Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: IdSvAtQMYgsRA30GE5qQhuFnnT5nwiJlTZ9unoCNznk=
Subject key identifier: 6B:64:C9:C5:4D:3C:8A:24:47:27:8E:EE:F2:5B:8B:26:53:C6:E2:E1
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019D38D36A1A80BB68C5D7834F25DC1E628D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 147B
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: 8bD4cPR7o5aFB9rYHvsvZF5CQ6/tgEERi21YCBVQ60Q=)
2: YlUOJaq43NpuLvhyIjdUpjtIh5k.roa (hash: CQMT/ddbiL7hLzG2QkDs7berkHQrguNEVB/e2zlXUlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6a:1a:80:bb:68:c5:d7:83:4f:25:dc:1e:62:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=6b64c9c54d3c8a2447278eeef25b8b2653c6e2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:87:d9:f5:6b:9f:16:70:40:6d:85:55:0d:
3d:30:6e:4a:97:27:b1:f8:84:85:9c:5e:42:15:37:
62:08:09:ac:7b:c0:4c:ca:d6:8b:ec:5e:cb:14:ce:
27:03:1c:9a:02:af:0f:7d:cc:99:26:96:4c:57:93:
42:7e:18:a2:08:04:c7:77:0c:7f:e0:17:08:2f:0f:
3e:69:a2:f0:d3:7f:7f:2d:ef:24:f3:66:6a:13:a7:
cc:72:81:b3:26:1d:99:95:0d:1e:54:0f:a4:1d:7a:
fb:4f:2f:7a:c0:59:5c:89:92:af:8c:3b:b7:66:e3:
d8:68:f9:f0:9f:c0:be:0d:22:89:c8:e6:7b:d1:f6:
5d:1e:b5:bc:60:7d:55:a6:9a:ca:ec:f3:ad:7f:d8:
75:f4:4f:04:af:7a:de:08:d9:ed:87:f9:7d:67:cf:
e4:21:87:33:58:fd:97:ad:98:45:c2:fb:95:49:aa:
e0:bf:5f:d6:70:07:a8:d0:2b:80:31:a8:17:74:81:
78:93:4d:d0:bc:be:f2:68:a8:04:14:37:ba:00:e4:
63:cc:51:c3:d9:79:c5:6d:b9:79:8f:0b:f2:93:d7:
f6:02:1e:71:6c:9f:67:95:a7:8a:f7:80:1a:d3:81:
83:c7:ef:40:19:94:78:3e:0b:4f:74:d4:20:82:71:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:64:C9:C5:4D:3C:8A:24:47:27:8E:EE:F2:5B:8B:26:53:C6:E2:E1
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:55:c8:ad:2e:57:2e:c7:b4:06:41:51:ac:71:56:37:83:0e:
1f:5d:b4:5d:dd:ff:94:7f:65:2a:bf:d7:c0:fc:c4:36:87:a4:
4d:9b:80:20:d8:7a:18:9a:34:79:a2:7d:ce:f3:fb:44:c5:27:
d2:78:57:04:45:cd:82:66:3a:b4:1d:7f:3d:3f:48:08:e4:44:
b4:17:7f:1d:09:5a:3a:cf:50:9f:62:87:10:ba:f4:95:02:c1:
3b:d9:77:f8:48:a7:43:6f:0e:eb:de:30:30:06:96:b2:5c:f3:
04:ea:f7:b9:9f:b7:38:1e:6f:ae:88:04:95:87:53:1d:60:4a:
f8:9c:6e:99:14:21:cd:5f:b9:86:53:ba:f8:e7:c0:73:6d:6b:
45:ee:f8:2b:94:bb:42:1f:ae:c0:55:fb:7f:27:83:e1:18:b2:
0b:73:20:d0:42:ea:f0:7c:75:b9:1f:64:f2:42:34:88:c2:04:
2f:57:e5:b8:1e:0d:ab:9b:34:10:77:d7:67:fc:ba:fb:ed:31:
14:fa:76:47:81:ce:47:a7:95:8b:07:fc:9f:bf:ab:d1:ff:7b:
25:38:46:07:0f:9c:a3:09:a7:25:93:81:9d:8f:bd:2e:d9:62:
9a:32:99:99:47:66:94:9f:3d:c5:40:e5:95:38:62:76:74:d6:
de:06:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:30 2026 by rpki-client