Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478859-33b6-4209-874c-ff8061c04983/1/9_3qS2LU6B_zmbXzUffUHdmFMBM.mft
File: 9_3qS2LU6B_zmbXzUffUHdmFMBM.mft (raw, json)
Hash identifier: HFguJAqtNennzdSLnar2vJxLY1Mp4HqG7WgjhCHGuEo=
Subject key identifier: DD:66:47:98:75:2F:48:55:B4:C1:CB:99:B7:38:04:4A:14:46:77:9B
Authority key identifier: F7:FD:EA:4B:62:D4:E8:1F:F3:99:B5:F3:51:F7:D4:1D:D9:85:30:13
Certificate issuer: /CN=f7fdea4b62d4e81ff399b5f351f7d41dd9853013
Certificate serial: 019D3A1CB7EA776515D4F8F3EB71BF569701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_3qS2LU6B_zmbXzUffUHdmFMBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/478859-33b6-4209-874c-ff8061c04983/1/9_3qS2LU6B_zmbXzUffUHdmFMBM.mft
Manifest number: 32
Signing time: Sun 29 Mar 2026 15:00:53 +0000
Manifest this update: Sun 29 Mar 2026 15:00:53 +0000
Manifest next update: Mon 30 Mar 2026 15:00:53 +0000
Files and hashes: 1: 9_3qS2LU6B_zmbXzUffUHdmFMBM.crl (hash: N/xz+OS8DrDfS2Z5jLh5wMfsN/GBHwsWYrzV1NS5efo=)
2: CtNORuVO9amDfbrT8bLmuwrDZoQ.roa (hash: 8NWsWV2rx6tLevR3uT/QovSODoBm8xXHfChhblRryyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/478859-33b6-4209-874c-ff8061c04983/1/9_3qS2LU6B_zmbXzUffUHdmFMBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/478859-33b6-4209-874c-ff8061c04983/1/9_3qS2LU6B_zmbXzUffUHdmFMBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_3qS2LU6B_zmbXzUffUHdmFMBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:b7:ea:77:65:15:d4:f8:f3:eb:71:bf:56:97:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdea4b62d4e81ff399b5f351f7d41dd9853013
Validity
Not Before: Mar 29 15:00:53 2026 GMT
Not After : Mar 30 15:00:53 2026 GMT
Subject: CN=dd664798752f4855b4c1cb99b738044a1446779b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:db:8b:c8:b6:0c:64:92:bc:37:c7:70:8c:
3f:78:05:dc:2e:e7:d7:5d:d8:30:d0:ff:35:06:8d:
86:5f:ec:91:37:41:e6:1a:29:28:63:27:fa:ff:f1:
27:0f:6e:dc:9d:58:88:35:ca:76:89:e2:0d:d4:a8:
75:d1:66:59:37:f2:7b:de:3f:5f:df:d9:4d:a2:b7:
cc:5c:0f:06:32:5b:ed:6a:f9:60:ae:49:d1:ba:cf:
2b:d3:5b:15:85:30:e3:5a:e1:5d:00:78:10:f6:f9:
cf:aa:00:89:5d:0a:dc:db:af:fd:25:b8:78:42:c0:
2a:ff:61:d7:42:f6:90:0e:07:f8:cd:0f:54:f7:57:
5d:86:db:da:51:1f:1b:1b:f6:00:0a:2e:a8:db:4a:
19:6e:64:56:f8:bc:fa:80:63:28:c9:f1:b6:87:72:
49:3a:70:b8:ea:5c:8e:d9:4a:62:1f:23:7e:89:a2:
6b:a5:5e:9e:17:04:09:93:93:e0:83:6b:c1:b7:9e:
3a:3b:ac:2e:07:db:38:1c:a3:c2:08:d3:9c:e9:23:
ae:40:91:d5:59:d7:63:c2:c4:4e:52:5d:65:e3:a7:
2b:01:cf:bb:1c:e0:85:d9:97:30:a5:cc:16:26:31:
24:23:85:e5:0d:10:f3:a9:7f:79:b1:d8:cf:fa:5d:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:47:98:75:2F:48:55:B4:C1:CB:99:B7:38:04:4A:14:46:77:9B
X509v3 Authority Key Identifier:
keyid:F7:FD:EA:4B:62:D4:E8:1F:F3:99:B5:F3:51:F7:D4:1D:D9:85:30:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_3qS2LU6B_zmbXzUffUHdmFMBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478859-33b6-4209-874c-ff8061c04983/1/9_3qS2LU6B_zmbXzUffUHdmFMBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478859-33b6-4209-874c-ff8061c04983/1/9_3qS2LU6B_zmbXzUffUHdmFMBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b0:e8:42:38:cf:18:6e:0d:e7:92:e8:55:50:fc:12:fb:69:
c1:19:c0:54:39:3d:de:cf:13:9b:28:4b:ad:5c:51:50:a8:a2:
89:26:54:1d:59:9f:97:11:4e:c5:30:59:00:9b:ba:14:e3:c4:
9a:2c:10:c3:f5:15:d5:de:0f:e9:67:09:de:ad:ee:a6:3c:e0:
1d:f1:20:6c:91:e0:a4:71:e8:20:fc:3c:ea:a9:43:59:91:cc:
0e:c8:3d:56:00:9c:dc:d5:90:36:0a:b5:d1:80:c7:10:6b:99:
f4:8c:90:8d:81:63:18:af:e6:21:e7:33:d0:63:ef:b3:43:a1:
3c:ec:4d:30:ab:19:42:52:43:fb:9d:fb:9b:11:11:dc:2a:ea:
34:c8:94:1e:7d:d1:ee:54:ff:97:95:e2:20:11:c7:97:21:50:
d3:33:ee:a6:53:5b:53:ae:b6:41:94:2c:7c:dc:aa:81:f1:de:
38:22:fb:08:9b:a4:e2:a5:13:7f:91:21:30:53:a6:e7:f1:de:
d9:ac:4b:cf:8c:64:80:2a:78:10:bd:9b:4f:6f:2d:84:f7:67:
31:69:fb:a5:2a:f2:93:80:6e:ad:42:d0:6a:1b:8d:e3:c8:c7:
84:79:2e:2b:24:c1:ea:96:2c:1f:3b:83:7e:b6:6a:36:c0:40:
a3:e5:55:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:21 2026 by rpki-client