Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: C8UnDbWuTaql96m5+vCQ3z+EJRSBFpU3Y0K7P5lDROI=
Subject key identifier: AF:E6:BE:D4:C6:1C:B8:A7:9C:6C:9B:F3:C2:F5:86:D1:00:DF:02:9A
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 019D3940A466CB1AA45D11DC3D9C65DA9A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 1208
Signing time: Sun 29 Mar 2026 11:00:30 +0000
Manifest this update: Sun 29 Mar 2026 11:00:30 +0000
Manifest next update: Mon 30 Mar 2026 11:00:30 +0000
Files and hashes: 1: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: jQTyfLvAbXYICIfUKpyfdZKlj4FXQirBoik9NQPoGf8=)
2: orL4sli2jaSeBff9va-I5ykDyO4.roa (hash: X71IZvpi5dNFJsBMRCrrWRzDFuE1IqQEepJ3uFR5Q4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a4:66:cb:1a:a4:5d:11:dc:3d:9c:65:da:9a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Mar 29 11:00:30 2026 GMT
Not After : Mar 30 11:00:30 2026 GMT
Subject: CN=afe6bed4c61cb8a79c6c9bf3c2f586d100df029a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:f5:f5:af:b2:16:61:75:3f:d0:cd:0f:c8:
20:77:31:d6:2a:b6:3f:15:0b:3d:39:d7:b1:2a:3e:
6a:62:54:85:b5:6f:7f:32:e7:a2:ba:e4:80:70:82:
2f:e2:e4:a2:f1:10:ee:8a:2e:93:a2:0c:78:7f:fd:
db:8f:cf:03:10:27:df:a3:8e:6b:e8:fa:d0:4f:e3:
d8:78:55:cf:22:94:07:25:24:69:e9:96:a7:ff:a1:
75:c6:04:7b:0b:ec:a4:e1:f9:81:15:e2:c5:24:b9:
61:49:3f:1b:21:02:7f:c9:0b:fd:0f:21:1b:72:11:
b7:cb:a2:c6:88:ce:cf:be:2f:f1:5b:9f:45:63:9b:
31:ee:e4:30:f3:b4:d8:a4:7f:b7:91:19:62:17:0e:
76:0c:5f:ab:94:9a:78:a0:73:d2:d6:7c:39:ae:99:
c5:9e:1f:91:c8:0b:e8:21:1a:b9:36:ff:76:48:c4:
ad:f6:65:0f:dc:7c:db:4e:89:a2:a3:60:aa:31:92:
c7:f7:1b:1b:0e:74:69:ec:55:db:1f:1c:4e:9f:1e:
03:09:7d:ee:b2:c4:41:09:f9:7d:a7:55:43:38:52:
dc:57:8a:2e:64:cc:91:70:56:64:cc:74:d5:bd:e1:
2d:31:94:a1:23:66:80:b7:55:90:08:5b:e6:da:88:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E6:BE:D4:C6:1C:B8:A7:9C:6C:9B:F3:C2:F5:86:D1:00:DF:02:9A
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6b:10:c4:54:f8:c0:e7:ea:ae:13:12:59:1a:1a:fa:40:2e:
c5:16:46:9c:7e:0c:b4:e7:b4:d2:33:8e:4c:48:37:2e:89:b2:
25:40:bb:05:71:c0:aa:3c:6f:6d:9d:82:79:37:e1:6f:f0:cb:
a3:7d:80:dd:b1:ae:12:29:55:6a:b0:af:11:89:82:53:32:fb:
31:ea:fc:97:22:61:7b:19:9f:ab:5b:a6:92:69:d7:22:ba:be:
4d:1d:c8:88:45:41:0d:da:6c:83:6b:b6:fa:fa:b9:45:a3:e0:
cf:08:59:1e:64:9b:2d:b9:cb:46:3b:12:a8:8c:c2:52:77:9c:
4a:b4:1c:c6:89:f4:f9:8c:09:c8:d6:ae:81:f8:aa:a9:26:fa:
90:70:39:0a:d7:c0:03:e3:a6:1c:7f:9d:6a:6e:67:77:93:93:
73:74:93:11:98:83:07:f5:94:20:f7:79:27:df:4f:a6:33:61:
06:14:86:8c:af:83:7e:2f:54:e9:5d:3c:d5:98:a6:ac:b5:1d:
fa:6b:a5:29:e1:2a:0f:50:87:81:c9:20:67:07:e1:f8:6e:5b:
0a:9d:f8:d6:72:b4:6d:97:4e:ed:aa:52:63:91:35:6a:da:12:
e4:ae:11:f5:9b:c7:95:f9:bc:f6:f8:c7:02:6f:9e:06:c1:c0:
d2:fe:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:14 2026 by rpki-client