Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier: AgiQNrErYH1C/vLGHrbc1fCyW+EGsVJ+2SKnwQdY1kY=
Subject key identifier: 5C:74:B7:FA:DF:FD:75:53:5A:A2:6A:6F:E6:33:28:43:66:A5:08:F2
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial: 019D37F719925865E6C9CE75AE51D0864F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number: 1417
Signing time: Sun 29 Mar 2026 05:00:33 +0000
Manifest this update: Sun 29 Mar 2026 05:00:33 +0000
Manifest next update: Mon 30 Mar 2026 05:00:33 +0000
Files and hashes: 1: G6WXhyvVtMAy_hDzbTynLKDz6nI.roa (hash: hU50SCH6HViVYgZI7FoCwUv3dNNmWkj31LMFtbg1FRw=)
2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: Ckd3dS3V4oCqlOxVSeh9zVNNTxDUatkXGyaAzagKmv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:19:92:58:65:e6:c9:ce:75:ae:51:d0:86:4f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Validity
Not Before: Mar 29 05:00:33 2026 GMT
Not After : Mar 30 05:00:33 2026 GMT
Subject: CN=5c74b7fadffd75535aa26a6fe633284366a508f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6b:ce:b7:e8:24:d2:6f:bd:0f:f3:9b:3c:4e:
6d:bb:b9:62:e2:f7:e2:a7:34:23:55:d7:63:1a:4b:
bf:3c:f0:81:b5:86:73:a7:00:6d:13:d4:2f:ff:55:
ee:35:fc:1d:e0:1e:bb:4c:96:75:0d:4b:56:4f:d9:
8f:cf:d8:8d:1c:c2:ca:bf:37:fe:54:a6:80:17:ef:
55:ab:c9:af:a1:17:7d:45:e6:a4:ce:2f:a1:e6:d7:
8e:c1:3f:23:b1:be:87:ac:b2:87:47:b9:02:88:f9:
db:5e:34:be:fe:7a:c1:4e:75:53:d2:21:ea:21:24:
25:be:98:c6:10:b2:5f:b9:0e:e3:02:c8:de:1d:e8:
e2:71:99:41:c1:b5:d8:0c:d9:91:28:9f:f7:ac:38:
ac:64:95:e0:be:57:7a:9b:6a:9e:51:97:f7:55:4b:
b0:1a:f9:c5:e8:92:22:d2:b8:e1:22:57:0a:f2:c9:
e9:44:9a:fc:70:b1:0f:b6:99:2c:95:f5:24:3f:ad:
ca:73:73:fe:8c:48:90:f0:c0:35:e1:1a:75:90:0b:
1c:00:41:83:9f:6c:37:d1:a8:52:f1:03:44:5c:3f:
de:24:2c:7b:49:08:67:67:8b:3c:f3:67:69:f4:f5:
6d:38:55:8f:90:8d:8c:fd:44:7b:13:1b:f8:0e:96:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:74:B7:FA:DF:FD:75:53:5A:A2:6A:6F:E6:33:28:43:66:A5:08:F2
X509v3 Authority Key Identifier:
keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:24:bf:40:a5:16:cc:59:54:5d:50:85:ea:6a:6d:86:49:13:
1c:a5:cb:8a:13:e3:d2:ae:75:77:dc:99:35:51:5e:b4:b2:2b:
50:78:c1:17:52:b5:18:7e:9c:fc:5c:f8:57:f0:95:76:fd:f0:
ce:83:e2:a0:43:9b:4c:16:b3:5b:61:91:57:fe:64:46:db:68:
8e:53:fb:d5:25:7c:be:47:9e:00:c0:d5:c0:f5:df:d2:1a:c5:
d4:49:f2:ba:7f:7b:a2:1a:b3:f7:12:73:7e:9c:f2:48:d0:3c:
32:57:24:16:38:bf:52:7a:1b:7b:ed:5e:96:7f:5b:2a:2d:91:
1d:45:43:65:68:56:13:df:b0:4c:f7:d7:0c:97:2f:3d:83:1d:
ba:37:d2:29:3b:64:53:82:0c:54:1f:7f:8e:e4:fc:dd:ec:f6:
22:bd:78:80:01:4a:40:50:0f:0b:4e:91:e4:75:f5:79:68:71:
5f:91:36:0f:a5:46:35:88:be:e4:7c:0c:dd:8d:4a:28:85:6a:
c9:0e:2c:cd:f6:a6:f5:b3:61:d0:08:7e:eb:e7:eb:0d:a2:92:
6b:14:54:c9:a8:54:df:07:9b:c4:f4:54:8c:7b:ce:da:0e:91:
75:92:12:54:b7:44:12:01:e6:2f:18:c5:bd:49:08:39:77:a3:
97:c9:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:27 2026 by rpki-client