Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier: rS5MuW7RsRupVj7jjfvcUe0G8HVR7eiPmF/geujpBbs=
Subject key identifier: F9:14:14:29:FF:6A:E4:7C:C0:FA:22:55:78:C6:90:A2:3C:99:95:CA
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 019D37C0A040770FE3F70EBA9782D88519E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 04:01:03 +0000
Manifest this update: Sun 29 Mar 2026 04:01:03 +0000
Manifest next update: Mon 30 Mar 2026 04:01:03 +0000
Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: mlrc5qajh14pgDdzza5biolgVp8jLJ0QQiwrQJa7eCA=)
2: F_LtpihnOZSFHJv85nIVJ4V102M.roa (hash: 8yvnxuLRYXxGLDUJznrlW7WBOZGiJ5tUpgMx642UXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a0:40:77:0f:e3:f7:0e:ba:97:82:d8:85:19:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Mar 29 04:01:03 2026 GMT
Not After : Mar 30 04:01:03 2026 GMT
Subject: CN=f9141429ff6ae47cc0fa225578c690a23c9995ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:2f:14:d1:c9:71:fb:f7:1d:79:d1:e8:42:
17:f9:3b:78:28:11:67:28:a4:8e:47:0b:35:37:db:
91:87:bc:79:58:f6:24:80:20:0f:4f:15:89:d6:0f:
15:b0:09:a4:71:92:c3:1c:38:48:bf:71:c8:d2:fb:
a2:26:2d:d4:51:ca:73:7a:ec:77:19:09:98:86:1b:
a9:ee:ab:6b:7f:47:3f:1c:7f:50:b3:f2:91:48:e6:
95:1b:03:1c:6d:7b:2e:63:3b:48:fa:7a:a3:33:a1:
08:f3:30:c5:c8:c2:9c:e6:55:40:8d:32:f5:df:8a:
d7:ff:5d:69:99:27:05:09:78:1c:17:d5:64:1c:e8:
4f:b7:12:1a:c5:5f:26:6b:7e:57:01:d7:56:7a:90:
2b:5b:39:69:c8:41:a3:4f:0f:a9:49:7c:a7:a0:0e:
28:71:a6:c2:b8:b2:66:e7:5e:78:83:87:31:5b:b3:
6a:e0:e8:5d:7d:4a:3c:46:98:84:5a:63:aa:63:68:
77:3b:84:e3:52:0e:ea:66:c9:ef:c5:87:e1:23:95:
42:d0:21:d0:f3:2e:56:57:0e:6d:ed:c5:f4:06:af:
ab:14:95:45:42:e7:ab:f7:09:75:8d:b7:ba:17:b2:
76:71:fe:43:52:bd:36:32:22:31:d4:74:61:11:2b:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:14:14:29:FF:6A:E4:7C:C0:FA:22:55:78:C6:90:A2:3C:99:95:CA
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:20:bd:bf:f4:e2:52:df:61:b6:b3:45:01:19:95:80:46:1e:
d0:98:22:b4:df:50:cc:a1:5d:bf:df:52:9b:7a:a1:e2:8e:11:
1a:d6:5f:93:a8:30:c8:bb:09:81:42:cf:c8:78:12:45:76:20:
3b:7a:48:70:0d:73:33:91:d1:28:5f:53:28:41:80:47:e7:9c:
fb:33:50:7d:b3:a8:06:ce:cc:52:07:89:94:ad:4c:45:96:25:
89:01:c2:3d:a8:7a:bf:34:30:01:ad:cc:6f:12:fd:c1:28:3b:
3d:ae:aa:a5:8e:c9:7a:b1:1e:a1:9a:52:ef:8e:fd:c9:71:b2:
11:89:46:23:e5:aa:cc:1f:02:86:9a:92:f9:b7:01:fc:43:63:
8a:81:b7:67:7f:b1:15:0e:66:0c:2a:e0:91:8e:3e:2b:cc:f0:
ab:7a:5a:c7:b4:96:c7:2d:f0:8b:1a:02:d1:8c:16:b0:98:45:
2d:d8:85:21:38:77:15:06:09:24:14:c6:ef:ae:a3:e3:7d:51:
2f:4f:2a:4f:d4:03:5e:af:41:5d:4f:cf:47:af:59:61:b1:00:
82:93:a8:ab:45:bd:ac:c7:9c:83:42:5a:bc:2c:b7:31:da:08:
9a:42:06:26:4d:dc:fa:78:32:57:0c:76:29:67:1a:35:3f:f4:
59:6a:e9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:36 2026 by rpki-client