Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: FEVS9K0pg1nIRDuqXa663j9MKwz1OCbWDh3tNMkdN9A=
Subject key identifier: 95:77:B6:5F:3C:EA:77:88:35:59:FE:5C:94:B4:1C:25:0E:35:EC:AD
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 019D3940A5C093D5F047841CC47E98D4700D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:31 +0000
Manifest this update: Sun 29 Mar 2026 11:00:31 +0000
Manifest next update: Mon 30 Mar 2026 11:00:31 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: M92l8eBkczDvM94M9gxfakDiq2wpdXkURp4YaM8El/E=)
2: mGKvGN6mzAi9Xi9OgEnQnIpovsQ.roa (hash: AZAga0gvOyoyk29F5YS9oe0dyqX933PqnZoBR7aFkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a5:c0:93:d5:f0:47:84:1c:c4:7e:98:d4:70:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Mar 29 11:00:31 2026 GMT
Not After : Mar 30 11:00:31 2026 GMT
Subject: CN=9577b65f3cea77883559fe5c94b41c250e35ecad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:52:16:8b:02:59:51:ba:bd:56:de:f1:8d:
bc:6d:00:39:29:9a:23:83:a4:23:1e:af:cc:92:f1:
84:f7:cc:04:99:6c:6c:99:bb:23:9d:2a:59:c2:21:
d1:7a:22:63:c1:c4:a4:31:a1:8e:a7:26:c4:2a:9c:
84:6b:35:9d:3b:ea:56:b0:e5:8b:a1:f8:b9:5a:42:
d0:fa:fc:05:db:ff:fb:44:a8:1d:e7:2d:f1:83:5f:
9f:e5:8c:31:4f:20:0f:94:a1:95:d3:31:ad:00:fd:
af:1a:d2:0e:0f:b7:44:f2:5a:79:b7:5d:8f:92:ad:
35:9e:19:22:5c:28:fa:e8:20:30:1b:70:80:78:1b:
9d:fd:91:86:97:a4:e4:f7:81:4b:38:f9:5d:a1:5b:
19:e6:06:6f:e2:a9:8c:b9:47:54:d6:cb:e5:f5:b0:
1e:92:20:a4:78:54:39:aa:cc:4e:7e:ac:43:75:d3:
68:d5:2b:dc:cf:51:08:6e:4d:91:3a:c3:9b:f3:7a:
1b:86:fe:17:26:9b:e8:d9:78:0c:ec:c8:08:a6:38:
f1:40:aa:c5:a9:b0:05:ff:e5:89:23:19:d4:01:c5:
93:8f:49:48:5c:90:a0:6f:43:a9:fc:77:8a:e4:dc:
3a:f0:ac:f9:ee:91:e1:37:22:0d:44:8e:d7:2a:49:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:77:B6:5F:3C:EA:77:88:35:59:FE:5C:94:B4:1C:25:0E:35:EC:AD
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:88:a8:4c:77:b0:85:5d:38:77:cc:dd:4f:dc:2d:14:db:0b:
4a:e6:d9:51:e5:b1:6a:50:df:d9:19:1c:1f:19:f2:85:1c:57:
4f:81:da:a9:b2:29:05:09:93:42:b8:78:b9:da:81:37:75:9f:
9a:58:8a:2a:85:18:d3:19:8f:d7:65:96:49:82:5a:ec:94:8a:
0b:33:16:40:20:18:cd:77:22:d8:4f:d0:b7:70:1e:c2:58:83:
20:46:43:93:61:6e:57:85:fb:e8:9b:40:60:c3:ca:28:d8:f8:
aa:8a:f3:3b:bb:73:7e:e6:b1:27:39:26:8e:66:71:8d:65:16:
df:c2:e7:66:62:b9:34:8c:33:53:b2:78:90:65:bb:c0:a0:be:
a1:6e:e2:8f:d6:5f:94:f9:cd:a2:81:3d:1d:90:30:57:05:fe:
a7:69:51:94:11:31:5f:f9:6e:8b:6b:a5:81:77:5b:ac:a1:a3:
6f:37:92:83:3f:67:09:18:c6:08:4a:79:41:2e:67:70:ae:59:
f1:41:ed:3b:c8:2e:f2:fb:e9:15:48:ff:ea:b6:b4:73:ad:c4:
3b:c7:ff:56:94:4d:40:78:f3:7f:a0:c2:2f:58:a2:af:f1:5c:
36:36:ae:e2:73:6a:31:63:4c:d3:86:9d:57:09:90:73:e6:2f:
bd:d5:d1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:30 2026 by rpki-client