Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
File: 9hUWPY_cRSP7uCJN89wgese94ck.mft (raw, json)
Hash identifier: znGlfj8OuA8ufyw6nPMfFFhgL6S5KV3oVsTPS2H0iSE=
Subject key identifier: EC:D3:E4:9F:27:6D:54:64:F3:E8:55:B7:F5:19:63:10:20:BB:0B:01
Authority key identifier: F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
Certificate issuer: /CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Certificate serial: 019D37F6FF188AD177F6560265406D7D6B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
Manifest number: 01A3
Signing time: Sun 29 Mar 2026 05:00:27 +0000
Manifest this update: Sun 29 Mar 2026 05:00:27 +0000
Manifest next update: Mon 30 Mar 2026 05:00:27 +0000
Files and hashes: 1: 9hUWPY_cRSP7uCJN89wgese94ck.crl (hash: urMqPyENyRh+4GaTkCx3JvDqLOxgeAmsDn6E1BzbgM8=)
2: ZW4Y1TGuNOmvztoKC-GttBiocmk.roa (hash: Pc22uXR6lgCrGRVc00EDjUUEOpeb78zqYMkdzAmaFbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ff:18:8a:d1:77:f6:56:02:65:40:6d:7d:6b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Validity
Not Before: Mar 29 05:00:27 2026 GMT
Not After : Mar 30 05:00:27 2026 GMT
Subject: CN=ecd3e49f276d5464f3e855b7f519631020bb0b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:cb:f6:2a:78:08:8c:2b:a4:9f:52:dc:3f:
8a:08:9d:0a:94:0d:40:de:48:4e:cf:dc:4a:ad:22:
e1:9c:11:a2:38:ae:7d:55:2e:e1:f0:f2:8a:53:a8:
05:a2:8a:25:d4:e6:2e:8b:14:f4:35:27:0c:04:9f:
de:d6:c8:00:29:94:3f:a0:3c:f3:3a:93:44:0c:28:
52:65:ca:ad:4d:42:81:91:6f:d1:f5:50:31:a7:61:
27:7d:ea:a4:5f:f7:a5:46:92:d1:46:ae:0d:b7:c7:
ab:b9:ea:0c:36:08:a2:f9:cd:70:9c:ff:ac:7f:11:
6e:2a:17:e3:d7:76:3a:77:b1:58:10:30:27:88:5c:
81:90:e3:23:a6:ea:ed:ab:dd:ef:ed:1e:c3:68:93:
d4:2b:c5:3e:77:30:65:ac:93:20:15:78:99:da:de:
b9:10:26:7e:93:6a:f2:12:26:22:b1:72:e3:aa:ca:
00:e6:ae:ff:e1:58:3d:fd:31:1f:88:d0:50:25:f1:
70:34:c6:61:9b:fd:90:72:97:0a:74:d1:9f:b3:ab:
33:9b:f0:9a:15:44:73:b4:27:3b:60:6f:72:97:0c:
8f:a7:ae:b6:3c:d1:b7:d6:90:1a:be:c6:13:cc:c7:
ae:aa:bd:4a:6e:8f:2e:18:4c:56:f4:53:35:5c:f7:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D3:E4:9F:27:6D:54:64:F3:E8:55:B7:F5:19:63:10:20:BB:0B:01
X509v3 Authority Key Identifier:
keyid:F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:09:d9:e0:af:a8:eb:be:99:de:84:07:78:26:49:2e:5c:f5:
84:aa:96:79:40:37:42:47:4a:00:c3:b8:02:b3:90:18:51:fd:
0a:71:b9:03:b1:fe:6b:4b:58:8b:65:94:0d:b1:23:7a:85:40:
33:bc:f0:f0:55:59:ab:1e:c1:89:c9:0d:65:dd:18:1e:18:75:
1a:88:52:1e:e6:fc:ab:4f:4f:58:48:f2:55:2e:bd:fd:73:b0:
cc:ef:40:7d:55:8d:23:57:ed:e8:84:9d:39:09:e4:bb:f1:1d:
9e:45:13:2d:04:0a:7c:14:33:8a:b6:2d:7c:d9:e6:ac:a0:52:
7d:22:9b:13:2a:60:46:ef:7f:15:73:27:c3:7a:c4:a1:97:83:
79:29:21:44:bd:31:5d:41:8b:38:2b:61:03:00:bd:5e:c6:f1:
d1:76:1b:51:0d:c9:a9:9a:7d:78:e6:ce:de:d5:34:5c:f4:8b:
0f:9e:34:6d:be:17:91:10:79:1f:29:65:fd:db:9e:bc:0e:44:
c7:54:4e:72:93:d6:7d:48:71:ca:37:39:d3:00:58:b7:4d:1c:
3f:ee:fc:c2:71:b7:bc:10:38:b4:33:b2:65:b2:68:4a:63:83:
62:7a:ae:77:03:24:68:a4:1b:84:44:c8:59:62:7f:87:cc:57:
91:9c:fc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:23 2026 by rpki-client