Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: V3lo6chQJhQ5WQFBVGMMxifmhqJbJgoyCYs6H1LOGek=
Subject key identifier: F5:C5:FA:CA:8F:7B:FA:93:12:90:94:3D:68:74:B1:31:BB:BD:99:62
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 019D39408DC0AF21088E1684F674DE5AB92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 15C5
Signing time: Sun 29 Mar 2026 11:00:25 +0000
Manifest this update: Sun 29 Mar 2026 11:00:25 +0000
Manifest next update: Mon 30 Mar 2026 11:00:25 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: GC7Bt91lcPPbJxK2HDQGIr/Sj4jxC/qMNq5qbmbSlHE=)
2: 1vQkcMHCkliQRKl9aZ_MI-G0oZg.roa (hash: jJ0Z9gvnHkxzvx7TbvN1q4EtCEWPz3vfe0uvFzwej1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8d:c0:af:21:08:8e:16:84:f6:74:de:5a:b9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Mar 29 11:00:25 2026 GMT
Not After : Mar 30 11:00:25 2026 GMT
Subject: CN=f5c5faca8f7bfa931290943d6874b131bbbd9962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:8b:1a:6e:2c:5d:bc:ca:31:d5:f9:05:f1:
8c:be:18:45:f0:58:ff:47:b8:4a:12:34:64:0e:37:
b5:24:f5:94:bc:d5:78:a1:0d:96:a2:98:b5:5e:c8:
8e:2a:d2:05:74:76:25:7d:10:cd:a2:ec:0f:b3:87:
a7:15:10:86:20:33:bd:0d:25:ea:7d:7a:3e:9f:51:
5b:2c:6e:1a:f5:f9:01:d8:69:1c:47:47:39:40:01:
69:dd:d6:67:b1:fd:64:01:a7:77:f9:22:87:ed:aa:
50:fa:22:7e:48:33:99:a5:53:9e:a5:fc:e3:84:56:
33:e0:d6:e0:02:2f:41:14:ae:90:6c:54:ca:52:fb:
e7:17:84:57:c9:2e:6b:77:59:cd:47:42:fb:5b:57:
43:28:36:3a:01:98:f3:9f:f0:87:cc:4c:90:08:45:
7e:e1:a1:fe:67:b7:40:9a:42:96:c0:92:51:ac:7c:
85:ef:6d:0c:e3:07:ea:49:ac:2f:e9:6d:74:9f:da:
7e:9c:81:5c:93:d3:fa:65:e7:56:c4:39:2c:e2:2f:
ff:b0:cf:e0:a6:3a:33:9a:eb:32:fa:e6:1e:6a:d9:
e2:68:9c:85:27:9e:43:c0:15:0a:16:6b:8e:fd:c2:
d6:51:17:4c:a5:f2:0e:b3:e9:4b:79:28:e9:c4:27:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C5:FA:CA:8F:7B:FA:93:12:90:94:3D:68:74:B1:31:BB:BD:99:62
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:81:9d:ca:6b:39:cd:24:4b:07:5b:b4:74:01:fe:8a:a8:71:
60:7a:6d:21:3a:5f:66:b0:54:fb:39:ab:a8:7c:7d:2f:12:3f:
4b:a0:f3:0a:25:7e:8c:1a:0a:e5:45:56:9d:92:26:37:e3:10:
83:7a:5b:72:68:af:c5:f0:61:a2:73:43:51:f7:b4:d6:39:40:
a4:48:48:8e:6e:00:10:b5:a6:83:3c:ed:02:f6:4c:ef:81:3d:
61:ac:01:aa:f6:ae:7f:73:49:d1:fc:36:92:f5:c1:50:ac:1e:
dc:45:79:27:6a:ae:a1:6d:8a:9d:03:e3:5b:5e:2c:6a:e1:41:
94:55:4b:8c:70:23:7e:f2:16:66:ca:0c:0b:56:3d:cd:7e:f2:
26:ec:12:ba:f3:01:ab:bf:a8:5b:37:97:1e:d1:fd:be:f7:c4:
06:f5:bb:cb:0b:cf:fd:b2:9a:96:b7:69:39:76:84:12:af:d9:
91:cf:9a:5b:a5:7a:0c:07:2e:e8:9a:13:49:98:eb:97:69:ca:
4d:2b:e3:2a:ce:1c:ad:3a:67:c9:b3:11:1e:b1:3f:89:1d:b0:
2c:78:8c:d4:f6:7b:60:46:17:15:8c:96:cc:1f:26:fb:bc:16:
58:33:a1:c2:c2:11:08:11:57:ec:bd:56:bc:9d:13:69:9b:2c:
26:00:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:34 2026 by rpki-client