Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: F5l69jL30U28rRe+moPOfwka0TNfbCbRhchahAkmm30=
Subject key identifier: BE:A8:A3:E7:41:84:25:F8:2E:74:5D:32:67:B6:DB:6C:2C:7C:8B:02
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019D3940AE2C3B009F01E3AA701639D9F0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: HGJi5ccdrgl7SaGYxnlbg1XvVWWsDws5UdVk/WtWq8g=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ae:2c:3b:00:9f:01:e3:aa:70:16:39:d9:f0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=bea8a3e7418425f82e745d3267b6db6c2c7c8b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:78:9b:8d:92:30:5a:18:9d:aa:51:57:4b:
0e:f4:77:ee:31:ce:9d:31:6b:d0:da:9b:31:7b:cb:
01:63:f5:85:4e:13:e7:09:bb:d0:03:03:42:5a:e4:
e4:31:8d:14:c7:16:7c:fa:75:dd:5b:76:8f:98:1a:
be:1d:71:bc:6b:50:56:35:4e:82:62:f7:f4:83:54:
b1:65:84:e8:fd:70:01:38:a0:5b:8b:bc:e3:4c:72:
be:56:03:b9:9b:92:38:88:6d:8b:99:57:20:0c:76:
2d:78:1b:02:3e:14:ec:65:24:ff:c3:a0:fe:f0:3b:
4a:db:53:b4:9f:b9:00:cd:d8:61:ac:77:92:5e:59:
a2:8a:64:1e:0c:a5:a6:19:31:54:17:54:2c:38:46:
b0:49:bf:03:e9:20:50:de:e6:93:73:85:90:bc:e1:
98:ab:07:4c:f6:f6:b1:d0:7e:00:bf:0f:ff:ee:31:
76:e4:a2:01:6c:a5:cf:db:5e:73:99:b7:4e:8a:61:
a8:df:91:2b:4d:7e:46:6a:6c:34:17:e0:34:33:81:
d0:72:e4:41:73:ef:46:0d:8c:b4:f2:55:00:d1:08:
05:30:e0:43:b6:62:72:45:93:e7:19:24:81:09:fd:
3d:23:b5:de:64:81:2f:39:33:e7:c0:00:43:06:64:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:A3:E7:41:84:25:F8:2E:74:5D:32:67:B6:DB:6C:2C:7C:8B:02
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e5:7f:df:d2:97:1d:3b:75:03:bb:e8:1a:f6:c9:9e:8a:1f:
7e:bd:b6:ae:07:b2:ae:07:d0:aa:d9:8c:de:a1:03:a2:28:9a:
2e:f7:69:ab:4a:04:b7:15:bd:0e:79:ba:c1:8f:06:39:1d:2f:
ef:11:ea:87:0d:b2:d6:4e:4e:41:98:2e:e4:2d:02:0d:b9:51:
3e:63:a9:67:75:47:da:aa:18:bb:7e:56:f0:41:28:f7:db:af:
f9:dd:12:b2:61:bf:9f:d7:aa:26:6f:57:c7:01:d9:de:15:cc:
47:06:bc:f2:c5:55:49:dd:0e:43:d5:49:2d:ad:b3:31:9d:c0:
c7:92:04:0f:22:d6:60:25:f4:9c:1b:21:94:34:cc:a0:31:ce:
83:10:23:18:5f:7e:35:99:37:4b:22:2a:9c:33:dc:35:7b:27:
6a:1f:ca:00:01:e5:d5:2e:ba:42:a2:8d:6e:c0:6d:2e:db:43:
52:1e:da:7f:06:85:52:88:ac:e9:d7:d6:6d:59:88:09:fc:ab:
35:5b:2e:39:ef:a0:c2:9b:3f:70:85:a7:9c:7f:1d:6d:d7:e5:
68:b3:82:c4:e2:97:ce:ad:69:1b:bb:30:69:e1:4e:1c:b7:26:
04:54:fa:e8:01:f2:05:aa:11:2a:46:7f:3f:1a:7a:25:ba:3e:
c2:36:77:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:13 2026 by rpki-client