Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: BaQCUBAG8+eOB5Oe/CS8TzfOtbOcyI+hX5wFbFZvl2I=
Subject key identifier: 88:8D:85:DD:E4:3B:51:F0:74:5C:B8:2C:51:A0:8D:DE:3A:B9:85:57
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 019D382E41FE9915CD5D41D3FAB736FC15ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 0650
Signing time: Sun 29 Mar 2026 06:00:48 +0000
Manifest this update: Sun 29 Mar 2026 06:00:48 +0000
Manifest next update: Mon 30 Mar 2026 06:00:48 +0000
Files and hashes: 1: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: 4GzyXUpibSeBZdVnD/T30tZx5tvxDS60O7aG+1g5D9o=)
2: cyWhzyh3zLHJFuzJ5qvmESBkuxg.roa (hash: nSoHpM2xTBolqQJtZsO8W8SsMxuMlo/mxOm1BoRL8ec=)
3: zlPMF36fK507KHhaEr_DLJ54RXA.roa (hash: kLxUmeXAHI9feHJRDQlAlUFvp1o7+yM0NCeSQpcomMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:41:fe:99:15:cd:5d:41:d3:fa:b7:36:fc:15:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Mar 29 06:00:48 2026 GMT
Not After : Mar 30 06:00:48 2026 GMT
Subject: CN=888d85dde43b51f0745cb82c51a08dde3ab98557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:84:41:27:07:75:d1:25:81:0a:50:ce:6c:
14:3b:59:25:d1:01:0e:81:99:24:b5:4e:54:9b:2e:
e6:4a:f2:4b:81:5c:70:c9:77:60:92:b8:c9:0e:2f:
c4:3b:01:06:f4:b5:c5:74:54:d5:31:00:2c:bf:c5:
9e:30:be:48:c9:27:2d:0d:e1:61:5a:56:91:c0:5e:
45:f6:ae:fd:57:71:13:04:47:b5:ba:d6:0a:46:14:
8c:f0:1a:ff:8e:69:b5:c0:11:ce:29:67:a0:e3:d9:
03:bc:6a:05:b7:d9:e6:80:83:49:f7:fd:5b:87:8a:
71:64:96:32:5d:8f:2e:03:9c:6a:82:27:b3:c3:08:
46:7c:da:92:14:b7:32:a5:d4:e0:68:c9:e1:a5:95:
ca:0b:e6:85:9c:45:09:45:7b:06:da:2e:c8:8d:27:
49:d5:45:a2:19:ac:43:72:d4:8f:ff:1a:7b:24:25:
d2:26:ac:6a:8d:d7:03:2b:4a:f0:59:3a:7e:75:46:
26:4a:90:55:9c:5a:5f:43:25:ad:11:3e:4e:74:92:
a1:49:3f:11:0a:06:9b:6b:aa:35:31:fc:7e:9f:05:
72:d5:0a:8a:5b:b9:d7:dd:93:c7:32:24:33:3c:57:
dc:ee:36:77:a7:27:ce:21:d8:31:4e:8d:51:94:bc:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8D:85:DD:E4:3B:51:F0:74:5C:B8:2C:51:A0:8D:DE:3A:B9:85:57
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0f:ce:32:14:b2:2f:3b:a3:88:76:42:ef:d7:0a:81:05:08:
6d:4b:aa:ab:ca:e9:76:cd:47:06:c5:09:a7:eb:5f:f0:16:31:
80:1c:f2:98:06:fc:11:95:b6:b4:b6:9d:62:57:68:07:e9:e4:
b5:d3:25:89:51:de:7f:74:39:41:8f:60:e9:e1:24:d8:c8:fc:
2d:5d:c3:fa:48:24:6e:4a:56:1a:27:56:c7:f8:9d:b7:55:fa:
6e:f0:3a:7d:3b:1e:25:71:65:98:6d:e7:90:50:c2:94:8a:66:
fe:18:ec:f9:40:d6:c9:44:24:90:13:b7:40:63:a3:04:dc:1b:
ae:0d:7b:c1:85:35:ef:33:95:76:32:f6:db:97:33:55:90:fe:
81:44:5c:10:13:24:3b:e6:f1:e0:0c:b1:12:f2:e0:31:20:50:
20:1e:2f:5e:ff:26:df:25:5d:3a:38:00:7e:02:e1:5c:dc:fc:
f7:a3:63:c3:54:92:74:ea:3a:b8:dc:4d:20:b4:4b:9f:f0:c2:
68:d8:4d:c0:f6:71:33:d8:d8:42:9d:a0:8d:9c:b4:4c:ef:82:
d2:87:f0:9b:d4:d9:39:4e:bc:64:fa:83:8d:50:e7:37:38:e9:
95:0e:27:fc:b9:73:23:5e:07:af:ef:3a:0e:7b:61:31:73:94:
e5:2d:d0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:27 2026 by rpki-client