Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: 7Eman2QGL8oUPUDhCznIPN3bF9xm0zr2L4RXowepcik=
Subject key identifier: 1C:18:20:E7:B2:43:36:10:4E:AC:3D:C0:FD:BC:43:31:29:15:4E:68
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 019D38D3E2C03A0B57258A3315C59DB69B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0F9D
Signing time: Sun 29 Mar 2026 09:01:43 +0000
Manifest this update: Sun 29 Mar 2026 09:01:43 +0000
Manifest next update: Mon 30 Mar 2026 09:01:43 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: 7yf+WixVfCZNZJKx4XKpFBGO3GrgO0+sUcDKCDMtV3E=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:e2:c0:3a:0b:57:25:8a:33:15:c5:9d:b6:9b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Mar 29 09:01:43 2026 GMT
Not After : Mar 30 09:01:43 2026 GMT
Subject: CN=1c1820e7b24336104eac3dc0fdbc433129154e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:ce:3e:68:08:3e:38:41:16:1e:cd:a1:54:
c9:8c:f7:71:e5:7e:95:51:1c:e7:ef:10:a2:9d:3c:
09:52:ff:0a:2e:dc:a6:07:c4:78:38:2d:45:40:6c:
98:17:85:30:af:4d:07:d7:48:25:b9:10:3f:07:73:
39:15:a0:4f:c7:6f:0c:c3:66:e8:6c:cd:b7:48:35:
58:a4:d8:bd:ff:66:ec:58:d7:ab:27:ca:b8:e9:87:
d0:ec:18:74:a5:06:d0:7e:cc:2a:f7:93:c0:ec:f8:
fe:d3:c8:73:80:90:8b:c7:62:58:30:cc:d6:87:04:
d2:9c:a9:ca:16:ed:dd:be:db:d5:8c:d8:67:5a:66:
37:de:fe:fd:55:07:e5:57:99:ce:49:51:64:d4:a8:
ee:e4:22:24:45:cb:d0:ac:a2:91:1e:51:8c:2b:11:
17:7b:cc:ab:7f:92:a5:b7:9d:1e:f7:9d:31:40:71:
ce:d1:5b:e5:32:70:0e:82:78:fa:e2:18:cb:c8:24:
ad:e9:6e:4f:33:ea:2e:5f:e2:52:37:45:03:06:ab:
8a:3e:2b:d7:a4:7f:fc:a7:ff:0b:e4:d4:f2:da:c1:
6d:48:3f:6c:32:57:2b:60:7d:05:b5:f9:11:f4:c2:
b7:a6:1f:28:41:0d:36:72:b8:51:3c:ec:4f:36:54:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:18:20:E7:B2:43:36:10:4E:AC:3D:C0:FD:BC:43:31:29:15:4E:68
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4e:1e:11:46:93:70:da:5e:57:87:38:9f:12:f9:85:7a:25:
0e:93:77:06:3a:95:09:a8:c7:ea:ad:8d:be:0c:3e:0a:6e:2e:
8f:eb:45:c9:d6:fe:3b:58:7d:cb:90:a0:16:e3:1d:ca:67:3d:
5a:56:98:8e:13:3b:60:97:83:dc:ef:c2:0c:6f:80:0f:62:12:
ba:58:8a:e6:79:f1:38:18:4a:9f:f8:5a:1b:03:b6:b0:44:77:
7c:c2:65:ee:df:6a:d0:b0:10:1f:5e:d1:e6:77:19:7e:08:a3:
3f:c2:a8:3e:0b:97:2f:29:f8:be:4a:dc:2d:09:40:ce:20:35:
92:e7:83:32:25:03:c4:9c:49:ba:ab:3a:2a:1c:3e:dd:84:1e:
fb:af:8e:5d:29:2c:b4:bc:27:6a:4c:95:d7:d5:24:8c:fd:75:
98:9b:c4:f2:f1:1f:98:01:14:2e:bb:16:92:13:c9:8e:a7:e8:
b6:a4:1d:83:06:66:60:98:2d:86:5f:79:c5:2a:e7:8d:5c:c9:
90:30:ae:58:55:23:cd:1e:b1:66:14:9e:04:7f:27:72:84:02:
e4:f4:7b:e0:a2:05:5d:3d:26:7d:66:80:84:91:35:f9:e9:26:
30:2c:03:47:9a:49:a8:19:c1:85:e6:a6:94:9d:9c:c1:d4:b4:
5b:da:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:22 2026 by rpki-client