Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: lDK4jd/FAkw1sS0F0WzH3tgQK5DAEZ0OUq/uALm8Wzg=
Subject key identifier: 88:53:36:93:6B:50:02:2F:AF:6B:EC:77:03:D3:5B:80:05:E4:9E:F4
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 019D39E5BCADAB1A7AD516A462BE51F3E824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 14:00:50 +0000
Manifest this update: Sun 29 Mar 2026 14:00:50 +0000
Manifest next update: Mon 30 Mar 2026 14:00:50 +0000
Files and hashes: 1: 4ghPvO8O8ubg-UpOgj-hc0SbXTA.roa (hash: JypQzsIdWOc7a9gykbPnzDsycctJC1lDHtCOuiPvEAA=)
2: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: a0ae59/xDYSCAWpywcxGY+FsLvlhyrAF6EboC2qOsR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:bc:ad:ab:1a:7a:d5:16:a4:62:be:51:f3:e8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Mar 29 14:00:50 2026 GMT
Not After : Mar 30 14:00:50 2026 GMT
Subject: CN=885336936b50022faf6bec7703d35b8005e49ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:d3:59:39:be:09:ca:f8:ad:67:b0:c3:cf:
bb:e6:26:eb:74:23:27:3b:15:bb:58:fe:2f:57:23:
19:1a:4e:0e:c0:fb:c2:ab:0c:1a:2c:e3:d7:df:ec:
66:f3:a5:e4:80:79:e2:70:53:18:89:b6:10:24:03:
08:ee:83:01:4a:cf:12:08:69:07:d2:fb:56:7b:b3:
cb:94:ac:fa:58:c7:11:94:ef:7e:33:80:a5:9d:00:
1e:ae:5b:95:36:c2:8a:e7:9d:e6:c8:a7:48:4a:26:
a2:aa:fe:88:be:16:dc:12:34:ba:e6:0a:cd:fc:7e:
56:a4:4b:49:9e:0a:1f:40:4c:44:79:b5:0e:3c:4a:
6c:8e:6a:dc:20:d8:65:dd:74:6c:22:83:23:76:be:
ff:02:2d:8e:2c:7b:1f:35:80:8b:fc:45:85:ff:a7:
bf:29:84:55:2b:7f:5e:41:60:81:0f:ef:4d:4f:35:
94:c9:69:8c:91:5b:e7:97:b6:67:0d:ff:42:3e:3f:
b5:c5:62:27:e7:a0:21:d4:91:88:68:aa:e8:76:94:
ce:72:8d:f7:28:cb:ac:65:86:3e:10:c2:cc:5f:78:
80:90:40:20:2c:bc:76:f5:66:f3:2b:22:cd:4e:c3:
0a:ba:66:61:44:6f:e3:5d:5e:d5:01:9d:1f:72:40:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:53:36:93:6B:50:02:2F:AF:6B:EC:77:03:D3:5B:80:05:E4:9E:F4
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:98:14:6a:71:30:76:be:be:ba:87:0b:1a:c0:1e:67:45:2f:
0a:d1:9e:22:74:20:6f:8b:d5:38:aa:db:a9:25:91:13:71:bb:
85:16:f9:fe:79:f5:43:4a:1b:aa:e5:8a:60:20:aa:d8:fc:8d:
3b:88:82:1f:a3:96:74:44:80:b7:fc:f5:dc:99:ee:b2:1e:44:
7f:67:91:bb:39:ed:c0:b2:cd:ca:d7:e0:aa:9b:b3:d3:6d:4d:
a9:c1:3b:13:12:48:41:ea:42:2c:22:11:39:ab:6f:b0:47:ed:
37:27:44:b7:5d:31:fe:ef:15:91:e2:22:31:b5:61:66:74:9a:
22:69:61:b2:b9:0a:4d:95:50:72:f8:1e:72:b7:b7:39:bf:93:
6f:6c:61:c6:8a:43:73:4d:26:46:41:a7:a6:79:f5:d3:8e:68:
7e:ca:7d:f2:b8:ad:53:25:98:4d:1d:a5:c9:c3:bf:de:9e:60:
ce:b9:80:90:2b:ef:b3:0e:b1:83:9d:ea:56:5e:9d:74:b8:c0:
fa:7a:f3:c5:2b:28:39:6f:5d:ac:40:87:8b:c8:02:17:b4:e2:
29:07:e7:e6:08:66:96:aa:5e:59:f9:9f:bb:cb:26:ef:1b:8a:
2a:6a:99:18:cb:5c:89:09:84:84:0b:87:8c:0f:56:73:4e:8a:
3c:b5:2c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:53 2026 by rpki-client