Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
File: 9iZUZY9nKqzzcTO1xxz0sRwYado.mft (raw, json)
Hash identifier: TH/i5g4v0tyEhdtDc+7/wqQZFyg2actOrhHB2QTQnyc=
Subject key identifier: F1:A0:95:10:84:D4:2C:62:0C:0B:FF:48:5C:FB:C4:61:D7:6D:79:53
Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da
Certificate serial: 019D39415F1113A297B3BA63A2EB5D801D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
Manifest number: 039A
Signing time: Sun 29 Mar 2026 11:01:18 +0000
Manifest this update: Sun 29 Mar 2026 11:01:18 +0000
Manifest next update: Mon 30 Mar 2026 11:01:18 +0000
Files and hashes: 1: 9iZUZY9nKqzzcTO1xxz0sRwYado.crl (hash: EcQ2ivT+gJ2eEFibqZyFymLwCJKoYcumSURo9L2RpU0=)
2: tvMXQZLl7Wysz_xvdn4KxR27LYI.roa (hash: DS+mGSmFWnDI1NNRJFgUsn5iaFW320NJTO3U5Mk3hfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5f:11:13:a2:97:b3:ba:63:a2:eb:5d:80:1d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da
Validity
Not Before: Mar 29 11:01:18 2026 GMT
Not After : Mar 30 11:01:18 2026 GMT
Subject: CN=f1a0951084d42c620c0bff485cfbc461d76d7953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:69:30:d6:af:5d:06:e3:04:81:1e:b6:9d:
30:a9:72:07:70:3b:a9:a3:a0:93:ed:63:8f:58:d3:
c9:7d:07:70:40:d4:05:40:c1:d9:07:2f:5e:7e:74:
56:9a:99:70:7f:e5:f3:f7:7c:c5:db:30:dd:0b:7f:
f4:90:a7:55:65:1a:d5:26:21:e1:f5:b8:56:20:89:
25:32:7e:23:0d:64:24:da:86:43:6f:ec:00:fa:2f:
e1:e0:77:f2:cb:3c:6f:79:bc:c8:7a:73:5e:1e:6f:
4f:1d:66:0d:83:6a:fd:ce:be:60:ec:47:88:fd:bd:
94:f0:59:ad:f0:72:4d:f1:8a:22:ea:26:b7:48:63:
28:55:e2:2c:d9:8d:2f:15:f4:e5:e3:0b:40:05:98:
97:4d:14:7c:a4:84:b3:05:69:60:66:65:08:61:da:
d5:21:bb:27:42:7c:73:a7:06:2d:82:1b:3e:ca:ff:
ed:66:8d:25:e6:3a:24:76:cc:7f:9b:cb:08:02:0d:
9e:4c:c9:5c:61:53:e9:ee:af:ec:45:77:c2:14:8d:
76:ad:a9:27:72:e6:0a:d4:36:1b:56:cd:35:86:98:
ed:d7:a3:ff:31:b2:15:01:b7:bd:fa:61:90:f5:bc:
72:91:0c:e4:65:dc:27:60:1d:80:87:0b:9d:9e:b2:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A0:95:10:84:D4:2C:62:0C:0B:FF:48:5C:FB:C4:61:D7:6D:79:53
X509v3 Authority Key Identifier:
keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d8:e6:0a:68:cd:5c:9e:5a:34:63:48:18:e8:b5:f6:cc:e3:
7f:ee:07:cb:f3:76:78:6e:9a:ae:37:03:68:cf:8d:6f:51:f9:
94:e7:9b:2b:5f:8d:40:51:2b:be:45:f4:d6:3a:7c:cb:2d:5d:
e0:0b:57:cf:e4:1a:c8:77:c2:bb:db:50:d9:39:aa:df:40:25:
88:ef:14:f8:51:ea:07:a5:49:ac:f2:58:00:b8:e1:c8:c6:4f:
02:76:b4:c1:0c:9c:9d:af:0e:98:18:a5:8b:b4:4e:b8:e1:94:
e8:d1:5c:44:56:c1:f1:7b:9f:70:d6:8b:14:e4:69:85:c0:15:
d2:1f:07:78:54:72:b8:e8:ad:79:c8:0a:3a:fc:0a:22:ae:36:
8c:f9:e5:83:39:eb:65:69:1c:95:62:15:4a:38:38:15:c1:48:
50:a2:1f:41:ea:17:5f:be:ce:d3:42:13:bf:ad:31:c2:0a:6f:
56:ee:37:a3:34:65:17:17:4e:54:8a:77:60:ee:cb:46:68:96:
52:1f:44:77:87:33:61:a6:77:7f:88:03:d8:33:c7:5a:b8:f4:
95:fc:b0:fc:fd:57:3b:85:81:3b:90:1a:68:77:14:66:8b:71:
a2:b3:a8:94:dd:07:9b:0a:91:3f:dc:36:5d:e2:4f:11:f3:74:
e7:38:d2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:04 2026 by rpki-client