Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
File: m9ReJgecMchSFrcwDNjmMw1D1a8.mft (raw, json)
Hash identifier: tcakJgSvBJsG7e12ccMVgHEkhzk2sPC+3VCpJXKHuUA=
Subject key identifier: 00:40:E3:AF:25:97:FD:EE:5B:BD:89:0F:C3:A6:C3:FA:3D:E8:17:25
Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
Certificate issuer: /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Certificate serial: 019D37F6FC5BD13360BC7BF9E6201BBDC646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
Manifest number: 0320
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: eRcv9H0kj-nbfOiGSSrJz38IxLU.roa (hash: DewykMuWLgPE2A0H2gavCxDnLQ8/NmjjeAOgscMAs70=)
2: m9ReJgecMchSFrcwDNjmMw1D1a8.crl (hash: t0e18cYykOVOOAwAqElkVtm0LW3EZjvkXBr20BX/L4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fc:5b:d1:33:60:bc:7b:f9:e6:20:1b:bd:c6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=0040e3af2597fdee5bbd890fc3a6c3fa3de81725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:24:e6:14:0b:0d:0b:2f:25:72:b0:26:0e:
18:cb:ea:5d:07:d3:cc:eb:06:5a:f2:54:fa:64:62:
ee:2b:b6:9b:42:80:cf:32:8b:48:dd:9f:f4:e4:93:
7a:62:69:4a:fc:c7:d4:3b:55:40:cb:1f:40:41:32:
98:db:d9:66:0b:ed:24:ec:94:97:c7:14:c7:4e:d9:
92:df:1f:a9:27:9b:55:02:03:2c:34:64:14:1c:3e:
f3:cd:00:76:ef:34:f8:2f:26:c3:07:ed:0e:fd:54:
0f:9c:31:55:63:22:c6:98:5a:5b:97:fd:31:71:56:
ad:ad:e1:95:7c:08:55:8c:f7:29:c4:de:2c:55:34:
c7:f2:9f:2c:c2:c5:6b:8a:65:cd:26:dc:2d:04:dd:
ed:0b:e7:c1:59:6d:e0:d1:99:e1:69:d1:34:12:71:
c2:3e:a0:a2:a3:c8:d2:e0:f2:d7:9f:a9:58:1d:0e:
07:bd:29:bc:06:e3:c3:be:8d:56:0c:79:dd:7e:64:
f4:6f:5c:7e:13:a1:89:5b:ed:7c:77:43:5c:03:0c:
0a:2c:40:12:37:a9:b0:a5:dd:fb:31:31:c4:5e:96:
e0:12:9a:f8:ea:08:10:a2:d4:35:4b:15:3b:87:1d:
97:c5:1b:2e:08:26:37:04:a0:38:43:a0:e9:b9:aa:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:E3:AF:25:97:FD:EE:5B:BD:89:0F:C3:A6:C3:FA:3D:E8:17:25
X509v3 Authority Key Identifier:
keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a7:59:ca:22:b8:f5:7c:b3:01:da:13:48:64:20:82:90:fb:
ef:91:83:1e:0a:ab:ee:07:f9:01:8d:e6:57:b8:d0:14:51:fb:
eb:bc:3f:43:ea:c1:fa:15:d3:52:8a:85:cf:c1:8e:66:f0:30:
c6:4e:47:98:48:23:ee:ac:cd:bc:f0:6e:42:6a:c8:99:dd:d3:
96:97:d4:63:fe:df:03:fb:4e:df:b6:4e:32:8d:c9:69:3b:11:
3b:e7:f8:d1:13:cf:9b:92:f7:f1:92:1f:f8:7f:5f:83:c7:c2:
e0:e1:12:9d:1f:08:f2:0e:1a:3e:cd:5e:e9:34:d0:7d:eb:35:
0b:c6:9f:a8:d0:57:9b:60:41:36:e5:52:c0:5d:ea:7d:33:1a:
f0:0f:49:8b:90:1b:b5:29:fb:0b:41:15:ca:73:b9:af:85:3b:
86:8c:3e:bd:14:76:94:39:c6:db:f0:21:cc:3f:39:6b:87:00:
84:58:78:ff:e9:92:8b:09:9e:93:c1:d8:10:e1:08:10:03:cc:
04:77:90:e8:b2:e7:b9:cb:87:1a:dc:6d:15:49:eb:78:d3:80:
93:9a:31:b0:3e:3c:aa:d4:56:a5:e9:0b:9a:a0:d2:fb:c0:85:
37:17:55:f6:b0:c8:10:de:44:da:93:96:04:36:78:bd:8e:d8:
c2:a2:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:11 2026 by rpki-client