Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: 0fdU83ZbjU2KxgNTu8MH73GyCJaJTgM4GJIii/a3vwM=
Subject key identifier: 64:EB:E6:AC:AF:62:22:EF:AC:ED:28:E9:74:AB:71:F8:3B:62:93:17
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 019D389BDF8F63FD51506401A55E3E8C9B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: 6WW-5nEcLXyYysohxbswx53KUC4.roa (hash: YGye3VGtaY9dIe257yt+Ywof1sTn+vKBOCXTqKl9UZo=)
2: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: gYhBPLOmz+or37cIfD73pE7ISn2YAYj7Li8kM40hwVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:df:8f:63:fd:51:50:64:01:a5:5e:3e:8c:9b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=64ebe6acaf6222efaced28e974ab71f83b629317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:69:cd:3f:1d:92:32:f7:49:3f:60:f9:9c:
a4:31:8f:75:ee:a4:40:0a:fd:37:43:e6:2e:c1:83:
4d:a9:98:10:ad:d1:1c:49:34:a3:b1:54:28:38:81:
51:a3:d5:f4:0c:bf:38:18:f4:f1:14:70:64:a5:7b:
94:47:a7:1f:73:d1:5b:39:9f:05:8a:40:f9:c6:f2:
be:d7:e6:09:35:94:63:9d:35:06:d8:c1:db:97:6e:
5c:4f:56:37:0f:10:83:69:fb:ee:23:54:9d:3a:0f:
b0:d2:47:fc:75:44:ac:bf:26:68:d2:0c:28:8d:58:
71:fd:0d:9e:27:ad:cb:6c:3e:10:c9:ce:63:f0:a0:
61:a4:a3:2b:f5:a6:25:7b:74:dd:4d:ed:1a:a3:18:
5e:f5:2a:0d:90:aa:d8:f5:1b:5b:17:05:82:93:5f:
b1:3b:9d:84:ae:fc:15:97:e1:a9:74:d8:5c:bd:72:
02:84:04:8b:62:36:99:29:6f:68:08:bc:59:ef:b0:
e4:29:99:51:f8:77:a0:bc:06:83:7e:b6:2f:7c:8b:
61:05:a9:a9:d2:b4:76:19:d8:f5:b5:f2:b6:5e:fe:
bc:c6:80:16:68:f5:03:d9:07:9c:d5:35:b4:9c:6a:
30:e5:4a:a0:7d:0e:de:a4:ae:02:f6:15:c3:e1:fd:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EB:E6:AC:AF:62:22:EF:AC:ED:28:E9:74:AB:71:F8:3B:62:93:17
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:74:1f:a8:a8:97:31:59:a7:9e:0b:c5:5d:46:ee:22:78:37:
cd:3a:66:ba:1a:6e:a7:8a:d2:83:f2:26:81:4a:29:5a:f2:c6:
4e:1e:d4:ca:9a:31:f9:2c:3a:a9:7a:6a:f6:a5:e8:aa:6d:cb:
a0:94:e5:75:f9:85:0c:87:f8:44:bb:26:11:a5:0a:00:96:c1:
b1:4a:fe:17:ca:a1:4d:68:37:17:2c:c5:57:b9:24:77:4c:0c:
e8:a7:4c:e2:18:de:c8:94:49:47:f3:8a:8a:2a:49:20:32:95:
6c:52:45:56:ad:48:58:bc:f0:06:d6:4b:1c:8f:62:2c:58:37:
57:cc:81:cf:9d:91:cd:a7:5b:fd:4f:55:3a:c8:d7:dc:cd:62:
3a:ef:ab:89:bd:e4:fd:6b:ea:df:29:3b:19:0b:c9:cd:cd:b0:
81:dd:8c:d0:30:e1:af:39:fa:a3:33:24:1a:4b:ef:34:d4:e4:
fe:93:81:2e:aa:24:73:d4:f4:0d:81:02:55:9c:f2:a1:cc:44:
17:91:8c:b1:3c:92:69:bb:f8:5b:9f:c7:8e:8a:49:03:1c:23:
33:f3:34:4d:53:48:8a:1b:8c:57:e5:3f:0e:7e:c9:e7:17:5c:
6d:09:c5:89:bf:5e:47:17:b1:56:0f:e6:41:25:47:ff:85:27:
7e:ee:a2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:16 2026 by rpki-client