Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: vHqyOjt2xqfc8ilgCwxM9BURG/hh+HlEdKLFfIQWrnI=
Subject key identifier: 01:DA:1C:83:CA:A0:EC:54:68:96:62:15:7B:F3:87:4F:79:FC:E1:2C
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019D371BFC20C8351F89B9F6984039A1B88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:01:14 +0000
Manifest this update: Sun 29 Mar 2026 01:01:14 +0000
Manifest next update: Mon 30 Mar 2026 01:01:14 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: s6rqKOZQ/FvO2e7MW3cAKCQerclCKP+CAkWijk9T2SE=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:fc:20:c8:35:1f:89:b9:f6:98:40:39:a1:b8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Mar 29 01:01:14 2026 GMT
Not After : Mar 30 01:01:14 2026 GMT
Subject: CN=01da1c83caa0ec54689662157bf3874f79fce12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:26:af:94:77:88:ce:0d:ef:d2:c2:99:df:72:
ee:0b:81:83:f1:8d:37:c5:51:bc:9e:ab:5a:95:dc:
08:b5:3e:53:16:ef:de:43:f8:50:5f:b1:cd:9a:ef:
0e:04:a9:15:f3:81:40:a3:d3:f7:80:73:02:d2:82:
df:c1:f9:9a:39:71:6b:e7:ab:73:59:c3:05:46:f6:
6c:81:28:7c:bd:25:7c:89:5d:fe:68:91:d3:b0:21:
b9:98:43:f7:4b:b2:a8:6f:3f:66:1c:64:e5:f0:4f:
a0:ba:a3:4a:43:01:48:1b:cb:85:0e:de:8e:fd:6d:
3c:6c:b7:7c:2c:35:16:b9:dc:ed:70:db:fd:b8:b7:
bb:60:cf:11:68:13:02:4e:d2:78:a3:fe:dc:ac:3c:
e5:bb:48:87:77:d3:a0:98:11:ba:b7:9f:fe:06:6a:
e6:95:68:a5:3c:96:7a:8f:e7:74:d0:fa:df:85:23:
1a:ae:70:35:af:0e:75:8d:e4:55:e1:06:4c:39:e4:
87:d2:8f:27:37:0e:15:88:d4:f9:d2:9c:14:bc:e3:
b4:45:c9:f9:c9:3a:d1:5b:35:3b:81:eb:90:24:69:
d3:f5:1a:b0:48:7f:aa:26:25:5b:dd:1e:b3:82:18:
17:f8:1f:7f:05:ab:1d:10:58:b6:f5:49:dc:41:c6:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:1C:83:CA:A0:EC:54:68:96:62:15:7B:F3:87:4F:79:FC:E1:2C
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:de:2a:b6:5d:7e:95:74:50:4a:cb:22:2e:cc:b1:18:3a:94:
f0:e5:1d:a2:54:d1:5c:af:3a:fb:b2:b3:05:9b:bc:ef:9a:1b:
22:c6:d6:b9:07:59:13:f7:92:36:4f:5f:53:67:12:a1:ec:a2:
96:6f:9d:70:9e:8c:77:22:ba:40:7d:68:69:9c:c1:ab:8c:cf:
31:9f:87:78:ab:41:35:b9:d5:29:87:1a:7d:0e:08:8d:64:4b:
14:c3:dd:fe:d5:65:b8:09:12:9a:07:c8:8c:ce:ed:31:e5:a5:
2a:9a:eb:7a:85:f4:94:46:20:5c:7a:dd:02:5a:af:99:a2:82:
f8:37:c6:5a:1a:f4:77:10:09:40:1d:ab:aa:0e:7e:e9:d4:b8:
c7:e9:d4:86:4d:2c:53:1d:42:c9:03:85:ad:64:1f:5d:e4:61:
2d:49:44:ce:cf:98:37:1b:3a:4b:9e:a6:25:02:1f:23:be:27:
fd:65:14:56:43:37:5a:28:61:1e:76:98:df:73:79:b4:0a:10:
99:64:a3:cc:ae:dd:b9:b9:9e:b0:08:9b:d9:e6:03:7b:5d:50:
26:11:8f:3b:ee:d4:56:ae:06:6b:d2:d8:9f:2c:c0:5b:36:1c:
28:1f:97:6f:42:bf:3b:88:13:b7:e2:c2:8f:b1:f6:5b:b7:8b:
48:a5:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:38 2026 by rpki-client