Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: +wlbfpGYVhviBN6fJ74Nj+rKmoI7x7nXTsrcT9zWsn8=
Subject key identifier: B5:9A:E6:64:5A:A8:5A:00:1D:00:F9:FE:02:A3:19:BC:EF:E8:8C:48
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 019D389C085E9A5C3F78DFFD89F4D266954D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 1018
Signing time: Sun 29 Mar 2026 08:00:42 +0000
Manifest this update: Sun 29 Mar 2026 08:00:42 +0000
Manifest next update: Mon 30 Mar 2026 08:00:42 +0000
Files and hashes: 1: X44UuuaUhAM50Kozh7XZVDvdF14.roa (hash: kIvHQLjOEtZWEUfUCpYD6bbto6town5tHTLofDklsdI=)
2: dAQr9ygVW7afaoDzLId5HtYFpKw.roa (hash: gWNR3pSMI8yeOAqKnvOXgWPtPa0bDKYn5eIcfvgVCNQ=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: dFu75dLCYwTXPBu2Va8FkRVxbwx1mNC+zjSmYAG8ltY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:08:5e:9a:5c:3f:78:df:fd:89:f4:d2:66:95:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Mar 29 08:00:42 2026 GMT
Not After : Mar 30 08:00:42 2026 GMT
Subject: CN=b59ae6645aa85a001d00f9fe02a319bcefe88c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:eb:c4:90:59:f9:c2:32:18:7f:bf:67:fc:ab:
4c:a3:6b:50:76:70:ed:73:90:fe:d6:a2:fd:01:41:
29:8c:f6:e1:e9:3d:46:ab:51:fb:04:d6:8a:3e:d3:
ed:97:44:21:f7:37:75:0b:d4:6f:99:d7:9e:5f:75:
1f:3d:bf:c4:91:b0:4f:6d:90:b3:55:7a:d3:42:b0:
b5:15:09:27:f6:cb:7f:b0:47:1e:a1:4b:fc:be:35:
78:fc:15:4a:4f:4b:b9:79:1d:3d:15:eb:c5:a8:e2:
f4:55:f8:49:13:b7:bb:b2:d9:cc:f7:dc:e7:f5:be:
58:17:96:79:8a:a6:1a:df:c7:bf:12:b6:6f:f9:c7:
88:ae:de:66:7a:7b:eb:b5:70:c3:c3:d9:d9:15:7c:
39:d7:f2:83:b8:03:24:02:c6:46:2c:2d:02:01:9c:
ad:40:1c:0e:76:55:c6:5f:88:c1:4b:01:be:34:39:
04:33:ac:10:26:60:12:40:bf:5a:59:da:00:7f:e4:
c7:fe:65:14:13:19:4a:51:c8:b1:bd:2b:82:1a:3b:
4d:6c:7c:7c:a1:8e:41:ac:30:9b:78:75:c2:b2:b3:
99:16:64:70:91:49:3e:6e:62:2b:8a:67:97:fe:a7:
38:90:ec:d2:f7:78:91:2c:ef:64:28:f9:b2:fe:d4:
73:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9A:E6:64:5A:A8:5A:00:1D:00:F9:FE:02:A3:19:BC:EF:E8:8C:48
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:61:9c:7f:48:13:eb:f8:bf:1c:cf:26:47:9d:17:7f:6f:a2:
e7:44:ab:68:0c:5a:e6:1f:fc:50:54:f3:d3:42:41:35:70:c2:
6d:ee:32:51:39:8d:94:bd:0e:61:32:eb:d4:be:d7:f6:89:25:
d8:dd:63:c0:0c:64:52:db:37:f3:8d:3e:81:c0:6a:cc:54:2f:
da:84:64:92:57:7e:6d:fb:ca:db:1d:16:2e:43:a9:fa:d3:dd:
81:b2:4e:1e:da:f7:04:3c:f4:86:50:b6:f8:22:3b:61:63:83:
d7:84:53:0e:23:73:d5:f2:83:56:48:f0:aa:dc:be:91:f8:7a:
bd:12:95:e4:07:5f:bc:c2:e4:ab:a5:4d:cb:01:f9:2b:4e:af:
af:f6:3a:3c:44:3a:97:fa:12:7c:d4:ab:62:c3:44:90:f6:b6:
94:db:ee:59:cd:1b:24:29:db:1b:73:85:cc:3e:03:02:92:fb:
58:2d:86:80:84:94:35:3a:67:63:8e:82:af:45:44:77:b7:74:
b1:98:eb:29:b9:63:c3:6f:0d:ba:f8:a2:70:33:05:48:77:0c:
e0:8d:a9:35:4c:ee:8c:bc:11:4d:c4:49:09:2b:e8:94:50:8a:
fe:ab:4d:a7:c6:20:ec:65:8e:10:72:d1:af:d9:b1:3d:5a:82:
78:f3:8c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:12 2026 by rpki-client