Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: NhdrfGMKp3KMf20ErNfm1O3W1q8oUQ/DLxlXdARuqcg=
Subject key identifier: 59:25:DC:19:28:07:A5:49:D9:30:A4:51:EA:27:56:21:A4:DD:22:24
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 019D3977D8C97169763C5D0A13BB37B3EC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 0903
Signing time: Sun 29 Mar 2026 12:00:48 +0000
Manifest this update: Sun 29 Mar 2026 12:00:48 +0000
Manifest next update: Mon 30 Mar 2026 12:00:48 +0000
Files and hashes: 1: KYwLTeDRPbWZ7QruokVrRABez8U.roa (hash: K9pjcDveVnPL9nHRQKLenhV/fjpAku11BgS2kkrYnJc=)
2: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: DVHmZoHhTgADaMXmpfCpRBhXSD/u6Idr3wV4JvwPhfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d8:c9:71:69:76:3c:5d:0a:13:bb:37:b3:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Mar 29 12:00:48 2026 GMT
Not After : Mar 30 12:00:48 2026 GMT
Subject: CN=5925dc192807a549d930a451ea275621a4dd2224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f5:b6:90:d5:c8:b1:2e:6c:7b:64:94:39:82:
c3:1a:8a:92:53:5f:b3:6c:82:9e:63:30:89:eb:ab:
85:6b:e1:e6:e4:f6:5e:f0:53:c8:88:30:b1:be:02:
81:f1:40:21:44:86:24:5b:ab:9c:5e:62:58:3e:f7:
d5:0c:d4:ba:8c:1d:04:5b:fc:bd:4a:b8:e1:a9:3d:
0c:37:1a:01:53:eb:7c:6a:e8:30:c8:a7:1d:7d:f4:
01:74:4d:c6:99:59:47:9f:1a:00:14:e1:93:3b:ae:
65:0e:e0:0d:ac:f7:1d:c7:46:a1:af:45:27:e4:eb:
74:61:34:34:7e:8f:49:f7:00:3a:af:73:59:81:cc:
10:a8:bd:d4:1d:d3:f4:ae:01:79:60:b9:d7:84:85:
38:a4:aa:10:33:2c:d5:f0:3b:1d:34:c2:83:dc:c8:
fe:51:b9:64:91:1f:de:e8:73:ae:79:a7:3b:52:f3:
49:32:4f:81:c5:22:01:54:a5:0a:b1:17:83:0f:86:
f5:9a:c6:2a:2e:94:11:78:cc:3b:97:3b:11:71:66:
51:28:e5:08:e5:63:58:d1:12:df:75:ef:97:b2:56:
e4:40:70:d1:9e:16:28:49:ac:23:56:25:06:f3:73:
13:d8:6f:d4:a5:90:02:01:3f:1d:e7:8a:6e:a6:8a:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:25:DC:19:28:07:A5:49:D9:30:A4:51:EA:27:56:21:A4:DD:22:24
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ae:e8:ac:29:55:1f:b1:8a:c6:f7:fa:8f:86:45:97:82:79:
82:43:ef:c3:43:62:ed:3d:fb:43:c8:32:ff:b3:f7:e5:4d:96:
b5:7d:e2:fd:c4:b7:4a:50:ce:70:ef:99:ed:2b:67:6a:31:8a:
b6:b4:69:aa:9d:b1:7e:dc:81:bd:96:73:4e:c6:ab:c1:9c:3d:
d7:c3:86:05:45:02:d1:03:63:9f:98:80:b8:c5:a7:bb:5b:13:
89:86:38:04:01:35:2d:86:53:a8:b2:95:85:5b:8d:8b:6a:24:
2d:a0:c2:2f:a8:11:9f:12:96:75:06:3b:3b:cb:38:3f:64:5c:
b4:2c:80:e4:21:b6:49:b7:cd:98:02:79:73:64:4e:58:4c:80:
ba:4b:0e:9c:01:45:fc:63:9d:ed:65:1d:2d:27:a5:96:26:01:
d9:a6:55:9a:b7:89:50:e3:31:fa:9e:4b:7e:49:f8:b3:34:47:
74:e8:cb:c2:98:fe:da:a1:69:d1:c5:b9:0d:1e:85:21:34:22:
eb:4e:bb:50:5b:40:d0:0b:14:42:88:b5:9f:e8:ac:00:69:a0:
40:b6:90:19:9d:1b:e0:9f:c6:96:ce:c4:91:cf:4b:ea:67:57:
33:85:0e:9a:53:e3:b2:1f:08:f4:d7:64:83:d7:be:b9:20:44:
7a:ca:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:03 2026 by rpki-client