Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
File: 9vojpSZFyW2w3bFNJPa08FWfvis.mft (raw, json)
Hash identifier: p8ZchIMhR0TQvr/eY3c/ol87OLdGhKag1rI7F6oXcBc=
Subject key identifier: 43:A2:54:6D:33:DB:FA:02:EF:68:60:24:BD:9F:15:76:EE:1A:2E:50
Authority key identifier: F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
Certificate issuer: /CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Certificate serial: 019D303D9C393C1A91219F8A4B5DB48F80FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
Manifest number: 8B
Signing time: Fri 27 Mar 2026 17:00:37 +0000
Manifest this update: Fri 27 Mar 2026 17:00:37 +0000
Manifest next update: Sat 28 Mar 2026 17:00:37 +0000
Files and hashes: 1: 9vojpSZFyW2w3bFNJPa08FWfvis.crl (hash: YaCQqMAdLnLNOS78FTqL5AxQ1ZHqUCghjejVnXyeAYw=)
2: Y05s2C2gAhXtNYGjGMDlYLY9J1o.roa (hash: iorVZeRHEyFOVeQ+otFT4qEcKzaY5W8TFT5LOqiFu0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 15:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:3d:9c:39:3c:1a:91:21:9f:8a:4b:5d:b4:8f:80:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Validity
Not Before: Mar 27 17:00:37 2026 GMT
Not After : Mar 28 17:00:37 2026 GMT
Subject: CN=43a2546d33dbfa02ef686024bd9f1576ee1a2e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:3a:04:3f:be:f5:19:aa:23:c7:3c:87:3e:
46:2e:a1:ef:81:19:eb:04:9f:e2:ab:37:69:1c:d5:
6d:9e:f2:5e:c8:63:88:38:68:1f:84:f7:df:e4:27:
0c:75:7a:78:9e:bd:84:d9:d0:93:c3:07:2d:cb:00:
be:0e:2b:c2:b3:24:ef:67:ab:9a:c5:4d:0f:3f:f6:
65:fd:02:0c:88:41:0f:a0:bc:9e:bd:1f:2f:9e:ef:
c2:72:c9:7f:cf:13:48:c0:57:e6:ac:de:2c:59:3c:
b3:7f:cd:fa:36:97:7c:37:c8:24:46:6d:f0:f0:d8:
ef:66:30:dc:78:b0:83:5e:32:5e:93:c5:1f:06:18:
50:26:6b:0f:a7:a6:b9:42:02:d6:72:32:86:8c:06:
db:61:8e:f8:ef:fc:93:e0:60:44:e7:89:a0:e6:75:
4c:66:f2:37:47:fe:93:70:c3:90:4a:15:5e:16:6d:
4a:22:3f:aa:c0:f0:26:7e:7d:94:06:ea:fb:4e:1d:
ef:ab:51:f5:b8:ea:82:62:d0:4d:85:9f:6d:5b:33:
5b:14:4c:ba:0d:a2:db:c5:32:d1:7f:83:3a:6b:fa:
f1:57:50:77:af:a5:85:e5:5b:4e:b9:89:a5:cc:fd:
37:14:ad:ec:ce:88:bc:11:ed:5b:98:9a:f5:fc:18:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A2:54:6D:33:DB:FA:02:EF:68:60:24:BD:9F:15:76:EE:1A:2E:50
X509v3 Authority Key Identifier:
keyid:F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:42:9c:72:19:3e:a9:91:35:55:c3:9f:94:25:07:14:a2:b7:
01:56:a4:92:3c:ad:ae:07:bb:13:9f:f1:a0:02:09:95:ce:7a:
c4:4e:db:e2:d0:9f:9e:8f:46:23:c4:dc:65:16:d7:f3:3a:f3:
dd:68:af:5e:26:be:4d:19:39:eb:1e:b6:5e:fd:65:de:4d:db:
09:fa:73:67:e8:8d:37:ff:5d:cb:0e:c3:cb:bc:c4:69:b0:18:
58:88:b0:08:79:30:fa:aa:ec:fc:09:63:15:95:b1:5c:e2:fb:
5f:46:9b:cc:5d:75:4c:ba:ae:26:7c:1f:82:8d:a3:57:25:23:
85:c5:a3:f7:4a:51:51:c9:00:a5:b1:c8:39:08:dd:99:c1:72:
30:f7:a5:7a:b4:4d:a1:04:7c:9e:15:d8:ab:c1:28:37:bf:bb:
4e:cb:4d:98:d0:31:8c:86:25:14:e3:49:36:38:0e:45:21:d6:
b2:36:b6:08:be:e5:18:b8:ee:8b:f4:69:a1:5a:29:1d:9d:9c:
c9:67:5a:51:d7:52:90:36:9d:09:d1:36:e3:4b:7f:55:59:8a:
9c:b1:2d:ee:64:ee:43:6f:8d:d8:56:b8:41:2e:72:b7:d6:95:
e8:9f:16:dd:9e:a6:3b:61:fd:32:1d:60:e3:1c:9e:31:3f:be:
8a:15:65:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 22:22:42 2026 by rpki-client