Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
File: 9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json)
Hash identifier: m97j6M7CP81s2x/ivFZNPAZX/dLj+CnyuAe/kb5RrP8=
Subject key identifier: 01:3A:F4:C8:E7:AC:D7:DB:09:B8:61:5E:6C:6D:CD:75:DD:23:84:B5
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial: 019D0EFB4D7B482432D3706147DB21025534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
Manifest number: 1879
Signing time: Sat 21 Mar 2026 06:00:43 +0000
Manifest this update: Sat 21 Mar 2026 06:00:43 +0000
Manifest next update: Sun 22 Mar 2026 06:00:43 +0000
Files and hashes: 1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: YHg84XKQDc5thPpINux67cVCn+juaGWRiUhA28qpFaA=)
2: _nZKD9ZTGWn3ixeAqRkUR8-oFdY.roa (hash: E+dKSGK3CToMIv6bsluEab6asnsTgpRJX/4wcKUB3No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:fb:4d:7b:48:24:32:d3:70:61:47:db:21:02:55:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Validity
Not Before: Mar 21 06:00:43 2026 GMT
Not After : Mar 22 06:00:43 2026 GMT
Subject: CN=013af4c8e7acd7db09b8615e6c6dcd75dd2384b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:d0:d0:11:bf:8f:b0:23:94:77:70:8a:9f:
ba:77:88:a2:51:e4:d1:43:3c:33:b8:25:f4:89:b0:
3f:74:b2:99:db:1f:7e:3f:f8:66:f0:92:40:f8:67:
48:0f:77:75:d4:7a:6a:1b:9d:ed:90:75:52:c9:33:
d0:7e:76:bc:b7:9f:23:f0:3e:2f:e9:9e:bb:a6:a0:
b9:01:d7:84:49:f9:c8:e2:9f:46:dc:95:50:6c:a2:
7b:1c:3d:cf:c1:eb:d8:f3:dc:33:ac:2c:04:5d:7d:
d0:17:90:f4:b9:32:24:71:22:e5:02:16:ae:9e:16:
cb:cc:3b:79:c8:c9:2a:fb:12:d7:eb:88:44:ee:f3:
f7:9a:32:a9:65:59:2c:bf:ba:ee:50:62:c5:ec:41:
9c:c3:8b:16:77:4c:e6:6f:b2:75:88:16:1b:87:87:
df:83:ea:79:1e:03:32:28:bd:c9:65:85:31:ae:74:
15:f0:b3:a7:9f:6b:0f:1b:70:7c:47:fc:f6:86:fc:
81:a4:b1:c6:5d:f0:8c:47:20:6d:57:28:82:a3:2a:
fb:e7:32:f5:55:05:8e:01:06:d2:2c:9d:3d:ff:87:
f7:87:04:37:e6:5f:62:c2:bd:a8:b9:b7:1a:b5:6c:
34:4d:e2:27:7f:2c:89:5e:90:6c:ae:43:a7:1a:d1:
e5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3A:F4:C8:E7:AC:D7:DB:09:B8:61:5E:6C:6D:CD:75:DD:23:84:B5
X509v3 Authority Key Identifier:
keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e1:67:4a:35:74:0b:04:0a:25:a0:67:85:8d:f0:33:c4:50:
d3:7e:e8:ee:10:fd:8c:8c:89:38:c5:e7:a8:56:51:39:db:df:
08:18:db:2a:a1:33:94:23:45:75:4c:4d:4e:38:09:9a:54:d9:
c4:dc:80:33:21:78:7f:c6:75:4d:33:4b:24:24:25:28:94:3d:
e1:43:f0:c0:41:35:74:db:2d:76:6a:4e:01:27:8a:57:b9:9b:
b4:fa:2f:88:b4:48:5c:f1:6b:30:a8:4a:ec:2a:3e:2a:25:2e:
de:d7:30:80:0b:cd:53:ef:e0:4d:72:2c:8a:53:ea:79:cf:46:
1b:27:7d:13:0d:a6:fa:e2:c3:b2:6c:d0:68:b7:90:8e:97:03:
75:d7:70:cd:84:c7:af:95:03:d1:53:22:e3:82:23:c6:42:26:
3e:16:58:4d:b9:e5:b0:01:c8:9b:10:e9:ee:90:0b:ef:ac:57:
7b:1a:97:89:a9:4d:f3:7f:77:cc:58:2f:38:4b:94:c8:7c:41:
01:dd:ac:e2:c4:4e:cd:a1:b4:36:58:c8:23:32:e2:15:81:1b:
3d:86:7d:70:f8:80:68:17:9e:30:3b:71:79:0a:bc:65:06:3d:
83:ad:4d:e6:91:f3:4e:d2:fd:b8:e5:47:e2:fa:ef:0c:67:ea:
ac:a9:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 13:18:42 2026 by rpki-client