Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: 1SeRsH3IZWYTOW8RRDbv/3d4dLEOlzYgms5RaAUo6ZU=
Subject key identifier: 9D:B6:B7:2D:BB:DB:69:83:5B:A9:DB:AC:AD:7D:C6:E9:ED:1E:8C:7F
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 019D3909C8F22F42E47F0C5ED5D1BF2EA5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 0FAE
Signing time: Sun 29 Mar 2026 10:00:35 +0000
Manifest this update: Sun 29 Mar 2026 10:00:35 +0000
Manifest next update: Mon 30 Mar 2026 10:00:35 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: lDIIUVx3O8FjjiEZrUwGS7LhBXJM8GTGKhFi9gikCpk=)
2: EbkZTFb2VFqMx2a_D6MlchqeqkI.roa (hash: hHzZ/zf777mCNzIX/f5moIT+5CBboFuObhSKwaqB7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c8:f2:2f:42:e4:7f:0c:5e:d5:d1:bf:2e:a5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Mar 29 10:00:35 2026 GMT
Not After : Mar 30 10:00:35 2026 GMT
Subject: CN=9db6b72dbbdb69835ba9dbacad7dc6e9ed1e8c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:d3:10:a9:4d:a6:55:f3:7f:06:09:ab:bc:
67:a1:a6:6f:2b:71:fd:29:26:3f:14:a3:f5:6f:ec:
21:7a:5a:11:06:b5:af:f0:3e:fd:20:81:d4:0b:d1:
4c:d6:24:94:3c:67:c0:95:e1:46:8a:10:1f:b8:ec:
bb:21:95:c8:51:1c:11:75:7a:45:4d:11:0f:8b:99:
58:50:70:c1:cf:a4:f4:32:e9:d7:c9:05:0f:ce:cd:
c4:3e:e5:93:ba:2c:2a:45:e1:14:e4:60:27:64:c0:
fb:0f:58:e9:ff:28:24:58:48:5a:e6:59:81:0c:cc:
3d:27:ce:de:fc:8a:39:90:71:9f:f5:b3:31:f2:45:
05:57:41:2d:a9:fc:ba:e2:49:fe:66:6d:1f:5e:c6:
29:55:7c:5e:40:d9:e2:47:8f:86:86:6e:13:a0:c5:
d3:a3:fb:9c:b4:1b:be:a4:0b:16:21:f3:17:d5:89:
7f:52:b0:d4:38:c9:32:f8:f5:58:11:47:c0:83:d0:
97:e2:8b:13:ed:8d:01:0b:39:99:84:0b:e8:23:e6:
8c:a6:f4:9f:a6:d9:09:02:27:3f:b1:b4:ae:01:54:
67:46:b2:eb:b2:19:a5:e5:ba:ba:ae:85:47:1e:3a:
53:cc:46:0a:cd:2a:ae:1a:0a:98:20:71:da:65:fc:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B6:B7:2D:BB:DB:69:83:5B:A9:DB:AC:AD:7D:C6:E9:ED:1E:8C:7F
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1c:e8:44:ed:2d:4f:7a:0f:6b:82:4b:ac:a3:d5:e1:0a:35:
21:a6:52:33:9d:e8:d9:cb:b2:d7:52:83:77:6f:98:78:54:2a:
3e:eb:bb:f1:eb:07:4a:13:79:81:15:b6:b3:25:76:6c:98:2b:
5c:33:f0:3f:e1:9b:2a:c6:5c:dd:7f:73:f8:c5:17:8a:49:80:
3b:2f:b3:5f:cd:94:eb:7d:60:74:e1:34:e0:52:a1:e2:9d:a5:
67:86:af:7a:02:9d:b6:fb:7f:a6:01:da:66:d7:a2:f8:e5:7a:
23:45:73:66:8e:a6:4a:bf:ed:c9:c3:42:bf:4c:41:eb:a3:93:
7e:24:67:3d:ff:31:1b:2a:3a:45:05:80:5e:a8:ad:08:ad:55:
c4:f3:16:f8:67:c7:26:8a:db:69:ca:ed:8d:56:d1:99:31:6a:
94:d2:c3:2f:55:76:21:05:ae:b0:4f:84:c2:11:38:da:87:41:
cc:fb:08:3a:04:5e:09:d4:c0:27:a5:69:01:af:bb:4e:e3:22:
7a:26:94:ab:f7:ce:a3:dd:37:a3:58:1a:d5:ee:00:22:87:61:
55:b2:60:5e:68:04:b8:df:f4:33:a7:c0:a0:6a:ad:b9:df:c7:
c4:b0:75:29:b1:7c:99:41:d6:d5:8f:5b:f1:f3:c5:d2:c3:fe:
29:e2:90:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:51 2026 by rpki-client