Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
File: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft (raw, json)
Hash identifier: LH3HwIC/uDr3IdJmzFv8iztdAA7dOFlXN3e3w+FCmhE=
Subject key identifier: 45:A0:5E:50:70:CE:48:5E:F1:23:4B:77:E4:D9:5C:C4:AB:E0:FD:1F
Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Certificate serial: 019D37890F4384533F20395DA59E4C564600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:22 +0000
Manifest this update: Sun 29 Mar 2026 03:00:22 +0000
Manifest next update: Mon 30 Mar 2026 03:00:22 +0000
Files and hashes: 1: apX_x1EULE6OQInOykLn4fvDEsM.roa (hash: Wg0gBA9FtZ5MGhtWvzfiZrQJ2iSQBvq5YHTLEMZVAk4=)
2: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl (hash: 7o3WXY2w/aBpKcLTY/YYUvAWN7eworQ4inA54wLRxGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0f:43:84:53:3f:20:39:5d:a5:9e:4c:56:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Validity
Not Before: Mar 29 03:00:22 2026 GMT
Not After : Mar 30 03:00:22 2026 GMT
Subject: CN=45a05e5070ce485ef1234b77e4d95cc4abe0fd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:c6:0d:7c:a1:fb:5e:19:3c:49:dd:65:aa:
b3:14:93:d8:ae:d1:13:c3:01:3b:1e:1b:c0:2f:85:
61:9a:03:8f:4e:79:35:4a:51:91:ae:e2:93:24:e2:
e3:00:b1:e2:3f:c5:c2:16:14:6f:d7:70:d2:e7:47:
70:41:f0:c4:e3:05:49:6e:2f:53:01:e0:64:40:a2:
c9:86:15:06:75:8b:cb:51:7e:fd:cd:14:dd:6d:dc:
e5:04:50:1b:e5:0f:29:c5:13:e6:01:ec:ad:e4:03:
7a:e2:b9:61:84:0b:82:56:48:cd:2a:6e:2c:13:e4:
d9:d7:4b:c6:00:b2:b1:e0:94:62:5e:b5:91:20:a0:
fa:0c:40:9f:55:8c:8d:92:92:fb:a5:9c:7a:6d:86:
68:bd:0b:86:50:e0:e9:1a:e8:9f:3b:10:97:2a:66:
32:20:20:9b:68:2b:f2:e1:d9:9a:7a:86:05:f4:d4:
33:68:30:dd:50:d9:df:26:ae:bb:22:42:8f:8c:7e:
ca:9f:4e:2d:cb:90:bd:e6:1d:b1:f7:d5:64:b3:2d:
6c:10:48:91:01:28:00:22:90:c1:bd:a4:5a:0b:69:
c9:5d:7e:cf:b4:a9:30:e4:6c:9e:f0:4e:68:65:97:
c0:fd:b8:be:24:04:52:aa:ad:d7:f5:be:79:44:31:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A0:5E:50:70:CE:48:5E:F1:23:4B:77:E4:D9:5C:C4:AB:E0:FD:1F
X509v3 Authority Key Identifier:
keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:38:b0:df:5f:d5:0b:91:75:fd:19:53:18:5a:55:73:31:fa:
71:0d:59:62:6f:52:f2:6e:d9:a1:ab:09:3a:87:8b:91:73:d9:
4e:ec:b1:98:21:a5:d4:9a:b4:cb:1b:90:86:92:ca:47:46:bd:
1e:ad:3a:4c:32:71:92:ca:97:1d:49:f7:fe:79:c7:cc:01:2d:
fe:1b:41:58:e7:e3:31:de:d6:51:55:7e:dc:68:23:71:26:7f:
69:b3:d2:9b:37:99:12:60:49:59:8f:06:06:8b:05:c8:5f:df:
97:f3:ee:d7:85:da:b6:1e:58:3f:8e:f2:6d:a3:d0:99:80:a5:
77:37:37:ca:b9:59:5e:79:e6:1a:56:f9:b9:d7:6c:2f:ea:33:
94:5a:8d:cf:a8:21:5f:2b:e0:c1:7f:bb:b0:5b:0a:7c:6b:ac:
ba:e3:37:5f:e1:f3:9e:aa:04:ca:e7:59:8a:0f:68:32:78:3e:
3f:c9:99:93:c9:26:6d:07:6c:38:aa:14:40:0a:06:31:9a:b0:
32:db:6d:5d:86:77:ea:e7:25:7a:69:48:28:62:ca:7d:bd:77:
80:12:6e:22:c9:34:27:65:79:ac:fb:24:52:6e:72:88:a0:24:
3d:19:6d:81:a1:e9:be:0b:0a:d8:b1:de:9a:f8:e9:f4:dc:70:
b0:8a:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:48 2026 by rpki-client