Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier: ndNBr4hRm8BMLecaRUTYdre9t5Icr2r9weS8tf3ZZDM=
Subject key identifier: EA:EB:61:38:EE:C6:A7:A1:D1:83:27:DE:FF:D3:72:48:23:AE:04:B9
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 019D38D32F4C42809E642C8241AA23961D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: 8cBpb7NBpLzQnhTUghLq2PtBQyi8S6bV1uJG9WO+rvM=)
2: Q4ZIJI1vYpM5qyo29zUc5N-1r8k.roa (hash: 76giCIoxYSJ7Qzdp7ynPuA05qyt7r6q9BXWslTdrOTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2f:4c:42:80:9e:64:2c:82:41:aa:23:96:1d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=eaeb6138eec6a7a1d18327deffd3724823ae04b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:8c:27:18:b0:e9:44:c0:f7:74:98:bb:5c:
f9:6a:69:dd:39:62:55:77:e7:3d:05:88:a1:e1:64:
44:9d:55:cd:20:88:d1:64:8d:dd:02:fb:53:5f:c2:
86:c5:60:a5:77:4a:0a:aa:a5:d5:d9:4e:6d:2f:f2:
8e:21:59:70:20:70:a1:75:00:d2:28:e7:27:86:bb:
7c:74:c8:d6:d7:58:9a:e6:7a:4f:5a:7b:65:65:03:
f3:95:87:53:50:93:91:c0:dc:1b:ae:9a:2c:74:b9:
9b:0c:e9:ee:fe:56:fb:0e:11:6f:76:dc:98:fc:96:
9a:a0:8d:3d:29:92:e1:59:e7:db:f9:df:04:72:88:
3b:9b:42:bd:4b:1b:0d:2f:2c:a1:09:e5:15:b4:17:
ee:72:86:b9:76:04:e8:07:7e:36:7f:ae:11:f7:3e:
ea:68:0e:0b:7d:91:eb:1b:28:a0:71:ba:cd:e4:80:
97:ac:04:3e:ad:25:b6:c0:87:ba:97:67:3d:4f:5a:
f8:5d:d0:66:d3:45:f4:7e:e5:08:90:71:99:d2:38:
7e:03:91:0a:ad:82:9e:2a:71:24:4d:81:4c:78:04:
48:f3:23:0c:2a:81:5d:a6:6f:d0:80:06:b1:95:22:
23:4d:cf:9c:88:ca:ae:45:c0:2a:60:85:02:9d:24:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:61:38:EE:C6:A7:A1:D1:83:27:DE:FF:D3:72:48:23:AE:04:B9
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f3:04:32:63:5d:3b:91:be:7d:26:f6:06:fd:5c:11:d6:d7:
82:e2:a0:6a:31:20:cb:ed:de:ca:0f:24:a5:36:a2:7a:e9:aa:
df:c1:16:94:fe:2e:f6:d6:81:79:14:96:82:2c:f2:55:16:f4:
93:ec:84:4e:9a:6d:cd:e4:00:6c:ba:73:28:98:0e:2f:96:cd:
2f:cc:20:a3:96:b5:fd:c7:70:97:aa:a1:21:d2:78:51:f3:47:
08:88:d3:f4:d6:f2:b3:fe:b8:de:f0:b9:2c:5a:19:02:1b:9a:
41:ba:01:46:dc:9e:49:fe:0c:38:6b:5d:96:a6:06:3a:22:2c:
5a:8f:e4:f5:b0:eb:57:70:ea:b7:19:07:39:18:ec:cf:58:35:
6c:87:b1:c5:9c:2d:b8:11:e1:30:87:24:2c:33:7d:6a:b9:45:
3f:20:ea:76:ad:c2:8a:bb:b9:3e:5f:2e:07:4e:7b:52:c1:b7:
28:75:cd:a9:8d:61:54:f5:56:b1:5c:dd:a6:b1:06:5f:3e:21:
b3:dd:d7:1a:6f:88:03:31:52:4a:71:84:3e:7f:35:82:60:e2:
14:5c:a9:2e:2e:d3:ee:f5:70:48:be:8f:3a:29:46:af:0f:1d:
86:32:55:97:16:f8:b3:3d:c2:be:75:6d:54:28:54:43:f9:45:
2d:67:26:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:46 2026 by rpki-client