Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: RcAM/vSYNIL8wuzNCO7h1VvMpNY/K5GaNFmZpl2/zBw=
Subject key identifier: 45:4F:61:D1:56:0D:95:5D:A6:2E:FA:61:37:A9:90:09:C2:78:DF:23
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 019D37F79C07E75C25C832D251E827AFCAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 0D04
Signing time: Sun 29 Mar 2026 05:01:07 +0000
Manifest this update: Sun 29 Mar 2026 05:01:07 +0000
Manifest next update: Mon 30 Mar 2026 05:01:07 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: kwxWJmdZEK4pcFU9m1ZArHe5fXjQQyiD1NK+OaILpiA=)
2: TujVxWk7elywpyXmIMnDKFw3mNo.roa (hash: Zvi/MCY8l+89SlTxrMXMYRwO5dgOTj98ivE3+1BLbBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:9c:07:e7:5c:25:c8:32:d2:51:e8:27:af:ca:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Mar 29 05:01:07 2026 GMT
Not After : Mar 30 05:01:07 2026 GMT
Subject: CN=454f61d1560d955da62efa6137a99009c278df23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:57:1b:56:8f:0f:f3:94:2f:fc:3e:7b:37:
53:87:a1:e4:ee:e6:34:21:b1:50:b4:db:f3:39:50:
e4:51:ab:c9:a9:b5:8c:78:63:ed:60:eb:83:dd:d2:
cd:aa:b8:f0:97:83:8d:b5:91:37:ce:a0:9d:99:b8:
bd:53:61:ef:94:d4:c8:d6:d0:99:b7:4b:b4:fb:2d:
3d:bb:de:f2:1d:dd:98:9a:6c:03:f7:57:fb:8c:47:
6b:58:61:e5:52:1b:aa:4c:7a:bd:05:b1:dd:36:82:
e4:a6:c5:aa:88:f8:26:49:07:19:ea:37:e6:46:14:
33:cf:ea:37:84:93:ec:43:8b:8d:52:25:53:04:79:
dd:9f:0d:89:26:fa:65:76:cc:72:ed:ea:ed:0b:86:
0f:d2:7d:7a:ab:36:18:9d:16:77:f1:4a:6e:07:53:
8e:ed:07:f6:8f:5c:2c:e5:92:11:cb:b8:bd:f4:5c:
b8:a6:98:d8:de:28:63:29:9a:f3:b4:5a:a2:2d:7c:
83:58:bc:30:26:b7:45:0f:c2:8a:df:c8:e0:ec:72:
65:82:89:5f:2f:a1:0f:4d:91:91:38:e3:83:18:7d:
ba:5d:66:f3:80:d3:28:f7:29:cf:9b:e9:a9:d1:44:
89:f5:f7:16:6b:30:31:99:b1:9e:7b:79:87:a2:c2:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:61:D1:56:0D:95:5D:A6:2E:FA:61:37:A9:90:09:C2:78:DF:23
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:be:1d:92:d3:58:04:17:8d:f3:a7:32:16:12:21:7d:8f:fe:
f5:80:22:85:9c:2f:1b:ba:e7:08:3f:55:1b:db:c4:d1:57:99:
fe:53:c4:6e:1d:13:6b:21:ae:e7:1d:e1:8a:c7:14:40:e0:b1:
1a:72:94:10:f2:8b:ef:04:fd:94:26:f8:32:0c:d7:e9:a8:47:
9c:ac:11:ae:64:68:f5:09:db:b9:c3:7e:51:db:69:09:d2:99:
31:2e:16:5f:01:ce:8c:da:b7:9e:e0:8c:56:52:f3:27:55:2b:
be:3c:a8:fb:3e:f1:a8:7d:a3:36:11:1b:e1:d7:12:22:ea:95:
e4:3e:b1:57:72:2a:7b:0d:ac:24:ce:d4:28:41:a0:dc:c1:9a:
51:62:b3:68:ff:ef:e3:80:06:9d:3b:e1:bb:12:c4:d8:cb:ba:
74:db:6b:dd:3d:66:a5:07:aa:68:03:02:59:ee:61:ac:9a:0a:
ab:be:5d:93:24:60:34:17:a2:de:57:fe:9c:e1:cc:07:e7:c5:
3b:29:2e:43:42:d8:59:0b:51:0a:0b:13:4d:17:15:cd:e8:a5:
b1:93:14:01:ec:2b:84:70:9d:88:54:c9:ee:17:73:58:38:d2:
71:93:d0:fd:86:b9:1d:cb:fa:6a:5d:88:01:d7:da:22:fd:2e:
e0:04:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:01 2026 by rpki-client