Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.mft
File: 9w47e16yTwSxjLZcQmgd2kLVFsY.mft (raw, json)
Hash identifier: UibxZLskWmP7QwKg+5jWihY0Qia8KVSiGZ3zTsow/d0=
Subject key identifier: 5F:90:C2:5F:37:A3:78:5D:8D:C1:E4:55:6F:A3:EC:B6:35:D7:2E:17
Authority key identifier: F7:0E:3B:7B:5E:B2:4F:04:B1:8C:B6:5C:42:68:1D:DA:42:D5:16:C6
Certificate issuer: /CN=f70e3b7b5eb24f04b18cb65c42681dda42d516c6
Certificate serial: 019D38D39E2285C74F6184E33E00B3FD7676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9w47e16yTwSxjLZcQmgd2kLVFsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.mft
Manifest number: 07
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: 9w47e16yTwSxjLZcQmgd2kLVFsY.crl (hash: bUTzeOApc+me4GY8/NGl9R0CLtqLyl1COfQY7ZuKluQ=)
2: kDV5J5gvUfs2AruPi1AigNxO3No.roa (hash: 3eVKTOaVyZXfdZN443tZ94OFDw3eJah+bPWk0bbkQQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9w47e16yTwSxjLZcQmgd2kLVFsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9e:22:85:c7:4f:61:84:e3:3e:00:b3:fd:76:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f70e3b7b5eb24f04b18cb65c42681dda42d516c6
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=5f90c25f37a3785d8dc1e4556fa3ecb635d72e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ce:b2:92:a4:bf:27:a4:6d:e1:e9:a4:a9:c2:
9c:56:4b:b2:fd:63:1d:08:76:d8:84:5f:93:f6:65:
9f:ef:0c:8c:a0:bf:59:64:99:76:9e:0f:c1:0a:09:
d9:9a:2c:0e:70:27:0f:ad:1c:ff:6d:98:7f:a8:10:
91:a9:72:af:68:c8:19:49:60:ee:15:a0:1e:5f:29:
d5:a5:2b:91:b0:83:bc:f4:c9:30:17:bd:34:3c:5a:
e5:8c:f5:da:96:38:74:7a:4a:c8:53:07:d3:c7:7f:
7d:b5:e9:21:b4:69:08:e4:56:9a:c1:a4:db:5c:5d:
44:62:8c:74:d0:99:b6:72:04:6f:fe:ab:9b:ed:34:
58:8e:f8:0b:92:28:e1:ed:cb:f5:c4:8f:b9:a2:fd:
7d:d6:e4:1a:2e:78:22:85:6b:d7:a8:49:2c:ac:ce:
cc:ca:1b:4f:10:45:49:ea:d0:76:d7:1f:2e:f8:05:
c2:5a:ab:38:db:d4:8a:4c:0e:b5:48:a0:c2:3f:5f:
40:2f:ba:62:d4:fe:14:9d:cf:65:25:82:96:df:49:
10:53:70:65:93:31:cc:7d:61:ed:61:af:ff:ab:ce:
97:ce:87:6a:a0:48:c1:a1:37:ab:5a:f3:16:3a:4f:
d5:9a:2f:e7:d7:ec:07:6f:56:57:ac:14:fa:c4:36:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:90:C2:5F:37:A3:78:5D:8D:C1:E4:55:6F:A3:EC:B6:35:D7:2E:17
X509v3 Authority Key Identifier:
keyid:F7:0E:3B:7B:5E:B2:4F:04:B1:8C:B6:5C:42:68:1D:DA:42:D5:16:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9w47e16yTwSxjLZcQmgd2kLVFsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:16:0c:21:bd:51:c4:33:5c:30:e1:03:c6:77:39:4d:cf:94:
ef:61:00:ec:88:d1:d4:51:f0:f9:19:29:92:2d:0a:dd:fd:90:
6f:30:cd:24:38:3f:1b:50:c3:46:a7:54:d1:c4:f4:60:29:bb:
a0:12:67:59:bd:1c:c9:04:8f:41:4a:c2:d0:7b:dc:2a:c3:c1:
ba:09:c8:91:a8:3f:46:66:2d:4e:e0:4d:01:19:d9:e4:fd:1b:
e4:38:39:84:00:35:73:48:89:f8:64:a6:a4:98:8f:84:d1:df:
04:94:17:60:43:0b:41:71:77:1d:30:3f:e1:f4:75:c6:a4:e1:
86:2a:db:a5:46:fc:dd:84:ea:43:72:06:ed:6e:47:f9:b0:76:
35:7c:f7:7e:c2:c5:4d:fd:f7:c4:38:8b:04:52:e3:9d:05:6e:
82:38:78:21:2a:d8:5b:88:b3:16:96:cb:0f:87:1c:04:61:d8:
90:c3:90:1e:ae:be:7a:22:34:bb:6e:e1:0f:99:d3:cf:4d:07:
c2:6a:eb:b5:58:37:bf:94:21:f4:d1:6e:c1:10:27:a5:41:7a:
c5:6a:dc:22:b5:76:2e:31:e1:f1:f3:04:83:a8:b4:c7:d1:d9:
85:23:d0:a6:44:2c:f6:60:ed:37:7c:c8:0d:4d:b5:3d:71:3b:
4a:99:dd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:35 2026 by rpki-client