Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: fatHm7alhVgma4b80Juinrxgarpg2PhCYWmAgrfraRA=
Subject key identifier: 22:89:46:72:44:45:B5:C5:58:6A:A3:61:5A:C4:06:E1:92:9D:D3:FB
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 019D37F795E670FDD92D086BFE2CD49E906A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 06E8
Signing time: Sun 29 Mar 2026 05:01:05 +0000
Manifest this update: Sun 29 Mar 2026 05:01:05 +0000
Manifest next update: Mon 30 Mar 2026 05:01:05 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: 6GUeDEwlTr4cN+1hizR4Wec2VFdsFDrv6kkS/Dwm/lE=)
2: RnVTKZtoHdvPsfS8AH4yl7Tn4u8.roa (hash: Pgpu3NuPaXsm7XOY/YOTMwi4KbLTR5P/cSiW4/B73kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:95:e6:70:fd:d9:2d:08:6b:fe:2c:d4:9e:90:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Mar 29 05:01:05 2026 GMT
Not After : Mar 30 05:01:05 2026 GMT
Subject: CN=228946724445b5c5586aa3615ac406e1929dd3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:30:aa:31:53:57:d7:d8:f3:b0:33:ee:07:
48:56:31:bd:53:db:d4:06:3f:12:dc:8b:e6:0a:b6:
a6:bd:eb:7f:9c:c2:e8:fb:17:95:74:3e:53:29:44:
67:f6:36:e6:e3:d8:65:54:b3:17:d8:b0:28:a1:9a:
27:f4:c9:3a:79:2f:41:63:34:d1:3e:cf:b8:7e:bb:
06:e0:2d:5f:7d:4e:24:0a:51:5a:6f:72:28:19:15:
23:00:58:ab:11:40:b8:1f:6c:f0:f1:f9:5d:ad:d4:
b5:91:75:9e:05:b4:17:92:dd:51:bb:6b:26:86:5f:
8e:2b:a0:47:cb:2f:50:00:25:d8:97:b4:1e:c8:44:
1a:22:93:ab:d5:90:64:d1:d8:23:7e:2c:54:f5:8d:
78:5c:00:1d:b7:c3:25:04:bf:bc:c0:21:3d:76:6e:
25:7b:4e:9b:99:a0:b6:01:30:53:18:d0:34:89:5f:
f9:c5:75:18:fa:c7:0d:a5:77:6a:a3:bb:01:b8:50:
ed:29:50:5d:8b:ad:e9:ea:6b:6d:af:03:3a:62:2a:
82:71:7b:a0:03:55:60:3a:8b:25:44:1d:cb:ac:4d:
16:87:7e:b4:ea:d8:68:5f:ab:7f:45:d4:1f:d7:63:
af:4a:46:e0:9f:78:e8:e9:0b:8c:a9:90:71:5c:d6:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:89:46:72:44:45:B5:C5:58:6A:A3:61:5A:C4:06:E1:92:9D:D3:FB
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bc:2b:5b:2d:6e:ca:86:cd:81:d9:c6:ec:6a:8f:83:fe:e3:
fc:e6:7d:a2:cd:3b:5e:35:22:c2:a3:d1:3f:71:41:09:7d:7e:
59:02:62:15:6c:96:c0:de:49:70:8a:f9:4a:95:60:a0:ba:bd:
db:4a:63:9c:cf:2e:86:23:86:9e:47:b0:43:b3:a0:82:6a:63:
5a:8e:9c:7a:8a:62:66:b6:65:d5:4f:6c:b5:23:15:3d:a1:5f:
fb:e3:f1:42:02:5e:22:36:78:bc:22:ca:3b:a3:86:f2:56:2d:
21:c5:52:b9:b1:81:d8:62:0c:2b:f4:35:2b:3e:d9:56:85:a4:
81:9c:65:d5:d4:7a:ca:32:a8:c5:f5:1f:55:82:56:82:ff:54:
ce:5a:84:89:6c:9a:6a:48:63:37:80:6a:24:b2:24:0d:67:49:
b8:ac:67:be:aa:3c:3a:8e:5e:a1:b7:02:55:3f:32:54:4e:cb:
c6:73:de:9f:0c:58:b1:c5:a7:37:7e:8e:49:be:2c:92:4f:fb:
c0:0b:7c:c8:51:33:64:a8:fb:7a:a5:29:b5:f6:ae:5a:c2:2e:
a8:4a:76:2e:4a:d6:63:70:1b:00:ea:d6:2d:03:d8:46:c0:6f:
39:cf:72:0a:f6:0f:56:46:ff:4b:d6:6e:e8:69:0e:fc:c4:75:
72:60:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:44 2026 by rpki-client