Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
File: 9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft (raw, json)
Hash identifier: OoN3LMKNIi6BKcRon05S0DpbKf06DnSmcAHehaA/QT8=
Subject key identifier: A5:ED:95:EF:CC:28:4A:39:EB:69:D3:34:E1:53:9D:71:C4:49:9F:BB
Authority key identifier: F4:DD:8F:BB:92:F9:B4:74:61:87:D9:D6:3F:E9:B9:0F:CB:5E:CA:17
Certificate issuer: /CN=f4dd8fbb92f9b4746187d9d63fe9b90fcb5eca17
Certificate serial: 019CE3D9CD54E019FDD1E9385D001FEF0CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
Manifest number: 7B
Signing time: Thu 12 Mar 2026 21:00:27 +0000
Manifest this update: Thu 12 Mar 2026 21:00:27 +0000
Manifest next update: Fri 13 Mar 2026 21:00:27 +0000
Files and hashes: 1: 9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl (hash: XkCC5GpxwqXIOOGXbKcvO9ivKFkTQi5XLs+RF269UNY=)
2: wosvCdYOBGKEXb-UprSvx0MCphs.roa (hash: tnEA6MDP3i67STNORkdr3Hyo+omI4rqXgbveiy6Se1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:cd:54:e0:19:fd:d1:e9:38:5d:00:1f:ef:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dd8fbb92f9b4746187d9d63fe9b90fcb5eca17
Validity
Not Before: Mar 12 21:00:27 2026 GMT
Not After : Mar 13 21:00:27 2026 GMT
Subject: CN=a5ed95efcc284a39eb69d334e1539d71c4499fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:91:5c:e4:c7:b6:55:65:59:95:2b:32:36:
c6:0d:c5:73:ee:c4:09:f4:ed:01:bd:ec:d1:70:3a:
0d:8f:79:9c:d7:4b:48:d8:0e:87:94:27:1d:15:92:
97:8f:4e:7c:61:94:e2:b7:36:16:6e:c4:55:8b:e4:
6d:24:63:bf:55:ed:d0:a7:18:78:87:88:60:e0:c4:
a3:86:ad:c6:ad:79:e0:9a:d2:4f:ef:f2:cc:1d:fc:
40:2e:43:c8:05:bc:b5:f2:4d:d8:74:15:bc:bd:1e:
78:0d:9a:98:23:9d:0a:66:44:c4:0f:e0:42:aa:40:
ed:bb:b3:8f:2a:cd:75:f0:4f:8b:09:2a:ac:14:05:
ee:33:3d:1f:25:f2:35:0a:5e:7d:7a:6d:3a:dc:90:
6b:09:9f:66:48:ee:7b:c5:4f:5e:f6:10:7d:c4:93:
c8:76:f0:28:44:f5:3e:2f:78:9b:03:7b:b6:7c:0e:
85:a0:8a:6a:d6:0e:fc:5e:50:43:83:bc:f3:43:24:
53:c2:1e:58:9a:83:c9:7e:d3:31:b5:0b:f8:fd:b2:
d0:3d:cb:2c:7a:ad:60:3c:5d:d1:8c:77:ce:3a:6c:
b8:7b:5b:d0:14:96:a3:4f:77:28:23:60:3c:5b:32:
76:80:85:0d:d2:4c:a0:38:93:0c:8d:e1:d1:b4:d5:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:ED:95:EF:CC:28:4A:39:EB:69:D3:34:E1:53:9D:71:C4:49:9F:BB
X509v3 Authority Key Identifier:
keyid:F4:DD:8F:BB:92:F9:B4:74:61:87:D9:D6:3F:E9:B9:0F:CB:5E:CA:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:80:c5:ab:58:58:2c:1d:8b:cc:b4:c4:e0:37:9b:81:db:ab:
96:c9:b9:41:a4:fb:f1:e3:32:9f:78:ce:74:9a:3e:d1:95:37:
a5:64:f2:06:dd:3c:b8:05:a8:24:df:b8:e7:b8:8c:6d:69:4a:
22:80:72:2a:6d:0a:53:55:1f:53:60:79:2f:9c:61:e6:9b:94:
b1:44:aa:51:4a:8b:e8:82:05:c5:d9:ed:98:3d:fb:12:3f:b4:
3b:9f:37:7d:97:ab:40:25:d2:13:01:56:23:43:ff:21:60:26:
ad:93:bd:65:ed:43:bd:0a:c7:4f:8b:5b:6a:8e:2a:02:a4:4a:
33:bd:d6:ea:04:c7:9a:4c:94:3d:14:7d:14:8a:a2:5e:df:bd:
be:43:d0:b6:e1:83:fe:f9:8d:ab:6d:35:6e:b6:7b:0d:a3:80:
59:dc:dd:25:71:04:c2:da:d3:c1:8f:53:e5:5f:49:0a:1c:45:
c2:92:ee:f6:db:e3:25:ba:02:5f:f3:2b:14:f6:b0:a4:f5:bf:
04:d5:df:13:41:25:39:e9:74:2b:ee:a2:cf:1c:69:66:91:af:
23:f3:d7:39:a9:e5:f8:c8:55:ef:89:f3:02:36:08:08:80:c8:
ad:94:5e:ec:ab:49:dc:19:65:52:a7:4f:a7:ae:13:d8:b4:5d:
80:7b:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:00:13 2026 by rpki-client