Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: E/FYVDvv3mjizQX5/P2SoT1Z/aAwjQD1oxCnaXSjlpU=
Subject key identifier: 68:81:66:0F:3B:2C:33:51:BA:D9:D8:8E:D9:D1:82:87:8F:17:42:7A
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 019D3977B53E2AC0922BBD822C9E88C9574C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 0D7D
Signing time: Sun 29 Mar 2026 12:00:39 +0000
Manifest this update: Sun 29 Mar 2026 12:00:39 +0000
Manifest next update: Mon 30 Mar 2026 12:00:39 +0000
Files and hashes: 1: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: OC+wGKtR/ueepAyLnNT47JI0+/ehSqZa3dCri3YA3do=)
2: m2ZF-74RUnpYCSRQzi58JGlu94U.roa (hash: rCyhTyXzRp0exhx6DF5SAa1YSYaN0bDG8IRLr2ntpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b5:3e:2a:c0:92:2b:bd:82:2c:9e:88:c9:57:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Mar 29 12:00:39 2026 GMT
Not After : Mar 30 12:00:39 2026 GMT
Subject: CN=6881660f3b2c3351bad9d88ed9d182878f17427a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:02:fd:47:35:ca:7e:f5:eb:30:3b:07:06:
02:be:e6:c1:8f:d7:bf:4d:ce:c6:9b:19:2f:99:69:
2a:a3:9b:d7:94:a6:b8:46:f4:e6:4e:6b:d2:ae:15:
56:61:cc:1d:9f:2d:08:1b:6e:76:f0:5d:6e:45:f7:
c9:77:dc:aa:16:ee:57:b2:c2:92:2a:01:95:2c:b1:
f1:44:01:3c:9a:14:d1:a5:cc:82:6c:f5:df:01:ac:
5a:4e:d7:16:48:fd:76:51:8b:28:07:17:ce:d8:e1:
09:44:68:20:69:4e:6a:55:15:c9:8f:e3:07:e7:b2:
f4:2e:66:7a:91:e6:ad:40:c2:1d:59:f3:8a:61:0d:
7c:de:03:97:4f:cd:d4:4f:5d:97:c2:21:6e:e8:a1:
c8:89:06:32:43:f5:6d:6f:a4:3c:0f:83:d3:f2:a1:
6f:84:c3:eb:05:0f:39:1a:25:67:48:b9:83:30:10:
15:e7:99:06:6c:94:de:d8:f8:c3:da:76:21:15:f7:
bb:03:bc:75:cd:1a:d2:e6:fe:4b:70:76:9c:0b:28:
a4:84:55:7d:2e:cc:c4:f5:9e:1a:c2:9f:0d:f3:08:
f1:25:fe:dd:12:37:1a:24:3a:2d:bb:48:c9:50:1b:
6e:06:51:f3:9b:db:dc:8c:8a:8e:ee:6f:09:f5:0f:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:66:0F:3B:2C:33:51:BA:D9:D8:8E:D9:D1:82:87:8F:17:42:7A
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:00:46:71:35:dd:d7:df:27:71:96:93:5a:b3:88:fb:51:c7:
4d:8c:41:9e:24:8d:e8:ac:b2:54:45:f7:a3:ca:78:e2:5e:bd:
e9:7a:97:c9:94:47:45:37:08:6a:51:12:56:9d:42:64:8c:2d:
da:1d:09:5e:fa:8a:e1:7d:fd:d4:a6:31:8e:4e:63:87:10:c7:
22:c3:60:b3:dd:e7:e5:05:66:f2:f0:73:8e:df:a0:29:81:21:
a7:23:35:9b:b2:9f:37:a5:7c:fd:be:1d:3c:c9:ba:28:85:21:
23:8e:10:58:8e:e5:72:35:f4:93:60:2d:1e:52:69:2a:ac:4f:
49:55:3d:a0:06:35:e2:a7:ac:96:8c:bf:0b:63:b2:aa:5b:97:
49:44:a7:dc:09:56:78:13:99:a8:d5:ae:6f:c1:aa:9c:5b:d7:
7a:2e:6f:8f:8a:2c:73:cb:60:90:7e:39:a2:6a:78:04:d0:03:
f8:88:8a:b6:b5:c4:ac:c6:a6:dd:73:d9:a7:a6:1f:ff:46:5c:
0f:c4:76:f3:44:ed:a5:3e:5c:19:8a:ea:3e:61:9c:a3:f2:7e:
a1:07:81:60:7c:f3:6e:3c:62:85:5f:2b:f6:68:c6:35:62:15:
8b:2e:c2:99:be:a6:95:56:cd:d4:51:0f:b1:de:06:f4:57:7e:
12:0b:e7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:23 2026 by rpki-client