Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: Yp3XxFik5L7ASyVI0CA7Fn2ZK7xb+KaI9RJfTpeqAeI=
Subject key identifier: A1:2F:16:6F:20:05:B3:6B:9E:33:F9:40:41:6C:6E:7E:DE:A5:1F:E1
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 019D37C01C84D0BEED452E7F014A366F9C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:30 +0000
Manifest this update: Sun 29 Mar 2026 04:00:30 +0000
Manifest next update: Mon 30 Mar 2026 04:00:30 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: 7HnDoeadWw9J/lt/+2LV47l/i5Q/ea8JDQH5/D3D2Fo=)
2: smlZ7JTHvm4P3nZNzZsryZ_yA5A.roa (hash: +VBNM06YqR+uhNJp3b1HBKPNStgs2sJGwRLlTNxj+ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1c:84:d0:be:ed:45:2e:7f:01:4a:36:6f:9c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Mar 29 04:00:30 2026 GMT
Not After : Mar 30 04:00:30 2026 GMT
Subject: CN=a12f166f2005b36b9e33f940416c6e7edea51fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:ff:bd:46:8f:2b:d0:6f:15:ba:7f:29:c4:
d6:1b:2e:30:f8:94:53:69:1d:cd:07:33:e1:61:33:
42:bc:ce:d8:33:aa:a1:3b:d4:27:fe:43:b5:0a:ea:
cc:68:ca:44:a6:17:e2:fb:00:68:fc:ec:48:88:e3:
7b:33:e8:4e:a4:51:7e:98:34:78:a0:90:97:66:a1:
b8:18:5f:a1:5c:e9:6a:2f:03:79:75:cf:9d:2f:ba:
af:0e:dc:95:80:1d:91:56:aa:5f:66:4e:e5:f6:fa:
d8:e7:a6:e6:f8:ab:e7:7f:19:dd:d2:ac:5d:fa:70:
a6:e6:74:17:58:77:a0:ca:07:30:e8:ff:ae:5f:05:
3c:97:82:07:ff:c0:f6:ea:6b:c9:52:c6:ab:63:d2:
91:46:e1:f2:52:e2:4c:29:a9:d8:6d:cf:a3:ad:30:
3b:49:d5:4b:1e:09:e0:ae:a1:ed:15:a7:c1:04:ba:
30:68:45:58:a7:4b:97:84:3e:b1:95:2a:8e:f4:e6:
74:2d:f9:76:7f:3c:33:e1:4e:20:81:4b:41:1f:6f:
96:ac:05:2f:e0:31:34:b9:94:41:2a:3d:2c:18:80:
94:7d:ac:5e:c6:92:f9:6a:9b:bc:3d:ec:24:3b:1c:
24:fc:89:0a:7c:ba:74:28:07:e6:3d:47:8c:f0:33:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2F:16:6F:20:05:B3:6B:9E:33:F9:40:41:6C:6E:7E:DE:A5:1F:E1
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ab:4b:a0:fc:d0:06:b0:f4:65:b1:ba:9a:23:59:b0:61:60:
7b:de:db:68:60:97:a5:87:90:fd:50:55:8d:28:cf:b5:57:0e:
cf:04:35:65:dd:74:6b:b5:61:0b:7c:64:5f:ee:19:16:e8:b8:
00:53:a3:87:5d:26:8f:29:00:57:fa:77:6e:c9:79:ba:8c:c2:
d1:1f:1c:43:32:52:06:a7:f4:08:f1:48:a0:36:17:53:48:b4:
b4:9f:27:7a:f5:89:c9:f0:64:89:2e:02:d5:3d:02:eb:9a:2d:
a4:1e:50:70:01:ae:ed:19:18:9f:e8:72:6e:a6:df:86:0c:0e:
d9:a2:50:c1:32:50:df:9f:bc:3c:c7:7f:ca:01:d3:9e:5d:9d:
4e:72:8c:02:fc:9e:ca:41:7b:f7:8f:a1:7e:99:30:3b:49:56:
36:28:2b:f0:6a:b4:d7:86:04:47:5d:c3:f4:57:9c:4c:dd:cd:
cf:ee:b8:5e:9a:c6:9d:88:1a:3d:a4:bd:e8:86:14:a3:9a:40:
f6:b7:8b:d5:fa:5a:a5:28:a0:2f:e6:00:3e:ea:c4:bc:98:a2:
b5:58:31:4b:59:4c:30:7b:e4:77:4b:dd:44:b8:eb:e5:06:46:
a2:b2:88:71:f3:a2:db:67:cc:95:45:a2:ab:56:fe:7e:d0:25:
1b:1a:44:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:11 2026 by rpki-client