Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File: 9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier: bzN366D/Ld/f8CA1geK10SEhH15QO8Cbh2Y50tT2oWM=
Subject key identifier: ED:0A:F7:A2:CE:1D:75:82:33:B4:01:1A:5C:BD:70:ED:56:6F:8E:0A
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial: 019D38D2EECAB81BF2AF7A32ED518670EA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: WgN19u5scadhNl4G7chnfoGEL//5sSYPuhCXo6KaGU0=)
2: JuwdF3pXKULgX8rdBkYwVawnKUg.roa (hash: J6niK53xMmSAm4XjHsm9sqSbekhWgzfMokxnfXFEmFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ee:ca:b8:1b:f2:af:7a:32:ed:51:86:70:ea:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=ed0af7a2ce1d758233b4011a5cbd70ed566f8e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:c1:58:7f:56:92:e8:fd:86:23:dd:4d:ae:
97:5a:8e:f1:f6:89:5c:82:4d:9d:80:8c:75:2e:41:
a5:b5:63:9c:79:f8:48:1b:80:81:85:29:f7:b2:18:
35:f7:b5:c2:50:77:f1:45:a6:cf:df:83:35:a5:09:
c3:8c:5d:28:15:bb:e2:05:04:8d:b7:73:b0:e3:a7:
69:7c:e1:eb:0f:4a:ad:26:65:a2:02:b5:af:7d:82:
cf:09:ff:b9:9b:d5:d0:90:61:fe:99:d9:68:db:58:
66:d0:f4:a9:a1:d3:7b:c0:1d:7f:66:44:b1:f9:1e:
87:94:ea:72:36:23:04:7b:40:02:df:6e:8f:2b:c9:
dc:05:ba:5a:72:7d:59:10:8a:0d:f4:dd:5e:cb:08:
c5:b7:20:d6:f9:11:b2:0d:fd:da:45:c0:4c:7d:e3:
77:71:e9:78:cc:5f:dc:88:ae:41:37:8d:02:b8:5e:
e8:cb:57:3a:38:90:41:c2:cd:4d:f0:b1:d0:cf:6e:
9b:c4:55:a1:f8:d6:62:31:f5:34:55:30:48:3a:8f:
49:96:a1:7b:ba:a6:57:04:32:23:98:06:91:5b:41:
28:20:ac:7c:98:29:73:d3:2c:6c:5d:ac:45:5f:a3:
01:63:a4:1a:bd:64:49:d8:46:91:69:a4:e2:be:a0:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0A:F7:A2:CE:1D:75:82:33:B4:01:1A:5C:BD:70:ED:56:6F:8E:0A
X509v3 Authority Key Identifier:
keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:89:3a:2a:9e:2d:d6:e0:99:28:7b:f7:8b:f8:85:47:8a:1a:
fb:e2:72:74:ab:90:3d:6e:19:89:a7:43:0f:6e:19:3b:c2:8a:
2c:56:90:2d:5c:52:aa:a5:2c:16:06:2c:c3:d7:b3:0f:a4:4d:
a1:5b:7d:c1:4e:a2:04:3d:23:05:5e:bb:bc:b4:71:06:03:ae:
4c:00:c7:26:a2:01:27:50:d3:88:95:a1:0b:db:9e:03:05:d2:
99:5d:df:12:92:33:fb:55:62:bc:2c:25:13:d6:98:60:78:60:
87:4c:68:1a:28:6e:d8:3b:96:b5:6b:67:ee:80:76:e5:ba:60:
9a:14:f0:63:d5:90:bf:b0:5e:25:3d:89:c5:18:86:fa:7b:c6:
7d:74:6f:2e:ea:a9:bb:88:3f:dd:d1:9d:b6:cf:51:bb:bf:46:
09:bd:73:f0:b9:c5:ec:7b:de:20:56:5c:3c:af:9a:d5:f6:80:
4e:4c:1c:4b:fd:7e:88:70:df:be:85:5f:6b:4a:ad:56:98:d5:
c4:93:d2:df:9c:51:cd:2b:14:e5:56:d9:67:a6:39:84:43:bc:
df:94:a4:25:8f:d2:3c:8e:ab:a7:7f:12:23:39:91:9a:1e:e5:
1a:e6:d6:c3:dd:ba:1c:56:cc:ac:cc:f2:a7:73:0f:44:a4:17:
35:c5:a9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:33 2026 by rpki-client