Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json)
Hash identifier: pnrCd5XnpmCkVy9uBoCQRoIEopUzTM4ZSEIHWDlLd/M=
Subject key identifier: B8:4E:23:8A:4A:E5:90:19:91:DA:A3:81:7D:6D:45:65:09:8F:9E:02
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial: 019D382E7865CF36D33309A3DBCD524876AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
Manifest number: 01CA
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: gBQWW9JEv81wc6bVliVvPY4we3iofR+PImHshfi2lPQ=)
2: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (hash: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:78:65:cf:36:d3:33:09:a3:db:cd:52:48:76:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=b84e238a4ae5901991daa3817d6d4565098f9e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:c8:32:9a:80:5b:d4:6a:15:2d:51:70:11:
aa:3f:49:e4:d2:4c:ee:5d:2d:48:c0:d4:d9:fa:10:
87:fe:17:52:fc:6d:fc:10:41:a8:77:5f:3c:e6:34:
a4:a0:09:cb:50:7f:82:b8:a7:c0:3c:95:3e:88:60:
58:84:36:97:7a:c3:ad:64:b2:99:0c:e9:4f:6f:60:
51:71:5b:5b:98:9c:b9:92:0d:af:8e:67:66:6e:42:
87:84:32:15:3a:b4:e2:31:05:85:ff:a5:73:66:37:
c4:2c:3c:8d:65:5b:a8:ac:56:e5:65:6d:90:1b:88:
da:3c:bb:27:01:95:0c:76:8a:30:2e:79:73:87:9b:
6d:4e:6d:a1:75:50:43:19:be:02:36:0a:29:cc:f0:
62:8d:6b:d2:2f:41:4a:a7:62:b4:6e:25:5f:dc:bc:
3a:5f:22:f2:09:82:bb:df:e5:bb:ad:75:3d:f1:e7:
a2:d4:fd:eb:0b:78:45:d0:03:12:b5:50:e7:59:f3:
02:4e:d1:90:e3:15:29:46:7f:9a:1c:78:2d:91:46:
12:81:60:1c:56:eb:84:f6:d3:aa:39:05:d8:79:db:
5f:28:fb:ad:b1:ed:8a:75:02:fa:58:1f:8e:53:4e:
c7:46:d9:e5:8e:48:98:da:b8:30:1c:58:2e:42:62:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:23:8A:4A:E5:90:19:91:DA:A3:81:7D:6D:45:65:09:8F:9E:02
X509v3 Authority Key Identifier:
keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:83:d7:b8:6e:58:74:2e:84:bc:ed:18:99:06:c1:ae:49:d2:
31:4a:df:3e:fe:0a:79:b4:1d:a0:0b:20:07:df:60:9b:c2:c5:
50:12:4c:48:54:8d:da:61:8c:6a:ce:10:96:02:32:17:fc:7b:
a2:45:a0:c4:03:05:86:64:b5:2d:59:11:b1:8d:57:bd:a1:77:
72:43:12:54:7a:73:89:db:e6:b4:ba:90:83:2c:eb:a7:00:a1:
d6:f7:71:85:de:a1:3a:fb:a3:00:a9:27:83:96:5b:6c:1f:91:
26:01:c3:e9:2d:0f:b0:10:65:90:3a:1d:cf:f4:92:5b:74:80:
51:ee:a7:ec:b3:88:10:4a:aa:e7:2f:b9:38:fd:80:a4:b4:94:
6b:15:3a:18:a0:97:2f:44:2d:5b:d6:78:8b:22:16:72:0c:90:
f6:6d:ef:52:70:2f:d5:58:39:58:cc:2f:0d:a3:ea:e0:f3:ff:
f1:74:ee:9a:68:d5:9a:e4:92:ec:10:c8:0a:3f:f3:cb:d8:63:
7f:51:10:4d:e9:57:0b:f2:d8:6f:cb:47:10:e8:2a:44:cd:34:
f4:43:5b:1b:86:92:2b:13:c0:f3:fb:e4:d1:ee:c9:dd:86:23:
dc:29:b2:19:b8:8d:d7:6f:5f:14:6b:67:2d:fd:8d:a5:57:40:
6e:49:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:27 2026 by rpki-client