Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
File: m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft (raw, json)
Hash identifier: lvlB5SZ9Km0X/tYH/CJ6+LX5sUyOMd2gC5cldFlm8co=
Subject key identifier: 49:FB:EA:8D:E6:FF:6E:5F:98:4C:AD:F4:C1:7F:EE:AE:31:48:C1:4B
Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
Certificate issuer: /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Certificate serial: 019D3865DA73F14B10C38FB74A38F5CE888E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:32 +0000
Manifest this update: Sun 29 Mar 2026 07:01:32 +0000
Manifest next update: Mon 30 Mar 2026 07:01:32 +0000
Files and hashes: 1: ePJZJNhpApp5V_50Q_hot0iS_wU.roa (hash: QR4bO1N17271c13+CycjZX16iUUkNqGxGT5DNiVyLsU=)
2: m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl (hash: K1mOEB4A/xQsqXCzKANCWaqVKXOoTDRaA+iKStxf0+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:da:73:f1:4b:10:c3:8f:b7:4a:38:f5:ce:88:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Validity
Not Before: Mar 29 07:01:32 2026 GMT
Not After : Mar 30 07:01:32 2026 GMT
Subject: CN=49fbea8de6ff6e5f984cadf4c17feeae3148c14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b4:39:09:ff:85:e9:11:a0:a6:6b:c8:60:e0:
a4:6a:32:5c:8f:a4:8f:d3:9a:fe:f2:17:fa:6d:87:
25:5f:85:2c:10:dc:6d:b8:d2:1b:c1:65:7a:96:67:
ed:fb:da:48:a9:48:22:f4:fa:61:ce:1e:2d:7b:d2:
73:96:76:36:95:ae:10:6a:e9:08:f5:a0:0a:78:e5:
ce:1e:f1:97:c5:f5:f2:4c:73:f9:5f:de:31:27:c3:
a2:ca:0e:8d:0f:00:c1:70:af:88:e4:9b:10:15:dc:
dc:a9:3c:b3:d4:20:42:41:5a:a9:19:cc:27:d3:df:
01:84:08:4a:22:81:7e:82:93:81:22:0d:ed:46:7e:
4b:2a:ea:2a:99:01:7c:ed:a4:03:07:90:ac:aa:8b:
19:82:fb:77:ab:40:8b:e0:80:90:14:b0:f0:bc:b5:
54:61:56:ec:be:11:ca:d9:a8:1f:c1:06:29:c7:a2:
ed:7e:3c:cb:ef:63:f7:63:fc:59:a2:b4:52:95:2d:
8c:b8:4f:c5:6c:8d:a7:52:64:79:5c:21:7c:8e:db:
6b:e0:e8:07:9a:ad:46:2b:cf:02:6f:38:81:e3:06:
83:f9:f8:2e:20:4d:e2:40:04:2e:81:7d:c9:df:62:
91:bc:8c:3f:72:88:37:7b:bd:2a:60:48:99:f4:12:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FB:EA:8D:E6:FF:6E:5F:98:4C:AD:F4:C1:7F:EE:AE:31:48:C1:4B
X509v3 Authority Key Identifier:
keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ea:85:ce:bf:6c:fe:f4:44:87:ee:81:94:b6:c4:c0:7e:c9:
98:8a:fe:df:ef:6a:c9:56:40:4b:b5:a7:3c:51:4c:3a:20:06:
11:59:55:9b:4c:41:00:ee:a6:d7:82:d0:06:03:b3:cc:9f:ba:
53:07:a8:88:82:3a:57:6c:54:c3:82:b9:1f:d7:51:fc:62:74:
7c:bc:e7:cd:4b:00:62:57:b0:66:0a:44:55:5b:99:f9:cb:57:
f7:63:25:94:38:4b:57:03:6f:1f:c5:92:30:42:5a:b1:4d:32:
0f:9a:ba:4f:60:37:bb:ba:f1:83:38:bc:19:1b:92:05:c3:12:
8c:f7:34:01:8e:aa:7f:84:41:39:8c:fc:7d:57:c4:97:57:a1:
ab:52:e0:7e:4f:25:50:85:66:a9:3c:e4:50:7f:a7:ff:6a:dc:
77:8e:85:d4:03:c8:f9:ce:06:3c:59:e5:72:b9:5c:88:52:a7:
8c:f3:6d:01:15:ab:b4:c6:9f:21:f9:cc:e3:bf:95:6b:c6:62:
9e:b3:23:4d:b4:29:62:e0:bd:fa:d0:9c:ac:e0:a3:0c:6e:7b:
ca:0e:6b:34:65:65:90:1c:24:dd:7a:74:24:b9:27:ba:96:96:
7a:3c:17:47:f4:76:1c:6b:12:f2:11:d8:f7:f4:aa:b0:a5:86:
e7:8e:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:02 2026 by rpki-client