Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier: DgD6tmwwACD2z9qptKFuhaNoto+b1m0qoKe8dDMm6Vc=
Subject key identifier: 74:11:34:07:40:AE:55:B3:E5:79:94:D2:46:DF:F5:8F:E2:AE:BF:6C
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019D3865C17BB42ED9080CF6F5988FE3DCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number: 18BC
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: 2gp85iNI9hOHVMoD-AVmhaVIeZQ.roa (hash: axs71u0qY3GNU78vZgfYXYLH532ZZvavOcB1PlEaAyE=)
2: 5V_xONqzwKma1n0RRaZThBrg5gE.roa (hash: z1TwNh3QakcyBUbCZgGTjXYrrx8YDgv/xgtP0R9TjOI=)
3: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: ckD+dQu1kKTOaM8qFrp6pQWOY0mA+EM0K+QgW9e8x5A=)
4: Sr8taJwNmM6IUIh68pFCremKsP0.roa (hash: 8hNtlSLs+hgRIJnDDfJh2MIcy6zUGifsMLAL3xiKJ1I=)
5: cJSB3QS13j7tmP3z_rxKXgO4j60.roa (hash: 9yWuPk6TuuusjVGKVizh7DPc+s1P+89Z5o314zB49FI=)
6: d45O4HaM6_SjO7mjzjskCZEqjmk.roa (hash: dowO/8l4EITYERynybQUVdaXfcQ3f7HwUklnrHDQVKo=)
7: f_5xxrvErft9UHy9p9SWDv2Clw4.roa (hash: +FdbEp2vWa1bm8frutm/p3mBSy9rm0hwGurOY2inwDw=)
8: kGPfhXxpreZtjaPga5IzFyy5BYc.roa (hash: i9y196dGRt0WCvB/nvKsvdx4WF+EKGdHmOuGX6kQ6qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c1:7b:b4:2e:d9:08:0c:f6:f5:98:8f:e3:dc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=7411340740ae55b3e57994d246dff58fe2aebf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7f:30:0a:54:2a:fb:08:8b:8b:1f:9f:21:f5:
66:83:8d:69:dd:75:66:73:f1:15:37:a8:d1:26:4d:
4a:11:67:ee:8a:3d:53:66:b5:6a:89:b2:9d:87:74:
43:c9:73:20:e9:2b:a6:25:ed:3e:99:e3:98:58:cd:
35:f9:0a:9c:c7:0f:31:dd:ed:c9:c6:1b:66:c8:d7:
fa:f2:55:4b:cf:1c:a8:9f:0a:76:53:90:64:21:34:
49:91:81:29:09:d0:f8:29:f1:6d:e6:4d:54:33:6b:
83:e2:1c:cb:29:8d:7c:96:ac:85:9e:44:9f:a2:03:
79:0e:d9:09:b4:4b:d7:68:35:bc:ae:d7:44:71:7a:
0b:bb:cc:c4:f7:82:ea:79:1e:fd:91:d3:89:2a:51:
f9:1d:9a:2d:48:58:e4:af:45:25:72:6f:3a:78:54:
2a:57:6c:43:3c:1b:2b:34:c3:76:03:51:c3:83:07:
2e:de:8c:73:1b:f2:79:7a:ed:6c:27:84:24:72:7f:
bb:65:21:ee:ba:5d:fd:67:f4:c4:2c:f3:56:ad:02:
1c:cf:0e:c4:d8:33:cd:86:41:b3:64:34:b5:ad:77:
ce:ba:d9:d5:a8:e3:f4:8a:88:6d:2a:2d:38:75:64:
d4:27:4e:f4:bd:8c:47:20:44:cd:63:98:25:f9:35:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:11:34:07:40:AE:55:B3:E5:79:94:D2:46:DF:F5:8F:E2:AE:BF:6C
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7d:6b:e1:a9:93:bd:c2:5e:24:3e:f9:81:cb:99:84:3c:82:
6e:a2:b5:4f:2f:d2:b8:2c:c5:b6:4c:33:e7:56:ba:da:f3:7d:
c4:67:ab:19:23:01:f6:cc:ff:27:c3:45:38:d9:fa:ac:94:3d:
b2:54:9d:4e:1f:65:15:3f:7f:40:e2:94:21:24:86:09:cd:f8:
a7:8d:4a:49:cd:d3:a1:d5:75:89:db:b4:21:14:f2:41:36:22:
2f:60:65:4d:57:e5:7b:93:3f:e3:6d:0d:c5:29:a5:68:2e:13:
6b:e7:04:39:50:63:ab:e2:60:05:68:34:c6:a7:e4:f6:25:4a:
9b:e1:61:f7:69:2d:46:be:2d:d1:ef:cb:6c:0b:2f:6d:d1:4f:
8c:76:98:d8:15:0e:ec:1e:ca:90:2f:54:70:ab:a1:28:c1:e4:
2a:ac:e7:31:f0:4d:3c:17:87:96:92:34:7a:e4:f7:c4:96:9e:
d8:7b:4e:76:a0:78:5b:72:ae:1b:87:10:21:6c:04:41:23:9c:
13:93:c0:8b:59:55:a6:f5:77:8b:d0:a9:fd:8c:32:8b:96:35:
48:ea:b2:4f:3a:d5:a1:35:f2:c4:a3:11:85:c6:34:e2:fd:92:
e5:2a:9a:1f:a8:37:e0:62:4e:cd:7f:33:e2:9d:4f:4b:54:5c:
40:5a:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:17 2026 by rpki-client