Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: wsec6winjA3PN35iqwVvisXiJUQROnsvqM2foucSeJY=
Subject key identifier: 81:E0:9F:D7:DB:9C:EC:7C:78:B9:93:96:55:B4:06:9D:E7:A0:1F:70
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 019D39E5A3E23F54DF6DC2A832786536FD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 14:00:43 +0000
Manifest this update: Sun 29 Mar 2026 14:00:43 +0000
Manifest next update: Mon 30 Mar 2026 14:00:43 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: H/LW/XGGexyY3idgpASww+OcZRrsUVVj2CoVFoyuMxw=)
2: CvAwcxB4NQhTMik421cY6D4GJSQ.roa (hash: bDEysHdEoYRzyx+ZtQs8J1SFqsQ1uvog9sHvqZgzUSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:a3:e2:3f:54:df:6d:c2:a8:32:78:65:36:fd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Mar 29 14:00:43 2026 GMT
Not After : Mar 30 14:00:43 2026 GMT
Subject: CN=81e09fd7db9cec7c78b9939655b4069de7a01f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:23:1b:c5:62:fd:8a:9c:36:e5:bb:f1:c6:
da:c7:cd:98:8a:d2:d9:94:c3:00:93:64:b0:17:6e:
af:67:fb:e4:2e:5c:2f:f9:5b:61:48:f2:b6:ab:3e:
71:14:31:5f:8b:69:8d:ea:22:e5:56:c5:c2:3e:43:
34:c7:64:c1:a7:d6:8d:cb:4f:85:21:b7:40:a3:7f:
e9:d2:98:1c:56:28:d1:03:63:17:70:2f:64:3d:a5:
22:34:93:5d:db:7a:85:e0:ad:25:ca:f7:06:6c:1f:
66:da:b3:43:67:e7:62:90:cc:24:55:27:78:0f:70:
c4:65:37:c2:b6:54:91:dd:5a:9a:ea:cd:43:da:54:
7e:19:eb:27:28:34:12:28:28:54:fc:7b:5e:89:89:
18:e0:50:fb:d5:05:be:7a:6b:d0:9d:92:6e:0a:92:
ae:a0:f9:56:7c:9d:3a:cf:f5:f1:aa:2d:1e:c2:ef:
f6:28:8b:94:58:c5:e3:4b:5a:3f:bc:74:a7:5e:aa:
6e:c3:c9:2e:71:50:35:29:06:6d:cd:8c:1e:f4:02:
b8:02:a7:32:c6:7e:d9:91:6e:ab:65:a1:52:f3:8b:
cb:f8:61:3c:ab:95:5c:28:8c:f4:69:66:d0:09:e3:
40:ed:13:2b:45:4c:62:cb:94:1e:dc:6d:5f:eb:c4:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E0:9F:D7:DB:9C:EC:7C:78:B9:93:96:55:B4:06:9D:E7:A0:1F:70
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d9:24:49:99:a7:6e:c1:6f:c6:43:41:9a:83:8f:e2:26:32:
25:80:62:0d:c3:7c:9a:ee:83:a6:c5:63:d5:b6:7f:21:73:dd:
88:ee:6c:a4:aa:ec:36:de:46:ce:4b:d9:cf:1a:18:26:43:14:
7d:04:80:c1:d0:f7:94:85:ca:13:41:50:93:89:39:b3:78:c1:
40:9a:10:02:e4:98:9b:f0:c5:d7:3c:c9:50:87:8f:2c:f8:f0:
d5:55:ee:62:c5:b5:0f:77:3d:3b:f7:f1:f2:0f:c2:a3:97:f0:
1f:81:29:37:eb:33:1f:6a:b9:29:b9:18:87:ff:8f:56:23:0f:
8d:2f:ab:92:4c:ad:af:43:ab:42:a8:05:08:57:66:37:ed:2e:
cc:ac:52:0e:52:a0:08:b1:e3:b7:43:03:5b:a1:17:93:b5:6c:
90:d5:f6:6e:ec:e6:10:aa:53:35:c2:ad:dd:33:e3:6c:fc:d2:
c3:cd:1e:49:62:3a:ba:7f:e9:60:9d:85:9a:4b:48:24:da:52:
0e:c1:dc:88:ca:39:2c:40:2a:e5:35:5a:0f:da:fd:3e:35:08:
db:51:eb:77:1d:cd:38:5c:05:b3:12:90:4b:c6:da:a5:21:9b:
69:9d:18:ae:83:9d:0b:97:20:9b:df:e9:75:b0:7a:54:f3:d2:
7d:63:66:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:33 2026 by rpki-client