Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: Z6OsJifi8yZ9m2bTrHPRHYNho/01Fx4kfFAdkgoFyiY=
Subject key identifier: 0C:BD:96:BE:CC:03:CC:ED:01:0E:0F:AB:90:C1:71:FB:09:69:5B:C9
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019CE5914A7E2E405FB685668286E78C554D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0CDF
Signing time: Fri 13 Mar 2026 05:00:30 +0000
Manifest this update: Fri 13 Mar 2026 05:00:30 +0000
Manifest next update: Sat 14 Mar 2026 05:00:30 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: LgTv3pikY5I8lGktjWO/Yt6l7SVacgkvhgVX+H7Pvrc=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:4a:7e:2e:40:5f:b6:85:66:82:86:e7:8c:55:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Mar 13 05:00:30 2026 GMT
Not After : Mar 14 05:00:30 2026 GMT
Subject: CN=0cbd96becc03cced010e0fab90c171fb09695bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:78:5a:fe:81:fa:67:3f:97:db:68:fe:fe:
cd:e3:b3:84:36:07:7c:ad:96:83:f5:20:ac:5d:f2:
74:b7:8b:18:e0:67:cf:b1:fe:29:23:bc:62:de:62:
f9:76:e4:5b:2b:cf:1a:ff:01:a9:ca:5b:2e:86:cd:
59:58:c9:f3:e5:e5:3b:ff:40:1f:9a:ac:cc:1f:ab:
d4:d8:40:7d:12:08:a9:7d:83:30:95:8f:90:77:f4:
96:78:44:67:68:50:cc:23:a6:16:e1:9a:34:48:47:
f8:1b:30:d8:9d:5c:23:e0:7c:28:94:f9:f3:6c:3f:
9c:f7:40:80:7f:e6:9c:3c:00:68:1c:93:13:fc:c3:
29:18:8b:0b:8b:38:15:e1:09:09:48:a8:ab:f9:51:
25:4b:b3:91:46:12:df:e0:ce:fe:84:c4:b5:0d:6e:
da:9e:40:dc:e8:e8:33:e0:e7:e0:b3:31:0c:b4:1a:
ba:03:14:5b:e0:75:58:a8:11:2d:26:9a:c8:28:44:
78:d0:ed:8b:93:35:31:00:a6:3c:25:4d:56:fd:d6:
93:3c:62:f5:79:3e:a0:9b:fe:85:f5:29:de:43:39:
1b:4a:4c:bc:1a:53:40:70:61:45:e8:12:25:30:8e:
8f:0f:a7:97:ce:9b:fd:ea:c6:7b:3a:f5:c4:98:5f:
57:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BD:96:BE:CC:03:CC:ED:01:0E:0F:AB:90:C1:71:FB:09:69:5B:C9
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c2:eb:e5:08:79:47:44:2e:7b:ec:ac:7c:a4:fe:8e:c9:6a:
02:78:94:ae:63:9e:0a:b1:3d:35:6a:6a:c8:91:5a:8b:b9:03:
5b:d9:d1:e1:8b:b6:4a:54:97:be:c6:6a:fc:38:f6:83:f3:13:
ef:e5:71:07:b1:50:b0:25:38:1b:18:7c:46:4e:fc:1f:e8:e0:
b2:98:4d:8c:d1:8e:9a:f0:44:ae:9c:f1:5e:cb:9c:93:d1:9d:
af:dd:7b:11:1d:ec:82:d8:46:62:ac:0d:2e:7b:9c:69:18:8a:
5a:c5:4c:e8:f3:1b:87:57:78:43:7e:4f:68:db:09:bc:33:79:
7a:9c:2d:8e:05:23:f7:ae:11:fd:1b:07:35:2c:38:6f:58:08:
be:2c:73:8c:3b:70:50:4d:d1:8b:be:1a:e6:c3:f1:0c:25:6a:
99:85:2f:16:c6:29:8c:ab:ef:1a:1a:a6:a5:5b:43:04:32:7c:
02:74:d0:67:28:58:dc:85:b6:56:94:60:ce:62:c3:f8:03:e7:
6c:8c:d8:b8:4f:c4:bd:18:77:ea:2e:b5:de:73:54:e5:b2:81:
ed:99:db:2c:5c:6a:3d:db:94:fd:59:f0:34:cc:68:e2:a8:d2:
02:48:5d:af:d8:44:cd:03:72:83:bf:60:3b:f2:d9:12:05:1a:
90:d0:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:18:35 2026 by rpki-client