Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
File: 9jXHTatSTz72yWtovplcMCXPD-A.mft (raw, json)
Hash identifier: jQ62AdJSmzpB5HQUam43n9dkuuNCVnrO1Gq16JpY9Ks=
Subject key identifier: C4:38:47:3D:04:B7:62:FE:16:66:74:48:B2:9A:21:1F:B6:66:AD:01
Authority key identifier: F6:35:C7:4D:AB:52:4F:3E:F6:C9:6B:68:BE:99:5C:30:25:CF:0F:E0
Certificate issuer: /CN=f635c74dab524f3ef6c96b68be995c3025cf0fe0
Certificate serial: 019D3909991AB3057A33E03CFFD0BB7299C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
Manifest number: 57
Signing time: Sun 29 Mar 2026 10:00:23 +0000
Manifest this update: Sun 29 Mar 2026 10:00:23 +0000
Manifest next update: Mon 30 Mar 2026 10:00:23 +0000
Files and hashes: 1: 9jXHTatSTz72yWtovplcMCXPD-A.crl (hash: DuiuylI/lLn988H0zWDYdTO9zqds6/ls4nUH1CERWRo=)
2: JYgzUyiaZYs05bVlx3hglGkBd1Q.roa (hash: BMikKwWOpzTQc4z6QjV3HCSDgmz4fqzntIpupmntBpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:99:1a:b3:05:7a:33:e0:3c:ff:d0:bb:72:99:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f635c74dab524f3ef6c96b68be995c3025cf0fe0
Validity
Not Before: Mar 29 10:00:23 2026 GMT
Not After : Mar 30 10:00:23 2026 GMT
Subject: CN=c438473d04b762fe16667448b29a211fb666ad01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:37:63:47:bf:06:47:4b:55:44:f6:f0:f9:
21:a6:89:46:06:b2:b3:60:20:98:14:b4:0a:0f:0a:
63:bc:ee:9e:8b:bd:cd:fc:22:e2:bf:96:a7:35:e3:
8d:c7:b8:f4:f9:29:d8:f7:7d:11:fb:f5:cb:d0:55:
7a:5a:47:61:04:4a:67:b8:c4:fc:02:fb:f0:a7:19:
11:4a:b7:ec:59:f7:7c:a8:08:bb:7c:c4:fc:d6:bc:
a4:e9:5b:fb:89:7f:68:5b:48:88:df:c3:53:85:94:
14:56:5b:4f:7b:bd:1b:39:98:73:f2:cf:50:9d:66:
bf:8d:64:3b:e2:bd:72:12:0d:5f:78:40:e3:42:c2:
24:f8:fd:6b:15:76:93:93:4e:7e:89:b2:3e:01:ac:
27:ca:05:0c:14:ed:0d:9c:62:4f:de:52:8b:84:dc:
3c:08:fe:e0:80:39:a1:af:b7:f6:ea:ac:67:0f:43:
0f:ea:aa:da:7f:9a:d9:8e:ff:c5:8e:64:cd:16:fa:
37:c3:30:e0:d5:b0:54:2d:5a:1e:15:6a:a4:01:85:
17:5b:c5:25:4e:0a:a9:42:3b:96:4a:d6:3f:48:61:
aa:10:ac:43:77:c8:61:83:86:04:98:33:77:3f:b5:
bc:c5:b6:2c:c9:b4:40:e4:e7:5c:28:db:14:d7:0a:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:38:47:3D:04:B7:62:FE:16:66:74:48:B2:9A:21:1F:B6:66:AD:01
X509v3 Authority Key Identifier:
keyid:F6:35:C7:4D:AB:52:4F:3E:F6:C9:6B:68:BE:99:5C:30:25:CF:0F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9a:6d:cb:59:70:d4:ec:78:35:8a:04:ab:ea:65:f1:7b:75:
ad:19:57:45:f1:b1:23:6f:92:78:2c:a5:c2:e2:61:47:04:f9:
9f:a2:4e:ad:8d:1a:35:86:53:08:b7:83:6a:42:b4:81:cf:89:
f7:dc:dd:3e:4d:e5:3e:7f:10:13:fd:8d:fa:57:62:15:c4:27:
f9:80:2e:b4:a0:fc:45:1d:0e:0b:d2:c6:ae:89:fa:5e:07:16:
88:f0:9b:85:db:23:4d:73:1d:f5:d8:0e:3e:8b:90:b8:90:6e:
8a:db:28:d0:b0:b5:d9:e2:a1:39:ee:fa:67:37:18:33:76:a6:
fa:e9:22:7d:f7:59:9f:bf:05:a1:bc:09:f0:56:2d:5d:d9:d8:
50:0d:97:e6:a2:f0:a3:db:76:ad:fd:a8:66:7d:4b:d0:92:59:
61:29:d1:55:dc:71:8d:5d:43:f9:33:08:fe:3e:cd:9e:74:33:
18:bd:ee:c7:e2:29:74:bb:ca:c8:a0:3e:59:39:72:16:7e:91:
52:1e:0b:f5:b3:88:f6:78:a2:3d:28:d8:11:80:d4:7c:91:eb:
76:aa:6a:c3:ee:26:d8:b8:0a:95:60:b8:15:b7:39:1f:12:64:
92:f5:71:40:83:9e:90:b6:08:f9:c6:e8:b9:41:d1:9f:41:0d:
47:2e:6f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:54:10 2026 by rpki-client