Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: gDHppHDOX/j9OG5XbXN/208UNkt2ZzcgVqfOwwr6keE=
Subject key identifier: 05:C1:56:1B:47:2D:0C:78:9A:D4:90:3D:02:7C:15:50:E6:F9:E3:EB
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 019CE2C8114E02F53579CE793DCAAA85DE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 0C30
Signing time: Thu 12 Mar 2026 16:01:28 +0000
Manifest this update: Thu 12 Mar 2026 16:01:28 +0000
Manifest next update: Fri 13 Mar 2026 16:01:28 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: +bD2CeQ1vlU0qAbDBsiJQAZFm4xSkBorPpDjkElwVZw=)
2: IWvsOje1ZxTQJm3iMyMgDBCOgIE.roa (hash: kaYliqjJkqMdXwb3B1wUhcuY3L6iumjr0MlG0shhuGo=)
3: sP7IVsNCNnn_B2GtU6Sg79Zwhew.roa (hash: izWuWKp2wnvE2HYeue8Y8Mj2HM1TQYV8MhNOeFXRVUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c8:11:4e:02:f5:35:79:ce:79:3d:ca:aa:85:de:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Mar 12 16:01:28 2026 GMT
Not After : Mar 13 16:01:28 2026 GMT
Subject: CN=05c1561b472d0c789ad4903d027c1550e6f9e3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e1:cf:69:ae:d8:7f:72:69:77:96:5f:dc:1c:
17:7d:ca:04:08:26:d8:b3:77:79:7b:b2:cf:49:9d:
50:0d:c4:f3:aa:4d:70:97:b9:82:25:b0:a6:a5:38:
a4:94:34:ee:9c:38:f6:5a:3c:87:ab:7d:08:7a:a6:
33:01:d6:f3:72:10:cb:28:11:ca:39:4b:f3:5f:87:
69:c3:95:a3:27:1e:b5:65:38:5e:64:a7:30:3c:8f:
a0:59:18:db:0b:8e:b4:62:a9:e6:79:1c:87:45:74:
86:22:c8:6e:10:2d:39:03:59:7b:55:24:34:62:b6:
5a:72:6c:ad:28:eb:b8:f5:f8:3a:60:04:fb:70:c9:
f6:b7:6d:52:1d:49:7c:3c:c1:a9:63:98:0e:c8:ab:
85:5f:a4:a3:9d:6a:28:55:39:33:21:5c:99:c5:0d:
80:91:0b:18:dc:f7:70:a9:db:d0:54:4c:a4:a1:ea:
31:ac:9e:94:9c:33:e5:2d:bf:05:11:6c:d6:90:c9:
d4:bf:71:40:00:28:63:77:46:9f:91:51:71:bd:4e:
84:8c:69:a9:c7:80:7d:31:41:f7:88:5b:eb:d5:7e:
99:e8:7d:e9:23:9a:1c:b4:de:8f:98:c2:c1:02:33:
33:25:24:b7:07:5d:0f:be:68:75:3c:56:0a:d9:c4:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C1:56:1B:47:2D:0C:78:9A:D4:90:3D:02:7C:15:50:E6:F9:E3:EB
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:eb:1d:09:86:9e:18:96:76:6b:72:9e:8b:f0:df:1b:de:a8:
7f:69:9b:16:9a:05:41:28:02:a4:93:f6:23:34:6a:10:2d:77:
68:74:b1:49:db:0f:77:78:ad:8c:9b:7f:be:3a:cc:b8:f7:7e:
08:db:66:48:01:72:bc:93:7c:d9:55:d4:b8:4e:41:a5:28:98:
7c:19:37:48:b6:97:c6:96:f8:a6:7c:7a:59:aa:2e:4b:b1:3a:
3c:03:de:98:0b:3c:9f:b8:14:af:15:be:89:ae:67:d1:0c:02:
66:6d:eb:b3:81:4a:7b:e0:8b:52:f3:f8:88:c9:10:9b:9b:dc:
da:95:94:52:df:50:d8:5b:ca:f5:2e:0d:bb:f7:84:db:ba:d2:
cb:26:5f:08:26:4e:8a:2f:c2:d1:07:1c:e1:47:14:8f:0f:89:
e4:29:a5:86:b1:6f:71:fb:fc:14:09:7a:9b:07:62:f0:0c:e5:
9a:11:df:73:64:13:2d:99:aa:77:fd:85:82:70:31:2b:98:84:
b8:88:55:db:38:9c:76:ab:e9:a0:59:48:50:91:8a:f8:33:a1:
27:36:f3:16:39:73:50:84:19:50:22:de:4f:8b:34:8a:9c:f3:
92:c3:3b:27:24:43:2d:ed:30:d0:91:c6:f9:17:31:0e:e7:55:
2e:f4:6e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:53:01 2026 by rpki-client