Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File: t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier: iqzfPvCwVnOBID0qWjr7t1A1lpoKK14Xhqj5eQ2EBUE=
Subject key identifier: 56:0A:C6:1F:1E:F2:98:2A:73:E7:37:4F:08:AE:3D:12:1A:44:57:F3
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer: /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial: 019D390A18D616596B67280C2284B728809B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number: 1633
Signing time: Sun 29 Mar 2026 10:00:56 +0000
Manifest this update: Sun 29 Mar 2026 10:00:56 +0000
Manifest next update: Mon 30 Mar 2026 10:00:56 +0000
Files and hashes: 1: QkD6kvbjOFF159SqIoxtVy6uYtw.roa (hash: moRNSt3cT3MEpll0Dp7Um5vSYqeXw33T13RgwrHAltU=)
2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: wiL+31HVKjyw4XN8hU1ES8R0/mhOyW+zKgWcv0CnvV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:18:d6:16:59:6b:67:28:0c:22:84:b7:28:80:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Validity
Not Before: Mar 29 10:00:56 2026 GMT
Not After : Mar 30 10:00:56 2026 GMT
Subject: CN=560ac61f1ef2982a73e7374f08ae3d121a4457f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:18:93:33:8c:71:9b:db:b6:be:b7:a4:25:
d9:5b:68:75:79:82:51:a7:bb:c9:d2:9c:55:95:17:
f2:9b:5c:04:57:f4:9f:d1:b1:7d:40:bb:44:45:86:
10:2d:44:d8:20:ba:b2:6d:ed:86:0a:b9:ee:0d:a1:
76:ab:a7:e1:5d:b8:0d:4b:3a:25:0b:9d:2d:85:59:
42:13:77:3e:96:39:e8:5c:9e:6a:ee:b2:fe:ec:b5:
52:2d:a4:e9:42:29:bc:6e:b6:f8:86:6e:bc:ec:a5:
85:95:6c:a2:12:0f:07:de:89:8a:21:10:4d:b5:7b:
f4:00:9e:00:ce:00:79:d8:58:44:c8:57:e6:1d:b1:
ee:8e:76:e3:51:d5:04:00:bd:58:0c:ef:18:99:e3:
ef:0f:34:98:9c:bc:1c:15:16:47:6b:24:0a:34:d4:
93:58:47:ab:9d:47:b2:c6:96:2a:c7:8a:00:0c:63:
ea:57:62:7a:df:fb:2c:13:b6:c7:99:e5:12:4d:4f:
c1:e8:e0:64:29:d0:b1:b1:82:25:51:f9:3a:24:e5:
ef:b4:54:21:3d:d2:e2:20:1e:8f:a1:ad:04:a2:ff:
de:d2:93:79:f6:7d:c8:4c:ac:5e:4e:d9:cc:ff:17:
d5:ee:35:f9:88:54:0d:b5:ff:38:5d:0b:ff:1b:a4:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0A:C6:1F:1E:F2:98:2A:73:E7:37:4F:08:AE:3D:12:1A:44:57:F3
X509v3 Authority Key Identifier:
keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:48:d2:0f:64:4f:d5:95:22:bf:e8:62:e9:47:8a:a5:24:16:
90:c0:29:e3:83:cc:f4:bc:e3:92:76:96:70:34:ae:4f:9b:2b:
7d:1c:21:27:e6:43:07:c1:c5:20:5b:4d:bc:98:e8:d4:2d:85:
d0:1c:d0:2d:23:fa:03:7f:96:38:f3:23:27:25:00:d4:55:c7:
94:37:a7:e6:0b:57:36:73:1c:14:b0:e4:76:8e:8d:17:c6:42:
48:17:4c:4e:86:25:0a:46:f8:6d:5b:66:8d:4e:0e:11:11:e6:
5f:43:62:fa:a2:97:79:32:8b:31:da:2b:1e:a8:ad:35:5d:3c:
f3:a0:e6:4d:91:ec:f5:79:3a:77:17:d0:87:ea:fe:30:dd:60:
fd:45:6b:5d:57:b2:14:0f:b6:04:f6:e1:36:e8:d4:51:bd:30:
e1:4f:0d:3e:9c:75:0f:77:25:44:00:14:da:3f:91:b8:bb:12:
6c:84:21:dd:6f:b7:19:34:c6:1e:34:27:c1:fe:80:c9:0d:7c:
8b:1d:00:23:0c:f8:90:91:ae:76:01:35:de:b9:66:9e:e6:d4:
0d:e5:49:18:a5:1e:8d:59:1b:f1:9b:e8:1b:ba:d5:98:48:2e:
25:02:d3:7f:f5:d7:6a:8e:b8:01:af:30:90:c8:f9:d3:e5:0a:
d2:92:d0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:18 2026 by rpki-client