Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: j/OiE5I+nEcqq2dZ0n22RxJoY1a3L4pKkToi1Hg8a2c=
Subject key identifier: 65:FE:08:95:1D:AB:FA:45:EF:76:EE:C8:07:3D:B3:58:86:15:49:A9
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 019D389C20E1035B8369A3DB881AABD2722A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0F70
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: OUNNufnTAHLh/nwurJo6SrXTGf3nrNzcCZQ4UdqCQ2I=)
2: h5DIp02VidThuOHraMPFCodvygs.roa (hash: xwNLtlpo98S4VMl0NrrQV2mRppmcREH8EvSc90IeL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:20:e1:03:5b:83:69:a3:db:88:1a:ab:d2:72:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=65fe08951dabfa45ef76eec8073db358861549a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:6c:3e:c1:2a:a6:31:42:f4:37:61:05:c9:
7e:58:63:d8:3c:26:1c:fc:19:74:4e:01:6b:ae:cf:
5c:dd:76:c7:49:28:f0:4b:c3:55:d1:96:aa:41:78:
8c:1c:ec:39:f2:ed:46:ca:2e:3d:d5:70:36:80:91:
90:57:28:06:f8:2a:1b:50:75:72:fe:49:7c:35:de:
7b:d6:e8:b1:47:94:05:55:4d:32:c3:21:84:cc:96:
49:13:17:d3:bf:bb:17:e8:84:4c:3b:82:4f:02:46:
54:4c:e9:bc:d0:23:da:72:cb:d2:3a:28:7c:92:8b:
39:9a:01:d9:5a:03:c0:69:91:06:a4:28:b5:f5:50:
58:9e:fb:02:9d:14:e7:84:2d:25:28:a8:db:f2:34:
29:ca:64:a1:a7:fa:f9:d5:0c:60:1f:3d:44:7c:9b:
04:9f:16:ae:8a:ba:91:c1:7a:93:9a:48:6c:f8:05:
b5:29:3e:bd:43:7b:72:6d:4e:76:35:a9:46:7c:de:
a7:d7:56:b6:eb:49:c3:4c:29:6e:9e:08:33:c9:c0:
36:42:e1:c0:03:ea:c6:ae:ee:00:5e:ac:35:45:1f:
13:ba:e4:dc:17:36:b0:5b:b6:c3:97:a5:63:30:09:
60:bd:54:f8:23:98:3a:4e:6e:e0:34:7f:53:1f:b9:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FE:08:95:1D:AB:FA:45:EF:76:EE:C8:07:3D:B3:58:86:15:49:A9
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4d:17:ea:12:c4:54:5b:00:cd:52:c5:16:15:86:fe:63:92:
2b:a1:1f:8c:a8:cd:e7:82:8e:cd:91:f5:0f:3e:1e:4d:04:59:
d7:74:ff:0a:16:51:ef:89:fd:87:23:d3:ef:74:80:54:c4:22:
12:b6:b7:8a:86:3d:36:79:f7:50:23:e9:3d:43:04:b1:53:5f:
9c:28:8e:e4:a1:19:26:ef:4a:bf:2c:75:b7:e5:9b:70:9d:e1:
a7:9f:a5:45:57:9a:b9:89:1d:77:13:ca:0f:c0:94:c2:9a:c3:
e5:d1:a1:d5:e8:77:52:c9:15:a4:78:c3:3c:cd:8b:db:a0:60:
9a:ac:09:13:53:ad:b4:b2:6d:96:ee:85:28:3b:43:67:25:82:
4e:27:24:ac:4e:31:7f:12:39:87:62:d2:97:ec:95:6e:af:47:
52:c3:5f:57:00:ed:02:04:18:a6:71:c8:95:d9:5f:96:95:8f:
36:6b:2b:34:63:b2:4a:a7:f9:5a:84:f5:c4:35:68:9f:a8:7b:
0a:24:1a:e8:a2:24:df:49:1c:b0:19:b9:94:22:59:61:ba:a4:
cb:a0:7d:59:3b:6f:7f:f0:e5:a8:1c:b3:d2:21:be:3a:b9:e4:
f2:7c:77:21:08:5f:14:97:a3:2d:d5:cf:4e:ef:b4:08:03:9a:
f4:41:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:37 2026 by rpki-client