Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
File: p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft (raw, json)
Hash identifier: j/NTrtHOGFiJmXwu8BWJ/da6uuiiCuZiK8L+/21cvmE=
Subject key identifier: DF:72:1F:1B:EF:6E:53:57:78:5B:FD:55:6A:44:7B:CA:60:38:31:2C
Authority key identifier: A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD
Certificate issuer: /CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
Certificate serial: 019D3977D41F932B86FD2D01B1072EC0630B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
Manifest number: 09AB
Signing time: Sun 29 Mar 2026 12:00:47 +0000
Manifest this update: Sun 29 Mar 2026 12:00:47 +0000
Manifest next update: Mon 30 Mar 2026 12:00:47 +0000
Files and hashes: 1: jy4XFgCzljZWpXE-riML9DaXkts.roa (hash: hfp/T5AOfMF/LamC2Ys8fXDrV6Q6STrraxrMeK+mRx8=)
2: p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl (hash: NJDuhgT2m9ckGl23vXjcxdOWRtpoBeKwwRN6n387ocY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d4:1f:93:2b:86:fd:2d:01:b1:07:2e:c0:63:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
Validity
Not Before: Mar 29 12:00:47 2026 GMT
Not After : Mar 30 12:00:47 2026 GMT
Subject: CN=df721f1bef6e5357785bfd556a447bca6038312c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:42:97:2f:b4:f2:cc:50:ce:ad:b1:3a:26:
e0:8d:26:65:c7:31:9d:10:5e:18:be:ab:ae:2b:69:
cc:8d:2e:d5:d9:6a:d1:09:19:1d:72:f1:2f:91:85:
92:79:04:e3:a1:a5:fc:29:df:fd:ba:85:29:00:95:
b3:a4:ec:52:7e:b2:69:29:ef:af:50:4a:54:2a:27:
5e:e3:8e:48:05:79:e1:9a:e0:40:5a:a5:42:e9:6b:
a7:35:69:4e:fe:f2:59:19:a0:c2:c2:19:54:dd:ce:
06:98:12:b6:50:ee:c1:c7:5e:54:9d:15:89:af:27:
dd:85:5e:5c:d0:df:24:3b:b1:cb:f9:a8:76:1f:17:
38:94:d5:9d:6f:57:cb:bd:5f:5e:9d:9d:2f:6b:36:
91:1f:63:3c:e9:8d:29:0b:f7:1a:77:52:12:01:3f:
48:36:ce:c9:78:bf:27:4e:4e:16:37:4a:9c:c9:e5:
c9:a2:e9:31:42:0f:56:92:c2:25:3e:6e:e3:35:2c:
24:57:b6:c4:cc:ad:c6:a6:0f:ba:c2:5f:ba:1a:17:
35:da:65:73:20:81:76:d8:49:9e:b2:b1:02:52:2a:
d4:b5:1f:a3:58:fd:3f:4c:16:15:b5:1c:f5:f0:90:
63:01:e8:7c:85:ed:28:b8:e2:29:a4:83:40:a0:4d:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:72:1F:1B:EF:6E:53:57:78:5B:FD:55:6A:44:7B:CA:60:38:31:2C
X509v3 Authority Key Identifier:
keyid:A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:71:1b:ef:cd:aa:37:92:06:a8:14:69:fc:ce:73:c5:b8:c6:
34:01:b5:4c:8d:16:42:6e:db:dd:33:42:03:e0:f3:fb:b1:cc:
9f:5d:04:ba:55:8d:b5:e0:43:63:82:d1:fa:49:ef:fb:fa:e8:
44:4a:4d:1a:4f:7d:7f:c0:6c:15:77:52:ff:4e:18:17:b2:04:
2e:06:e5:d8:78:67:73:0a:cb:00:84:e6:89:80:13:08:67:68:
b1:49:61:d0:99:30:1e:37:8a:e2:9e:d3:d3:54:62:1f:75:c1:
f5:c3:9e:57:56:f1:31:b2:04:f1:cb:1a:79:3e:38:76:01:d8:
d2:11:03:be:0a:21:a4:57:0d:46:af:85:35:16:e0:d7:fc:9c:
57:48:53:4d:38:51:dd:21:8c:10:3c:89:08:4b:18:5a:7a:8b:
67:5e:f7:da:7d:22:9d:c8:b0:8c:00:43:49:b0:79:ac:b2:98:
9f:54:64:e8:1a:63:8a:63:ad:1e:89:a9:a0:97:b2:fe:e1:60:
af:cd:84:7c:f0:7f:2c:8e:21:1a:9b:34:3d:e8:39:d2:85:8c:
19:ae:bf:50:5b:f0:5b:5f:c0:6b:90:69:bf:80:32:84:32:e8:
e9:ce:d5:55:00:3d:95:55:90:45:82:7d:98:4b:dd:31:e7:fc:
0c:ea:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:32 2026 by rpki-client