Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
File: 9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json)
Hash identifier: 1UX0lOWUOlmqTLjQq8v3gMj6tan8vZ8x/s8W2W9oFLs=
Subject key identifier: 0A:93:AB:86:D4:DE:0C:12:3B:0F:BD:C3:47:04:9D:2B:51:81:7F:AD
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Certificate issuer: /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial: 019D37F728C12BE093A7DE3CF389C9443964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:37 +0000
Manifest this update: Sun 29 Mar 2026 05:00:37 +0000
Manifest next update: Mon 30 Mar 2026 05:00:37 +0000
Files and hashes: 1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: bzGs584MJdHqiimiLzhFV+ewEZjrXP0CImrRs3B9+Tc=)
2: PTGVKq0rtp-W0LQXrCMcfxye3TY.roa (hash: CHD9DCCggVJLAY5cygmu9cgDCvnD2GXCe9SYsLHbrlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:28:c1:2b:e0:93:a7:de:3c:f3:89:c9:44:39:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Validity
Not Before: Mar 29 05:00:37 2026 GMT
Not After : Mar 30 05:00:37 2026 GMT
Subject: CN=0a93ab86d4de0c123b0fbdc347049d2b51817fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:9b:0a:ad:39:a0:2a:05:55:76:da:86:83:
e1:85:52:86:8c:26:1c:35:e7:cd:11:e6:4f:67:b4:
03:fe:61:a6:86:c7:0f:2b:de:f6:f0:a7:56:f6:eb:
02:1e:c0:8a:b4:b4:ff:8c:32:36:cb:b6:8d:d1:89:
b9:b0:60:bb:50:36:d4:20:0e:d0:97:be:a1:bf:b6:
14:a0:da:58:1f:21:9a:b3:22:03:da:10:22:a1:8f:
f9:64:59:d5:75:cb:2d:68:13:d7:6e:a4:7b:cd:e9:
98:4d:1c:1c:35:2c:d1:d7:5e:55:1c:54:a1:bd:4d:
5f:33:bd:2c:8f:78:e8:75:b7:a5:0b:8c:02:a8:fe:
53:fe:b0:09:7d:c7:ca:e3:d1:9f:bc:2c:f0:ec:d6:
44:37:59:5c:05:ec:64:c1:71:1e:d9:92:42:ad:62:
47:9f:ec:fd:50:96:b4:bd:5f:62:90:9f:bd:85:be:
47:37:1a:5c:2c:04:91:43:b4:92:fd:f6:05:b3:22:
5c:5c:3b:0e:18:25:97:69:44:7f:7c:a9:7f:4d:a4:
68:c6:5f:78:54:ea:e7:ed:2b:68:3f:fb:f0:09:0f:
78:50:58:f6:ad:d2:f4:e1:e1:a4:7a:83:36:c4:e4:
97:3d:e1:09:2c:bb:43:24:fa:aa:4d:b1:01:d0:3b:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:93:AB:86:D4:DE:0C:12:3B:0F:BD:C3:47:04:9D:2B:51:81:7F:AD
X509v3 Authority Key Identifier:
keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f3:1a:1b:fa:7f:0f:3f:72:73:48:69:e1:e2:c0:76:ca:dd:
02:e3:ce:7d:63:57:94:98:ca:2a:d9:f1:7b:69:98:48:62:33:
52:86:aa:17:d2:10:ec:67:de:20:d5:2b:91:81:dc:a5:ea:97:
3e:37:54:c3:39:db:51:50:61:e0:0a:f8:ad:68:a0:eb:71:1e:
03:f3:d7:de:88:d6:7a:37:6c:84:eb:2a:94:90:e8:03:83:ef:
52:48:d8:9a:79:95:58:c2:d7:5e:f4:e9:c4:7d:fb:ba:57:cd:
0b:2a:f7:2e:c6:f9:74:52:3b:fc:8c:41:df:70:82:1c:5a:a4:
2e:0d:50:56:17:2f:bd:e2:0e:8d:2e:05:22:90:7d:c6:50:71:
a3:e7:78:e1:10:81:7a:24:6e:2e:3b:b9:9f:b9:d4:2c:bc:b0:
94:d8:e6:33:32:33:b4:30:88:4e:db:0d:52:da:df:5d:ca:58:
ac:1e:ec:79:ed:4c:ce:4e:d0:08:0c:d6:ad:98:b8:fd:51:9f:
77:95:6e:05:01:f6:29:c0:a0:8e:94:65:af:05:e5:9f:ae:32:
5e:28:00:09:bc:27:a1:98:13:be:af:96:31:e9:80:cf:fb:6e:
d0:cd:3d:2d:e4:1a:c1:b3:b2:21:26:e3:43:03:d9:46:c0:a1:
52:d5:64:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:25 2026 by rpki-client