Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
File: 9_TLjFICzFNe2v0grLaoBQLk_Sk.mft (raw, json)
Hash identifier: l2yY1ogx8mTzJ+TQ7WgsP5ouBzmBFmOzZQGFqfDN8ow=
Subject key identifier: D3:68:52:08:DA:CA:E7:6C:2F:C1:BE:4A:01:AB:5F:6D:57:4B:68:8B
Authority key identifier: F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
Certificate issuer: /CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Certificate serial: 019D38657F16C4CA388C340D27B75EF45774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
Manifest number: 157B
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: 9_TLjFICzFNe2v0grLaoBQLk_Sk.crl (hash: a7++95npjdvxMEUPHSjvfpjuXEOcUwZUG1S+jicv78s=)
2: QPsr2i1RyOFWh9h0vLQW-AzMqTs.roa (hash: fRTp8Q4JuvU4hBelJIWwwPHlYhJ0Jk+mXQELhbP//iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7f:16:c4:ca:38:8c:34:0d:27:b7:5e:f4:57:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=d3685208dacae76c2fc1be4a01ab5f6d574b688b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:e0:75:0e:21:20:46:d0:7d:df:3b:b7:eb:
e8:77:d9:3d:15:5d:ce:8c:4c:ed:b3:aa:a7:97:12:
26:f0:27:b0:df:48:f4:b4:21:8c:c8:4a:b0:fd:bc:
e0:d6:29:23:33:91:7f:a0:d8:81:f5:4e:12:a8:81:
7f:e8:f1:95:48:c2:32:15:9e:c8:44:b3:d8:21:bb:
d1:34:29:b7:9c:a5:d2:8e:e8:ee:97:13:6a:7c:7f:
6e:0f:f4:c2:52:87:88:f6:0f:42:09:99:bf:a5:88:
0f:ed:6c:64:72:fd:78:8b:b2:74:cf:2b:8d:e7:54:
d0:ed:25:8f:7a:ac:4f:89:4c:9d:2d:b8:b4:30:b0:
52:81:0c:79:48:08:2c:ce:ff:5d:e8:28:a0:f5:c5:
0d:f6:cc:57:f7:8b:16:d0:e7:2a:2f:3d:70:fc:b3:
88:ba:0b:e6:94:cd:18:73:ba:0f:2f:75:22:15:20:
34:bb:62:2f:00:ce:d8:c1:67:e3:02:5e:f7:b1:1e:
58:7c:e4:76:db:60:fa:b0:7a:72:01:df:a4:9e:b3:
02:a1:93:8c:43:9a:59:1f:5c:85:ce:79:93:1f:2b:
97:bc:93:bd:b1:b3:f6:68:d0:a4:d1:e1:f9:1d:66:
f7:45:38:df:b8:c4:2d:c0:ca:fb:67:11:56:8a:f9:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:68:52:08:DA:CA:E7:6C:2F:C1:BE:4A:01:AB:5F:6D:57:4B:68:8B
X509v3 Authority Key Identifier:
keyid:F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:28:b5:59:72:22:49:53:4f:d0:72:ae:57:d2:ce:5f:14:b6:
f7:dd:3e:45:26:13:61:a8:6f:95:f4:e9:15:56:af:15:7c:95:
9b:22:04:77:81:0b:01:73:85:ee:2b:fd:95:fd:32:1b:d8:3a:
11:82:a0:4f:f8:d2:13:20:86:8a:30:f8:88:e3:77:06:52:45:
fa:50:ce:20:55:e9:25:9c:30:29:ab:e0:e2:b2:ed:20:46:f7:
55:d4:7c:a1:34:15:15:05:33:c1:73:da:ef:e5:e8:e7:96:2e:
7f:cf:43:a9:7b:41:a5:d1:a7:26:9f:9a:95:48:d6:01:82:cb:
83:5c:c6:15:f2:43:3a:2c:77:84:7e:51:2a:00:e8:e2:d7:ba:
17:b2:f9:40:5d:d4:ae:97:f1:f7:44:d3:24:d4:97:01:fc:5f:
79:f2:0a:39:21:06:32:58:a3:6c:a4:c7:a1:00:d7:93:14:e4:
2f:66:16:8a:58:95:b0:a2:06:94:ec:b9:e3:1e:34:16:b4:f6:
b4:8b:0c:59:0b:65:bf:a0:78:5b:30:99:2a:50:91:2d:79:55:
43:10:c7:b2:7d:56:c5:eb:14:78:59:05:2c:c4:28:41:c7:f6:
0b:47:4b:35:d0:db:1f:a5:33:1d:f9:0b:c4:45:ea:8c:d7:9c:
fb:5b:25:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:11 2026 by rpki-client