Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
File: 9RDHudzJJZg-WbWGzVmrVUviWYI.mft (raw, json)
Hash identifier: Xxc2zstkysXs5dxI9KdKypBGvkKxhlPB9rCSHqx7rg0=
Subject key identifier: 56:23:D0:A0:2C:55:43:41:E0:6D:A1:DB:2B:1F:55:5F:33:05:B3:A0
Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
Certificate issuer: /CN=f510c7b9dcc925983e59b586cd59ab554be25982
Certificate serial: 019D0C685E378FE169B634AAE77241368B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
Manifest number: 0111
Signing time: Fri 20 Mar 2026 18:00:59 +0000
Manifest this update: Fri 20 Mar 2026 18:00:59 +0000
Manifest next update: Sat 21 Mar 2026 18:00:59 +0000
Files and hashes: 1: 9RDHudzJJZg-WbWGzVmrVUviWYI.crl (hash: xaqGVKbIsob83iUQ0M7+S19GdZu2YiFBxkzjCD3m33k=)
2: wTA4ZoIz75kHn1WMirNEgMY65FE.roa (hash: ashXJm/A/tacrnrBady83etVIast6DpVJH2Dt/iNOM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:68:5e:37:8f:e1:69:b6:34:aa:e7:72:41:36:8b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982
Validity
Not Before: Mar 20 18:00:59 2026 GMT
Not After : Mar 21 18:00:59 2026 GMT
Subject: CN=5623d0a02c554341e06da1db2b1f555f3305b3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:aa:4e:83:76:84:04:fe:6c:38:6c:09:22:
b2:7b:cf:e4:4c:97:d6:64:26:5f:31:72:a0:40:20:
b5:01:02:ba:06:95:96:0f:6a:47:15:d0:94:a7:22:
16:30:d4:59:6c:59:8d:2e:8f:e8:08:ff:0c:38:09:
76:c4:0d:10:f6:12:dd:7e:50:ba:a9:c0:6e:48:82:
61:6f:59:fc:da:6e:77:81:3e:78:28:8f:89:51:59:
7e:e4:6b:a6:87:e7:41:5a:6f:95:0d:a7:f9:19:d7:
40:11:10:bb:6d:a3:31:46:27:33:a9:53:19:75:ac:
38:2b:f0:d1:c0:da:f0:fa:da:14:5e:fb:ff:8f:ff:
68:34:17:c7:09:8e:a4:75:d4:97:e9:2a:bd:9c:ae:
61:be:b5:fc:e6:3d:52:9a:dd:7f:8e:d2:34:bc:b3:
c9:c6:b8:02:a8:aa:0d:cf:bd:66:f2:e2:a0:4b:a8:
f4:4f:82:f5:5b:a1:57:dd:12:2b:7e:4b:d9:ef:6c:
7e:66:82:ee:43:78:61:b0:bc:90:b1:fb:2c:ae:f3:
12:d5:7a:3e:fb:0e:f6:b3:41:1e:bb:0c:5b:ec:25:
e3:d1:f1:c5:94:c9:d2:fe:a0:2d:5c:f5:6e:14:db:
f9:57:fb:bb:57:b1:81:22:94:bd:30:00:d4:63:95:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:23:D0:A0:2C:55:43:41:E0:6D:A1:DB:2B:1F:55:5F:33:05:B3:A0
X509v3 Authority Key Identifier:
keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8f:81:02:39:3b:c4:b4:7b:21:dd:92:d4:b5:58:48:c4:43:
68:8e:ea:ca:48:08:53:5f:eb:21:24:7a:15:4e:5c:ab:37:ee:
e0:f9:bc:1a:96:ee:a7:27:f4:53:24:91:86:a9:63:74:40:95:
7d:b3:1f:e2:93:a4:56:08:99:16:38:c2:a3:f6:4e:d2:09:01:
7c:2a:cf:d4:8e:c9:f3:c7:ac:95:4d:1c:20:92:c8:d0:9b:83:
8d:2e:37:59:6b:77:f0:a7:f4:d8:9a:98:83:0e:a6:2d:ce:be:
3e:3d:b6:98:05:64:e3:7c:8b:c9:44:9b:b2:82:38:bb:be:2a:
e6:bb:e4:1a:d8:35:ff:eb:08:c7:8b:5e:36:ed:77:78:e1:66:
10:48:b2:ee:4e:0a:97:68:62:c3:1d:7b:e9:0f:b7:b4:50:96:
35:1b:97:54:d5:91:26:c1:1f:a9:f9:c2:60:65:ce:28:ad:a7:
08:8a:15:2e:65:a5:2b:2e:fc:2a:e1:f6:cd:64:24:14:19:29:
2d:85:a0:de:52:3f:e1:61:c2:dd:65:5b:4b:3d:8c:1e:12:90:
a1:0e:1e:25:f0:ab:ce:95:c0:83:ff:ec:b2:b6:18:ce:09:cf:
ec:8c:a1:18:cd:81:2a:87:9c:b7:95:95:6e:e6:3c:64:ee:d3:
c0:d0:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 02:46:24 2026 by rpki-client