Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft
File: r9WY8p3VxWKY8usFdd4n_DuiCVE.mft (raw, json)
Hash identifier: Kr9Vdus6vu3Rce9q31BX4soLWEkFxsqhvuVYkJGc4R4=
Subject key identifier: A4:E6:34:C6:FE:7B:11:2B:01:51:71:84:50:B6:EF:1E:BA:55:4C:8E
Authority key identifier: AF:D5:98:F2:9D:D5:C5:62:98:F2:EB:05:75:DE:27:FC:3B:A2:09:51
Certificate issuer: /CN=afd598f29dd5c56298f2eb0575de27fc3ba20951
Certificate serial: 019D3866A85337979E969C03CAD8E4EF7A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft
Manifest number: 0119
Signing time: Sun 29 Mar 2026 07:02:25 +0000
Manifest this update: Sun 29 Mar 2026 07:02:25 +0000
Manifest next update: Mon 30 Mar 2026 07:02:25 +0000
Files and hashes: 1: UJZgLa4q8XxSNPVAzvfqpj2hFmo.roa (hash: HHsZAHqUxdIIWKa7mlGz2y9bB1VZgvrrNvACwY4d8qo=)
2: r9WY8p3VxWKY8usFdd4n_DuiCVE.crl (hash: 6B1AqJ1iXVNd5WKvf7K/QuuG2ogRefHGym9JuFgt54A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:a8:53:37:97:9e:96:9c:03:ca:d8:e4:ef:7a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd598f29dd5c56298f2eb0575de27fc3ba20951
Validity
Not Before: Mar 29 07:02:25 2026 GMT
Not After : Mar 30 07:02:25 2026 GMT
Subject: CN=a4e634c6fe7b112b0151718450b6ef1eba554c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:32:95:49:3a:32:13:33:74:c7:14:01:1f:
01:8c:ab:10:97:61:cf:b6:33:ca:46:3e:f6:3c:93:
d1:c3:30:32:e0:69:2d:23:4d:a1:f0:23:be:79:4c:
f9:01:e5:ac:87:8d:22:b4:32:a9:1f:30:38:3a:17:
af:41:9f:86:a5:a7:b3:e4:56:95:f7:a0:d5:2a:9b:
c2:f9:77:9c:25:f4:6e:e0:d7:6b:4e:81:fa:34:03:
ed:75:38:9b:91:64:c7:c7:2d:5f:22:65:fe:65:f1:
60:1e:5c:86:b6:c8:2b:65:01:51:8a:4f:61:ec:00:
fa:45:af:f1:35:c2:fe:ac:63:70:f2:f4:0f:12:94:
d0:27:dd:a9:c3:5e:08:ce:88:0e:e9:57:f5:59:03:
e3:cf:67:78:d4:09:8c:23:11:61:78:90:f5:85:3a:
2e:0b:c4:ad:2a:7d:e2:b6:d9:35:97:0c:a3:4d:01:
6e:b4:2a:9a:e9:63:a1:4e:c8:75:7b:7d:54:38:90:
4d:87:0b:e5:ef:5c:55:2a:4b:24:8c:ba:66:3e:fd:
d6:8b:b0:5f:cd:8d:40:0d:e7:a9:0b:e7:fb:e2:fd:
3a:2b:d8:a1:82:29:6d:db:a0:f9:9a:03:95:32:41:
cc:a7:62:6d:05:b0:77:ca:ac:e9:57:95:04:64:18:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E6:34:C6:FE:7B:11:2B:01:51:71:84:50:B6:EF:1E:BA:55:4C:8E
X509v3 Authority Key Identifier:
keyid:AF:D5:98:F2:9D:D5:C5:62:98:F2:EB:05:75:DE:27:FC:3B:A2:09:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4a:dd:86:bc:2d:2e:4d:63:d2:15:59:61:0d:5e:2f:1b:43:
12:45:93:dc:08:33:38:60:30:c1:41:a5:14:e0:b0:f2:40:40:
5b:0b:47:a1:25:58:3c:3c:1a:87:7f:f0:bd:24:60:8f:e2:18:
a3:dc:86:34:65:91:b4:9a:5c:6e:a1:1e:3a:cd:cf:b3:a6:f6:
22:90:eb:3b:ab:35:48:b6:15:15:1c:d3:60:91:0e:67:7e:9b:
fb:13:c3:eb:c4:e6:f9:12:ed:06:c1:e3:48:2b:4e:78:7e:ff:
4e:07:b4:93:42:e3:65:a8:fe:01:ce:b9:60:0d:e4:fc:5f:8a:
f4:ef:ce:c3:70:d4:79:67:e8:e8:d7:2e:b9:9c:26:8e:9c:60:
09:6e:66:81:79:87:fe:81:27:37:c8:d6:5f:47:3d:2f:7c:03:
d8:aa:be:4e:f1:1a:38:02:d3:1d:d1:8b:e3:58:86:b4:49:24:
ba:61:44:35:89:11:6c:ce:ac:98:c3:f7:7d:f0:f5:50:08:e2:
57:a7:e6:3f:36:dc:3d:78:42:51:6a:d0:5c:55:7b:e1:cb:1c:
3d:10:48:df:95:98:12:f1:99:9c:ec:c6:cd:c2:64:1d:48:03:
ec:f9:f9:78:36:f8:28:9d:ce:44:76:cd:15:83:c7:cc:c5:71:
a5:08:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:02 2026 by rpki-client