Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier: LAaVvOIQ597IUBB1R68StqivmqGewQQK82IRHvWk7Ms=
Subject key identifier: 6C:0E:00:89:19:8C:26:E1:14:97:D8:A7:39:EF:65:07:4B:B0:9A:01
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial: 019D394138765F15EE421D62D42A659AD28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:08 +0000
Manifest this update: Sun 29 Mar 2026 11:01:08 +0000
Manifest next update: Mon 30 Mar 2026 11:01:08 +0000
Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: KdbBNKoAmgG+L2DtyQNfQculEhTA7ZKxQ7nze0pYZyM=)
2: mqnfQZBp8h7WvOAdc-8gqdHYqtw.roa (hash: ewJdIlVBdFix7giIGBtZRJXpQjmTUTAe4SWLnLx8JZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:38:76:5f:15:ee:42:1d:62:d4:2a:65:9a:d2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Validity
Not Before: Mar 29 11:01:08 2026 GMT
Not After : Mar 30 11:01:08 2026 GMT
Subject: CN=6c0e0089198c26e11497d8a739ef65074bb09a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:b9:8b:38:6d:3e:c6:0b:2e:17:e1:8a:53:
d1:19:f0:14:af:4d:23:0e:65:ad:48:03:53:82:81:
f6:65:98:85:1f:23:1a:51:bd:14:f2:11:47:56:d6:
c8:45:45:37:f8:f6:74:c1:9e:dd:24:55:27:20:77:
05:6c:78:5b:84:e4:5f:85:72:ff:ad:90:65:95:a9:
94:8d:35:37:e9:8b:fe:5c:0f:ed:4d:55:28:e5:7f:
92:dc:90:e6:a0:27:36:26:63:de:21:52:4e:2a:04:
e2:cc:a1:c6:5d:b1:d5:02:ac:ea:18:89:82:c8:32:
2c:cb:81:3f:e9:a5:a8:ff:ea:1c:e5:93:02:ae:9d:
a7:f2:d3:b5:40:c4:62:41:7f:4a:82:4b:4e:4c:3d:
43:aa:fb:d7:b2:d2:dc:6f:db:2c:60:c5:90:61:67:
da:5c:c6:c3:1d:62:f2:d9:d1:c3:e8:02:b8:7e:57:
8b:17:6f:7b:3b:c9:12:23:f9:e7:da:b4:70:da:bf:
e3:66:ec:b3:c9:83:e2:b7:bd:72:f8:73:02:fa:fe:
57:96:b6:06:1c:1c:b0:29:ca:f7:20:0b:07:51:3e:
5b:36:05:0f:43:6c:4a:80:0a:54:98:08:82:8d:83:
35:32:a3:a4:c8:dc:0e:96:14:70:79:ac:22:b8:73:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0E:00:89:19:8C:26:E1:14:97:D8:A7:39:EF:65:07:4B:B0:9A:01
X509v3 Authority Key Identifier:
keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ae:51:81:ba:73:53:fe:6a:42:26:c7:e2:f9:5d:de:f5:84:
4d:62:f6:f3:07:76:33:74:7f:7b:a1:0b:f2:fe:f7:f8:46:66:
47:f1:51:ca:d4:b8:68:de:34:42:fe:5f:71:97:48:95:90:60:
ae:27:06:06:8b:60:02:b3:fe:5f:85:ce:69:ca:1a:08:19:3e:
c3:14:66:ef:f1:6d:60:b2:b4:8f:53:be:a0:1b:e7:ee:46:71:
94:fd:00:6d:fd:42:72:0d:fb:26:94:1c:fb:83:a0:6b:5a:a5:
59:76:a5:6c:56:06:e7:35:95:d5:4e:23:61:95:5d:47:8c:6d:
e7:bd:68:d4:d4:f9:e2:85:51:99:b0:bb:8b:8f:31:7a:b7:13:
28:f2:79:35:85:39:0d:ec:2e:97:6b:b1:35:0d:40:e5:30:ef:
2e:7d:01:7f:2f:d4:a8:ba:84:a2:09:09:24:d2:8e:63:64:e2:
9c:fd:6c:7f:9c:34:4a:32:d0:89:35:79:c2:d2:ec:0c:0e:5d:
a3:d5:0a:23:db:8d:14:53:d0:5d:71:e7:d3:67:2e:e1:b0:9d:
35:4d:45:ea:2d:f8:a3:43:38:9c:a1:60:fb:f7:02:14:21:42:
6c:43:aa:be:94:77:09:3f:20:db:ac:45:53:c4:e4:3f:6c:cb:
ea:af:15:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:03 2026 by rpki-client