Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier: hqnmpkn5RTtj4R8vkwe/C6lgEX2TgbOCnc10ntcKlsk=
Subject key identifier: 3E:03:69:5C:3C:E4:FF:1A:E8:91:78:63:2E:C5:A2:4B:87:50:7F:2E
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial: 019D37C0633B6156CAF5860B6CCC346629ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number: 157D
Signing time: Sun 29 Mar 2026 04:00:48 +0000
Manifest this update: Sun 29 Mar 2026 04:00:48 +0000
Manifest next update: Mon 30 Mar 2026 04:00:48 +0000
Files and hashes: 1: 3I73d1fm-asEDdpF_Iaed-Rn4iU.roa (hash: JVQe5Bz0aKgNMVzD3MTnR/M1jsbAbCwUE1ywEqxkXqI=)
2: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: kbhU/KzBogy5gQ6p43ZrH/0+7D1f6O5A4CbVfyfTm3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:63:3b:61:56:ca:f5:86:0b:6c:cc:34:66:29:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Validity
Not Before: Mar 29 04:00:48 2026 GMT
Not After : Mar 30 04:00:48 2026 GMT
Subject: CN=3e03695c3ce4ff1ae89178632ec5a24b87507f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c1:d4:8a:3a:54:3c:e4:d6:6c:59:eb:fe:54:
81:85:ac:63:c5:ec:31:f8:68:69:75:6a:4d:e4:7f:
12:cd:95:af:33:ef:cb:6e:c3:45:b4:77:43:03:ef:
63:56:29:46:7d:f6:09:7c:c6:87:02:78:bb:61:ab:
c7:3c:45:39:72:44:3b:60:4c:9b:09:5b:a5:e2:20:
87:3b:2e:f5:72:14:89:dc:70:e0:3d:76:2b:ea:84:
04:e8:1c:ee:8c:6b:d7:7a:24:51:ce:77:92:b1:9f:
1b:8d:c1:65:d1:68:d2:55:67:9c:77:a8:dc:a7:87:
66:3d:e3:a5:f9:4a:6e:c7:20:53:54:73:ff:2b:be:
6d:79:06:89:75:be:71:a8:a6:21:d0:a2:c6:52:eb:
40:30:ae:ba:57:30:54:41:fc:92:fe:65:b4:b2:8a:
1d:82:cd:57:4f:dc:ae:01:52:fa:3b:72:0e:7f:c9:
53:cc:5f:49:5b:dc:e9:b4:9d:cd:ce:3a:87:c9:f7:
15:fe:88:d0:40:d9:a7:4e:c4:11:75:58:91:4f:50:
ae:04:84:41:8f:00:d7:e0:aa:75:cc:82:05:56:c4:
15:ae:5c:cd:2d:ad:d9:4e:1d:6b:fd:1c:ef:e2:c0:
77:74:3e:b3:42:a2:98:b7:96:84:16:1c:cf:85:c3:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:03:69:5C:3C:E4:FF:1A:E8:91:78:63:2E:C5:A2:4B:87:50:7F:2E
X509v3 Authority Key Identifier:
keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:73:9e:8a:2b:7f:d4:d9:bc:e6:51:20:8a:d1:53:d2:46:e2:
45:65:a8:4e:6c:b2:78:3f:3c:62:22:1f:e7:51:c4:fc:a6:90:
f9:55:e6:d5:8e:f5:42:1b:df:28:83:7a:50:91:84:6e:17:5b:
5d:f4:08:1e:bb:56:59:6f:95:f3:cc:3a:de:8d:7b:d8:5e:ce:
9d:ab:89:28:f4:9c:c6:cc:3b:10:df:b5:f1:8b:93:91:4f:a2:
4c:86:df:ad:ef:20:85:61:21:1e:b4:d9:98:8c:7c:69:16:9c:
33:4c:5d:75:58:a6:f7:03:15:a5:d8:73:05:80:c3:b9:f6:d3:
d0:97:a0:28:a7:be:bb:26:b2:e2:45:b7:03:49:40:dc:88:e7:
97:b7:d1:bc:1b:27:4b:51:02:89:57:6d:ea:33:9f:1e:64:cf:
ae:01:f2:6f:0d:5f:e0:69:35:07:b9:d0:3f:a6:18:36:a9:47:
33:b3:b3:2b:bf:d0:18:35:43:58:d0:b3:91:32:d7:f9:91:f6:
71:e8:bb:d2:3d:15:04:8a:e7:3f:c7:53:76:4e:2d:8d:5c:a0:
77:52:e4:84:39:e7:17:97:46:a5:14:b7:95:9f:69:4b:2a:58:
84:e9:df:16:5c:0d:04:9f:ba:1d:b4:65:d7:65:90:29:ef:2d:
dd:d5:16:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:30 2026 by rpki-client