Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier: /Gs0CilgPEb7QG1p3StESNmdQjoajCv+ZfnKudUUwZM=
Subject key identifier: 5B:0D:18:D6:8B:EE:22:53:CA:3F:E5:4B:66:3A:D7:9F:E4:84:A2:9A
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 019D38D2DDBC63FD821810FD8B254376BAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number: 0A7F
Signing time: Sun 29 Mar 2026 09:00:36 +0000
Manifest this update: Sun 29 Mar 2026 09:00:36 +0000
Manifest next update: Mon 30 Mar 2026 09:00:36 +0000
Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: VqwJ+JEi6KzGXMeeq18KDsuHfKzt+zZkdSmALApq1CE=)
2: DASQ8NU1yHanG6tnp7TCLgdJSB8.roa (hash: W/n6G98Zq5gjZZSilKHseC4jqvetgfkl6TxxF14gb54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:dd:bc:63:fd:82:18:10:fd:8b:25:43:76:ba:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Mar 29 09:00:36 2026 GMT
Not After : Mar 30 09:00:36 2026 GMT
Subject: CN=5b0d18d68bee2253ca3fe54b663ad79fe484a29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:9f:1c:7c:d2:80:81:b2:ad:e9:33:2c:45:
09:77:6e:b9:3b:6a:7a:c7:13:ce:3e:87:a1:77:49:
f4:e9:66:8d:ba:22:35:4a:d9:77:50:c4:b2:80:b6:
30:cc:fc:c3:50:2e:0c:ab:fa:c9:bb:6b:3a:4f:70:
b2:53:87:7d:02:53:50:a1:1f:05:1c:bd:54:8a:8c:
1b:05:e1:6a:4f:81:fe:3c:84:3b:05:d0:78:6b:0b:
97:33:4a:14:bd:a6:b1:f5:7d:06:81:de:9d:44:20:
44:b8:27:93:4f:5f:2d:45:c0:4e:57:eb:00:62:2b:
3a:9d:43:20:c4:ba:ba:c4:ca:5d:75:61:aa:41:be:
64:81:21:c1:6d:aa:65:15:7d:f8:89:6d:8a:e8:e8:
9f:a4:25:5e:cb:33:41:ba:65:6d:e0:fb:5d:6c:27:
0c:21:ab:45:cd:43:c3:d7:93:df:8f:8a:2f:75:21:
aa:57:83:58:97:e3:d3:c3:40:af:78:40:3e:46:aa:
54:b9:47:de:3c:be:fa:f9:3c:12:5f:0e:f6:f9:29:
92:2a:b0:0f:d1:f2:bc:61:77:ad:54:e7:d8:0b:4f:
45:77:42:9a:59:7c:b8:b3:96:d8:90:d8:0a:25:36:
e7:22:ed:80:ca:04:3f:cc:03:7f:07:77:81:6b:7e:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0D:18:D6:8B:EE:22:53:CA:3F:E5:4B:66:3A:D7:9F:E4:84:A2:9A
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9f:a1:63:1a:f6:7a:e7:3c:52:c8:93:93:2b:30:35:b9:d6:
3a:98:77:e1:76:e0:d8:81:4f:3e:d4:aa:6e:40:70:de:c0:fe:
b8:d8:bc:7b:17:55:b2:1e:b7:5d:68:c1:f3:f9:75:44:48:35:
aa:5e:54:a1:9f:51:77:d5:e9:60:26:fe:47:7f:92:52:e0:a2:
fa:09:24:99:b2:46:9a:e8:f6:e6:dd:97:3f:c2:40:90:48:67:
cf:d5:99:b1:62:0e:38:a5:f0:67:92:0b:71:c0:d0:d4:b9:93:
56:46:f6:4d:a2:ea:1a:c6:ce:b5:b6:66:44:a1:d9:37:06:6e:
96:aa:1c:30:b3:8b:78:8d:55:2f:ef:07:15:56:09:6d:7c:94:
63:49:6b:3a:4f:ad:b5:3c:9e:08:c8:38:ac:2f:a6:76:b7:99:
09:3f:d9:6e:7b:b2:a0:8c:14:a9:53:b3:3f:87:97:27:3d:d9:
52:36:2d:b7:ab:88:17:6e:44:56:9a:de:d8:9a:34:80:cb:92:
ba:63:57:38:42:d4:a2:b1:d0:bc:e2:32:25:89:e8:0f:9a:e7:
f1:d0:b0:9e:c1:3b:8d:e3:d2:77:2e:81:94:43:a6:af:c6:7d:
4d:09:a6:4a:e5:f5:f2:87:92:5e:b2:a9:f4:81:5d:14:cd:e0:
bc:41:e8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:39 2026 by rpki-client