Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
File: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json)
Hash identifier: mS1T7OXjM/azgBQV303DEnfQgkW9iFSEBjmdb9fb5vI=
Subject key identifier: CA:09:83:73:D9:A5:23:69:0C:00:D7:9D:CC:6C:40:43:2E:33:0A:84
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial: 019D39AED6A737004C8267196A0429BEAB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
Manifest number: 189C
Signing time: Sun 29 Mar 2026 13:00:52 +0000
Manifest this update: Sun 29 Mar 2026 13:00:52 +0000
Manifest next update: Mon 30 Mar 2026 13:00:52 +0000
Files and hashes: 1: 3hmmFfAkaIr3Xc9gq50WV7B77zQ.roa (hash: TgVTzYdGFCqlHMqgg6AtuqEuLwbjRjyy8jaNrkkXEao=)
2: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: Hy491ASNyb09WpJVLgztolXRclBiqG4B5pshGVYHuYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d6:a7:37:00:4c:82:67:19:6a:04:29:be:ab:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Validity
Not Before: Mar 29 13:00:52 2026 GMT
Not After : Mar 30 13:00:52 2026 GMT
Subject: CN=ca098373d9a523690c00d79dcc6c40432e330a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:85:71:7f:15:4e:b9:22:e9:61:42:c3:85:0e:
fe:f4:9d:37:ee:a1:af:71:1c:c6:ec:a2:ae:93:c8:
0c:b0:31:65:2d:7b:89:fd:af:31:ea:64:7b:0c:70:
bc:94:4b:c2:f8:36:83:86:96:ed:8a:6a:ce:af:e1:
95:69:da:87:5c:57:f2:dc:3a:97:f1:c7:be:0e:1b:
88:4b:16:1a:ad:15:81:7f:8c:56:3e:85:59:87:51:
7a:60:21:da:6e:a9:c9:3f:e9:a9:c7:80:82:82:b8:
68:73:f3:97:d8:6d:dd:f3:8b:cc:01:5e:53:b0:45:
b8:8b:cb:4e:01:f1:e2:db:f5:0f:d5:67:d3:b4:d5:
6b:74:fc:f4:45:a7:01:15:75:2b:dd:31:f4:10:7a:
14:14:b8:b9:33:76:e5:a9:46:de:6c:db:8f:d4:0f:
e4:04:1f:51:4f:c6:f2:a6:ed:75:89:2e:17:d5:6b:
38:0c:8f:b0:2e:99:33:fa:0c:bc:14:2c:51:b8:19:
83:a6:3d:e4:19:5f:47:a0:0f:f2:c4:1a:39:09:1c:
55:36:f9:24:61:02:24:97:a9:93:1d:fb:38:be:dc:
f1:24:7c:cb:c9:60:52:22:dd:ec:02:60:fb:5b:d8:
4c:83:84:ad:12:1c:3f:17:1f:7b:49:51:77:15:3e:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:09:83:73:D9:A5:23:69:0C:00:D7:9D:CC:6C:40:43:2E:33:0A:84
X509v3 Authority Key Identifier:
keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:51:07:6f:62:02:95:a3:df:fa:d1:e1:00:35:13:5e:03:e3:
24:4b:16:3e:7f:01:0f:1c:1d:f0:7b:43:0e:3b:13:f1:78:fb:
c8:0c:92:31:0e:ac:a7:9e:e8:a8:93:33:4f:d2:45:b0:e9:c7:
b3:c9:51:70:d8:1e:45:f9:a5:39:31:6a:d1:cf:ca:8a:be:d0:
11:af:f8:01:fc:f2:57:4a:9b:30:3f:fa:36:4a:ce:93:94:64:
f6:2c:c2:8a:f1:b9:40:1e:86:c1:5a:3b:f2:b4:13:1c:00:d4:
c4:28:8c:25:cd:6f:47:f8:ee:ad:00:1b:43:a8:2e:07:49:be:
2d:b9:cb:b2:8d:e0:72:3c:70:2e:dd:ac:6b:5a:ce:f5:e8:af:
12:10:98:47:99:fe:45:05:71:a3:03:ba:76:85:45:82:3a:d5:
77:8c:0e:1a:55:75:d6:6c:00:2e:e2:da:47:0f:26:8e:ed:0b:
1b:63:50:57:1d:e6:fa:b2:a4:18:22:c3:b6:a5:69:47:ed:f8:
6d:3b:b4:e1:5a:8a:41:ab:79:7b:23:bb:31:ab:52:37:07:9e:
b9:f5:78:d3:4d:39:59:10:d7:6e:ed:ae:c8:c2:58:cb:47:34:
23:60:bf:50:6d:01:bb:5c:0a:7e:a1:58:61:69:76:ac:f0:54:
4b:0e:65:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:52 2026 by rpki-client