Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: yUDkOvcDrbl+Sj/+2Hda0JCCkbG4Dy0JAeUVH3eAI0M=
Subject key identifier: 70:20:3B:16:BC:64:C4:99:4D:43:F8:CE:79:E0:85:B1:DC:BC:D5:E0
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 019D38D30E45F9B2CC56B8CF627A4BEDAD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 0807
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: CN6xeTwc8g/q7weHvi1c/G1zIVikH5MsU6zHWIMJZzE=)
2: tKfj59q_uSVeOVXFF8rwGwcX1DE.roa (hash: M8dRarfAWOblSl0tPp78zm1/aNBzJLXYpivkbEtUqgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0e:45:f9:b2:cc:56:b8:cf:62:7a:4b:ed:ad:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=70203b16bc64c4994d43f8ce79e085b1dcbcd5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:d5:79:2c:2a:3e:0a:8c:2a:27:d3:de:e8:
e2:a7:8a:aa:a3:be:e0:6e:5b:84:65:c7:32:c0:60:
85:8c:b0:99:cf:f8:d2:01:cd:2f:3e:fc:88:3a:0b:
26:53:c3:aa:30:21:0d:c5:96:4f:05:62:f9:2b:dd:
48:30:b7:d6:67:8c:4f:84:dc:24:a3:b5:94:b2:ef:
e0:24:6a:1f:15:1f:e5:32:69:29:16:1c:43:33:f5:
f4:83:43:83:92:34:b1:42:1c:76:ef:38:10:15:85:
0a:bc:94:52:92:a5:1a:e6:e0:be:60:e6:d2:49:2a:
07:36:b7:00:39:f8:e6:cb:c7:c4:69:41:f3:57:7c:
9c:9b:5d:e1:e5:7d:5c:f4:05:07:1e:18:81:be:16:
ea:d7:5c:96:58:32:3b:0b:b4:73:26:a8:16:f8:28:
32:b7:5a:48:73:08:46:38:df:e6:a3:be:97:b0:22:
a4:77:69:65:95:af:94:92:86:4b:66:bf:55:d6:74:
a6:96:41:b0:81:56:52:8a:76:a6:1d:a9:b3:54:9b:
13:65:99:51:e2:5a:90:50:c2:e6:33:9b:61:fa:5a:
59:b4:14:ff:93:11:a6:8d:20:03:f9:e7:79:5f:e4:
df:55:ae:2e:e0:90:81:1b:0f:1c:7d:1a:06:9f:7d:
fc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:20:3B:16:BC:64:C4:99:4D:43:F8:CE:79:E0:85:B1:DC:BC:D5:E0
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:01:26:a4:61:80:61:77:4b:b6:0b:47:c6:2c:91:4a:41:fb:
d8:c8:a9:8d:2a:20:e8:76:99:a3:74:06:24:52:2f:23:d3:ba:
c4:61:d8:95:68:4f:1b:ae:03:0c:c1:11:96:0d:67:8d:69:70:
d3:ad:3a:32:0d:21:6c:48:6b:03:01:92:72:ff:9d:b5:2b:e5:
1e:ab:13:27:3b:9e:5f:f9:e6:f2:0e:45:91:1b:fd:06:df:2e:
0d:e9:fc:12:30:21:e7:f0:ec:5e:7e:8d:05:c6:eb:32:ed:c3:
08:6f:9f:8d:3f:98:6e:2d:9f:3c:3d:29:29:ef:97:4a:cc:1e:
71:85:19:5c:cf:a4:7b:87:89:16:ed:5a:13:24:d0:44:67:50:
82:3a:ac:41:e4:c2:e1:d9:fc:2f:a1:ec:db:7d:ec:ed:81:cb:
f9:57:8e:2a:dd:c6:57:80:39:7d:4c:fb:59:77:a6:17:ff:c7:
1e:31:44:9e:47:f6:d4:5c:4a:a5:5c:96:72:34:aa:02:ac:ad:
81:bb:b7:3d:38:d5:14:7f:20:35:c3:c9:b9:28:42:f3:bc:10:
10:38:c8:de:45:cd:4d:85:02:92:65:24:7f:a6:43:d3:89:a8:
68:16:d1:ff:a0:b1:f1:25:85:d0:dc:8e:f5:37:70:81:d2:90:
4d:4f:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:28 2026 by rpki-client