Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: p5geqGlvUbeqfOP5K0JURORK50YEzGp++C/jSO8kPzA=
Subject key identifier: D8:C3:74:ED:13:56:49:7B:5E:53:58:8E:8F:9C:FA:B7:6F:A3:1D:3D
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 019D3A53F551714C2D1742193BBDA6AAEE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0E59
Signing time: Sun 29 Mar 2026 16:01:13 +0000
Manifest this update: Sun 29 Mar 2026 16:01:13 +0000
Manifest next update: Mon 30 Mar 2026 16:01:13 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: YChjpb+/c7e+2MQ1TKj3yA8yyu0OqKvHvNKDDc6ln0U=)
2: I3Cwe_JfIHDw-5FguYkJbkBPot8.roa (hash: NhXNbLKSK6Zii6NTvjleq3atjNt9Qq9hOl62FzoteKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:f5:51:71:4c:2d:17:42:19:3b:bd:a6:aa:ee:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Mar 29 16:01:13 2026 GMT
Not After : Mar 30 16:01:13 2026 GMT
Subject: CN=d8c374ed1356497b5e53588e8f9cfab76fa31d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:39:8f:4c:c7:8e:d4:6c:2e:4b:98:82:0d:
46:be:d5:7a:31:80:a2:ac:bf:99:6d:86:ff:4b:e4:
10:0d:8c:a4:7d:6c:41:60:71:62:c1:26:4c:b8:7c:
40:ec:e9:67:46:c6:2e:3b:c7:c3:84:77:b8:c0:33:
d1:3e:72:73:e4:cb:70:bb:c6:31:37:bc:3c:95:83:
0f:a9:b1:93:88:3f:ca:89:9c:05:a8:1c:86:9b:cd:
27:28:f0:65:63:1c:03:38:73:06:14:cb:be:59:0a:
a5:ec:d0:de:71:01:cf:ba:e8:bc:a7:03:dd:aa:0d:
e2:3d:3b:ba:be:b3:d7:37:dc:86:e2:95:0e:e9:51:
f4:cc:e5:57:c5:51:eb:3b:bd:3d:3b:6f:4b:0d:2b:
29:c8:20:10:ff:54:d0:f3:8a:f0:76:1b:14:72:8e:
20:4e:30:31:f6:f5:5f:33:f1:a3:c7:e8:82:7a:aa:
92:93:79:ee:e5:19:2b:3b:dc:33:f2:e0:45:72:02:
f7:02:65:08:ed:42:9e:88:c7:a7:97:1b:39:7a:79:
34:9f:e1:22:45:30:81:fb:4e:c3:f3:e3:d0:21:7e:
cf:cf:8d:89:de:8b:32:f3:1f:65:fa:34:c2:db:99:
9b:fa:a1:2b:38:2b:ca:66:db:e8:1d:0d:f6:96:e4:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:74:ED:13:56:49:7B:5E:53:58:8E:8F:9C:FA:B7:6F:A3:1D:3D
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a6:51:dc:6b:b2:fe:d8:1c:a4:20:c3:00:c6:d3:b4:18:88:
0c:ff:c0:88:fa:e3:e1:0d:20:c5:cc:6d:6f:12:ed:5b:28:8c:
a1:bc:61:2f:f7:58:c6:58:3a:15:40:b7:9b:02:64:5a:15:13:
9c:bb:b7:00:16:27:28:5d:30:58:ac:ef:5a:18:6f:55:5c:58:
8e:90:db:f4:fe:31:69:b5:e5:d7:c6:05:aa:52:94:6e:a7:ff:
21:6c:fc:36:fc:fd:c8:b3:63:75:45:56:ee:ac:c1:69:78:70:
28:6a:41:62:cd:7e:76:75:cb:44:bd:88:e2:17:6c:58:82:25:
6d:d4:a0:1e:4d:9c:8d:95:c5:1a:44:36:9b:2f:cf:0b:17:0e:
60:bc:52:94:bd:6a:65:87:6f:d8:98:bf:5e:e7:15:67:de:08:
e9:5f:05:17:2c:a7:38:0b:d0:fc:da:71:89:03:ab:29:55:77:
d9:2b:a3:dc:3f:4c:56:1d:b4:bf:07:1a:0a:a1:d5:aa:9d:25:
fa:17:9f:74:58:8e:58:82:97:6c:1b:38:8a:26:65:43:89:3e:
df:da:c0:34:1b:7b:91:7b:96:61:09:5c:29:2c:49:78:a0:6a:
e5:c8:f2:a7:74:15:a0:6d:79:c2:35:ad:dd:21:9d:42:67:95:
f4:33:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:25:27 2026 by rpki-client