Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: ekW3qwQLZ4yJJ3zOy8JZft3Xu222UyjfEAf4hqDqNa0=
Subject key identifier: 8A:00:15:CB:D7:E2:A1:1D:85:59:E6:6D:06:25:7B:3A:E2:8A:21:B6
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 019D35D20F4F89B933C31F2F41E1B0A9BD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: 02D8
Signing time: Sat 28 Mar 2026 19:00:52 +0000
Manifest this update: Sat 28 Mar 2026 19:00:52 +0000
Manifest next update: Sun 29 Mar 2026 19:00:52 +0000
Files and hashes: 1: _nHQVX4gUfRcsyUXq5yHaGKdYhU.roa (hash: R3LVcKNvDMfvVqa7EK825MNQi2hSPcfWJhILpOzo+sU=)
2: bZGmBUJyBwx1sWA4_0env9myjwE.roa (hash: 4tsqiBWMFE9lEeiy6ibqGVOqXOKllflXzZwV282QLH8=)
3: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: AQMbVe482Gl0N9oEgrbbJgLCd+VXBnjNBJ/6JItN8I4=)
4: yWPZuql0MvhSm3JMA1hMhAx0qW8.roa (hash: 2i2jlPPD7IE9jQ4n5YA8j4oeQ4N7jBY19i7lQ4cGyLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:d2:0f:4f:89:b9:33:c3:1f:2f:41:e1:b0:a9:bd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Mar 28 19:00:52 2026 GMT
Not After : Mar 29 19:00:52 2026 GMT
Subject: CN=8a0015cbd7e2a11d8559e66d06257b3ae28a21b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:91:2d:1e:70:67:dd:32:39:65:4f:9f:4b:
34:cb:6e:a2:87:89:64:e9:b7:d7:ed:22:5f:66:3b:
77:5d:9b:c4:35:f3:c6:12:02:f8:0a:ab:e6:21:76:
5f:15:5c:34:c8:8b:11:02:6b:5f:29:1d:74:8e:b6:
66:c0:66:95:28:a1:83:d1:51:22:b7:04:30:35:29:
45:76:78:d2:9e:98:4b:3d:83:7b:0d:b0:0f:b9:cd:
79:14:1b:7e:4b:3d:61:bc:b2:4e:82:7d:84:e1:10:
b1:b3:c4:7f:65:81:a6:8d:6c:49:3a:a3:12:fb:82:
60:a9:2f:39:a1:75:38:66:22:55:c3:b6:17:bc:8b:
f9:f5:49:be:54:90:b7:a2:51:6c:08:c7:b5:5f:36:
56:ca:79:a3:57:0a:e7:03:4f:3d:3b:c9:11:a7:93:
1d:d2:1a:4a:5b:57:c1:41:57:10:35:75:b0:0a:05:
6f:5e:6b:99:94:06:75:91:2e:73:11:f0:63:71:56:
9c:df:8c:37:e4:2a:77:ac:57:0d:fe:fc:66:49:30:
17:61:bd:3b:aa:90:35:6b:6d:cc:26:c3:1b:51:66:
ae:4b:2d:ee:78:ab:a0:25:65:58:0a:84:5a:f8:97:
16:6c:e8:99:9c:d2:80:62:e5:92:f8:ec:ad:de:c6:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:00:15:CB:D7:E2:A1:1D:85:59:E6:6D:06:25:7B:3A:E2:8A:21:B6
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ee:dd:85:d1:1a:1a:40:d6:53:c9:2a:77:6b:3a:0c:28:86:
9f:90:56:bc:43:b3:1f:b9:45:f0:ae:c7:98:8d:68:32:0c:95:
7a:fb:c7:07:bb:f2:70:53:ef:54:bb:b7:3d:41:21:3a:de:ad:
7a:d2:e4:a3:3c:7e:f5:4a:aa:a3:5c:89:a7:92:c7:8d:34:f3:
22:a8:df:56:79:16:72:7a:7c:c9:0b:14:18:b0:01:48:fe:98:
d0:d1:dd:cf:62:8b:c6:81:b0:1c:5c:c3:e1:4f:2b:8b:16:17:
2d:32:5e:ac:34:94:76:04:70:04:40:57:4b:90:eb:81:63:89:
93:9a:51:36:6b:b8:dd:72:3d:d5:93:47:f9:75:ae:df:df:66:
ca:7d:c6:71:11:64:d5:c0:1e:2a:4f:e7:a8:a5:9c:73:e4:1e:
c5:88:81:f5:6b:ae:aa:e4:5d:43:f4:f3:e7:77:64:ed:69:20:
ed:87:61:05:ff:eb:3f:69:a8:c6:c3:dd:14:3c:f3:65:bf:a5:
70:3b:04:fe:5a:d4:18:43:78:6e:c2:50:14:54:6a:55:2b:cf:
f2:c0:81:57:cf:95:d8:f4:4a:8c:c1:b6:f4:82:c1:40:84:bc:
c5:48:40:95:1b:1e:7c:65:8d:1a:16:67:74:d3:7e:c9:04:68:
ae:5a:bd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:45:22 2026 by rpki-client