Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
File: 9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft (raw, json)
Hash identifier: 2cWdKX41tpUOB/b8Fw3ab3CDKc2jMPzGnwrfK6KK2No=
Subject key identifier: 22:FE:DC:5E:CE:87:B3:54:2E:04:6A:C4:3E:0A:53:34:10:29:43:6A
Authority key identifier: F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88
Certificate issuer: /CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
Certificate serial: 019D39E5BA26742CC469AFE42D6942B98C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
Manifest number: 133C
Signing time: Sun 29 Mar 2026 14:00:49 +0000
Manifest this update: Sun 29 Mar 2026 14:00:49 +0000
Manifest next update: Mon 30 Mar 2026 14:00:49 +0000
Files and hashes: 1: 9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl (hash: +i4rNCiKDOqoLizj1eLrACQgJZim/JrrWkR/n3xctmI=)
2: Gppiqe66tYvTY_bvhtdffeBDXfU.roa (hash: 1bDkhYgVlINVvrOvoqRYuV0vUhahgYtSIbQpuqAq/WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ba:26:74:2c:c4:69:af:e4:2d:69:42:b9:8c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
Validity
Not Before: Mar 29 14:00:49 2026 GMT
Not After : Mar 30 14:00:49 2026 GMT
Subject: CN=22fedc5ece87b3542e046ac43e0a53341029436a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:b9:d9:e0:43:75:a9:de:72:53:cc:99:e6:
77:47:59:5c:0a:0a:99:ae:4c:86:92:7f:8a:30:22:
39:04:89:39:f0:ae:12:3b:ca:e7:14:8e:74:11:5d:
0c:4a:33:bf:62:7d:04:d3:0d:b0:09:ae:3f:5e:ce:
bf:b6:26:5b:e0:6f:23:24:e8:bb:31:07:5b:51:e9:
ae:ea:97:98:c9:12:90:2a:20:ae:4b:2d:07:3e:e8:
14:08:64:95:97:2f:11:06:3d:7f:ac:41:e4:db:29:
64:fd:4f:7e:5e:a9:d2:73:46:91:3e:6a:5e:74:7a:
43:d8:88:6d:2f:a1:58:b8:8b:0c:34:ab:e4:fd:40:
44:d3:05:d6:99:72:77:20:31:e7:de:c5:ea:68:76:
46:d4:3a:d0:dc:6e:ea:39:d0:f2:ef:ba:94:a3:d8:
db:5e:1b:e6:7c:c0:15:48:be:ac:8f:b6:b4:a4:c4:
36:80:cf:bc:07:84:58:b9:c4:b9:5b:ae:5c:38:4a:
6a:12:78:4c:72:6f:48:c3:08:ec:2e:78:c0:4a:12:
69:55:0e:59:31:f3:17:dd:05:c3:e5:3f:e4:b0:81:
90:2b:77:7e:7f:31:b2:60:08:54:9b:35:5f:52:85:
a4:2c:57:3d:0c:fe:ec:c0:70:de:42:59:fe:ee:a1:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FE:DC:5E:CE:87:B3:54:2E:04:6A:C4:3E:0A:53:34:10:29:43:6A
X509v3 Authority Key Identifier:
keyid:F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:71:3c:5f:a3:d3:24:f2:ae:41:2c:08:0a:0b:18:8e:f3:88:
18:d4:a8:46:9a:8e:c3:06:46:45:cc:61:f7:99:5c:ed:c2:0e:
e1:d1:fb:ac:21:14:a2:81:49:dd:f3:f3:3f:7b:b5:39:41:79:
76:29:9c:78:c7:83:1b:85:e1:95:d5:4c:a9:45:a9:c8:ef:18:
a7:fc:e1:9a:1d:ed:fa:a1:c3:e0:9b:9e:4e:da:0a:8f:2e:f1:
6c:43:50:a2:54:d6:bd:11:54:84:db:de:85:cd:0e:19:d3:6c:
f6:8a:75:f2:3c:75:a5:e3:a6:74:ef:ae:06:a7:d0:06:80:17:
61:b7:80:45:73:08:d5:6f:cc:5e:16:14:00:db:6c:05:9e:44:
3c:e2:27:0a:0b:85:b4:f7:1d:ff:dc:94:bd:53:0b:48:02:27:
bb:82:e9:7f:5e:db:95:63:ba:0f:a4:92:83:a5:3c:f6:da:1d:
0f:50:32:7e:fc:18:9c:a8:0a:0d:9f:e3:79:fc:0c:24:83:eb:
2b:33:84:24:02:b0:ef:46:49:08:bf:a8:3f:c0:07:26:8a:5a:
e7:5e:a9:bb:b5:66:8a:1f:5f:aa:42:33:bb:a2:33:d2:9b:a6:
ea:42:e2:87:a8:bd:9b:de:63:a4:44:08:5a:ae:98:11:36:13:
d3:83:a4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:13 2026 by rpki-client