Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: HXAjAU2lfjPmyXNL35xbX0PPrIegZNDR0ha2w0rhOUk=
Subject key identifier: ED:3F:2E:63:36:DC:1A:B8:05:C5:BE:8D:F5:4F:80:18:A6:0C:DD:D0
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 019D3909BD5666D5C4755C406AF9831F0626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 059B
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: Q34yPBrDTWKDo0UfxsVxFEC50UnrZbYo3vok4WTWGew=)
2: q_PyfNokBeIwV9ZVtxUDykAzbyo.roa (hash: nCsivWX18Ek0Fvcd2OhF9dAgd1gXwooWGtpWmt/HjOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bd:56:66:d5:c4:75:5c:40:6a:f9:83:1f:06:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=ed3f2e6336dc1ab805c5be8df54f8018a60cddd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:43:5f:f8:37:03:da:2a:01:bf:a7:86:12:
8a:b6:3c:af:d6:32:1b:83:d1:19:bb:14:28:04:a9:
2f:db:c1:60:5f:6a:84:cc:e4:53:21:ad:bd:3e:14:
7c:9e:52:03:dd:37:a5:60:b8:c3:0e:c6:85:74:d7:
b9:06:a8:b2:fc:93:3f:5d:bb:78:10:11:2b:05:93:
75:5a:20:66:11:bc:86:da:37:99:db:43:70:21:e8:
e0:6d:67:fc:6c:75:4b:50:40:32:29:ce:af:a5:fe:
5b:20:02:cd:d4:0a:53:28:0f:c6:49:8b:6e:cd:a2:
de:68:be:cd:d7:84:15:0b:d3:78:dc:ed:c6:e8:51:
95:2f:55:c3:4c:8f:60:76:2a:d5:00:c6:7b:e3:86:
12:56:19:e8:15:ba:4c:b3:c0:69:ae:ab:33:51:85:
cb:51:44:ca:98:b0:3b:67:e3:88:9c:cb:52:0e:61:
12:d6:63:83:30:a4:b0:71:ca:7a:cf:01:ae:e1:3d:
73:52:c3:59:ad:4a:30:b4:2f:24:12:34:50:a1:4e:
60:b5:9b:d5:8b:fd:e9:ae:c9:0a:e4:6b:b1:95:68:
4a:31:0a:3e:09:2c:df:86:60:25:52:56:7a:9a:71:
53:21:5f:ec:71:e9:bd:a3:54:e4:c3:36:e8:b8:51:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3F:2E:63:36:DC:1A:B8:05:C5:BE:8D:F5:4F:80:18:A6:0C:DD:D0
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:9a:5a:12:69:9b:3b:d6:c6:3c:2f:f7:18:68:d9:6d:90:df:
44:96:f1:c9:15:59:fa:d5:63:0e:da:ac:c7:ec:ec:1a:dd:a0:
01:31:bd:df:64:18:ef:c8:52:f0:df:45:27:6c:82:02:ce:5f:
07:a6:e3:de:d4:3b:bc:55:3b:56:a5:f9:4b:aa:7f:4f:e7:ba:
11:27:43:7b:fa:b2:36:3c:c5:02:86:be:71:2c:11:7d:83:d5:
9b:58:70:8c:a9:1e:3d:2b:44:b3:ef:1e:31:b8:94:9d:b3:07:
ce:cb:fb:9a:bc:3a:65:f8:ce:9e:a8:66:b1:d3:50:63:f9:af:
80:08:6d:e3:e3:3f:9c:e0:7d:ca:4e:61:9b:3f:72:d9:a4:93:
b3:ab:75:54:ac:78:ca:6b:d7:ff:d2:53:57:a4:bc:cf:e4:cd:
26:2e:0b:7f:25:00:12:ab:4e:b3:2a:e8:89:8b:0a:d6:09:1a:
a2:0c:37:5e:59:82:83:68:e7:26:bf:9c:1d:c8:ab:e9:37:09:
6d:25:8b:22:c4:8b:cf:8f:56:ed:36:e6:78:52:26:cd:ae:06:
ec:ab:2c:08:58:fb:26:e5:7f:17:52:0a:a7:a8:09:1d:d9:8f:
bb:a1:6e:37:9d:2b:a7:73:d1:5c:60:a9:a3:ef:b5:31:f1:0e:
f3:a9:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:15 2026 by rpki-client