC:E2:AA:86:D6:A6:CC:AB
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial: 019D32637A64E26DAB5FF2867A8DFD0A6422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number: 134B
Signing time: Sat 28 Mar 2026 03:01:13 +0000
Manifest this update: Sat 28 Mar 2026 03:01:13 +0000
Manifest next update: Sun 29 Mar 2026 03:01:13 +0000
Files and hashes: 1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: HGG89LOD+llqt/zsHBDYjWH3PTZOwr2vx/N9ZOqgDxc=)
2: bvCBuuEdxAUjZ43AaqObXsCRP24.roa (hash: +knVgbiUviDOgcpEQ9q1n1I2+704D2tY8YWzgF0kEqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:7a:64:e2:6d:ab:5f:f2:86:7a:8d:fd:0a:64:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Validity
Not Before: Mar 28 03:01:13 2026 GMT
Not After : Mar 29 03:01:13 2026 GMT
Subject: CN=4e9bf606b899d3fdf8e7e483dce2aa86d6a6ccab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:83:ae:19:0a:1e:b5:4e:fd:aa:3c:7d:b5:
72:60:8c:fd:01:0c:43:47:10:c1:45:c7:66:eb:50:
b3:39:40:c8:26:f1:b6:ae:35:49:a8:33:6b:b4:7d:
80:2f:d6:8a:28:57:aa:7a:6c:d9:57:a4:ca:f7:e1:
f6:ec:ad:e7:4d:60:db:29:ae:ea:74:3a:de:01:d8:
a2:eb:3c:3d:ad:97:ba:9a:96:0c:d0:5d:fd:16:58:
fb:df:35:df:6b:a6:b5:14:52:57:16:f0:54:af:c3:
72:94:3f:d4:17:58:12:86:44:96:aa:f3:26:50:08:
7e:c7:a6:ae:0b:71:38:d9:c1:fb:b2:80:3b:6b:ab:
a1:5c:a9:e6:34:9a:a1:7a:f1:4b:7f:68:38:79:cd:
65:6d:02:81:4a:37:02:fa:3c:f4:e4:ba:70:be:77:
22:0d:0a:bc:80:ac:10:d5:f4:89:0c:d2:e9:de:52:
b9:df:f3:18:b5:ab:50:78:d2:6c:ed:14:54:76:ac:
d2:20:6d:22:80:52:2a:d0:83:b9:e4:9b:2b:52:e8:
fe:ae:f2:8d:a0:4d:52:1d:de:39:40:7d:0e:12:30:
cf:c9:56:19:50:29:ae:f6:58:f0:bc:a1:d4:ca:5c:
f5:d9:65:b5:3a:62:87:bc:6f:73:6d:cd:91:78:11:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9B:F6:06:B8:99:D3:FD:F8:E7:E4:83:DC:E2:AA:86:D6:A6:CC:AB
X509v3 Authority Key Identifier:
keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cd:ff:15:cf:ea:20:46:fd:c9:ed:96:bc:79:1d:b5:12:f9:
4e:de:48:5f:a5:63:bf:f3:4f:87:74:e5:ca:00:30:92:65:ed:
f3:1d:ba:b8:3b:c8:e5:9a:50:65:17:f4:bd:c3:a6:da:89:df:
ff:bd:21:36:3f:18:67:c4:54:9f:45:b9:7b:d4:b9:3b:c4:1b:
4a:77:e8:f6:2e:7b:bc:63:9a:e0:db:b4:e5:c0:b1:ad:5e:b7:
ba:e1:91:5e:b7:43:f5:dd:42:f2:42:9d:63:d5:23:e3:7b:cc:
10:1d:ef:52:19:49:4a:8f:f3:87:ff:09:5b:fd:fd:7b:5f:e1:
07:ef:fe:51:8d:ce:b8:2e:8b:5b:b5:e5:34:6a:f4:21:2c:f9:
58:b8:23:fa:44:29:9b:5b:bc:6c:32:ce:3d:76:5e:bf:0f:85:
a6:48:8e:0f:6f:31:24:0a:68:02:26:37:13:4c:2f:f0:db:21:
2a:ae:50:6f:16:c8:4b:12:75:6f:b0:d1:d4:72:e7:4f:b5:79:
71:0e:31:d3:20:f5:00:e0:97:9a:bd:1a:dd:a1:05:c5:92:5b:
22:f8:02:a8:8e:c6:47:39:0b:83:d0:8e:58:a3:f7:b6:46:3b:
b0:40:82:2b:1c:1c:91:e9:2d:f6:a1:28:4e:50:af:44:0b:0d:
7b:ce:d4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:55 2026 by rpki-client