Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
File: 9WR7mt8n-vd9-AgsVVG3N1asPe8.mft (raw, json)
Hash identifier: /Y0RQMp4XWnU7iMmRYvOVtkY4UewGeaWlDjGXYxFYxA=
Subject key identifier: B9:D6:A0:03:04:59:B6:BA:DC:A5:91:17:CA:A2:0C:8D:4D:DB:4E:32
Authority key identifier: F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
Certificate issuer: /CN=f5647b9adf27faf77df8082c5551b73756ac3def
Certificate serial: 019D3977B22E3B44B312D36F919D5F43562B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
Manifest number: 1B
Signing time: Sun 29 Mar 2026 12:00:38 +0000
Manifest this update: Sun 29 Mar 2026 12:00:38 +0000
Manifest next update: Mon 30 Mar 2026 12:00:38 +0000
Files and hashes: 1: 8L86gshlVnRWr5gdY2DjZCCezS4.asa (hash: YjYfeGlfl/t841MtUmbFSM8G4/SKtO5ZfDYqZpGqHMA=)
2: 9WR7mt8n-vd9-AgsVVG3N1asPe8.crl (hash: 8KYaFNA4k4Z7QqcUBxoEkw30MszPSjyrbZ5oCGJA3js=)
3: kcx511HkgH6_p24UHLo0MXG7V-A.roa (hash: dNUOg34buyXeNE8RHao0TAiuQSfhv2tTmHDrugM/EPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b2:2e:3b:44:b3:12:d3:6f:91:9d:5f:43:56:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5647b9adf27faf77df8082c5551b73756ac3def
Validity
Not Before: Mar 29 12:00:38 2026 GMT
Not After : Mar 30 12:00:38 2026 GMT
Subject: CN=b9d6a0030459b6badca59117caa20c8d4ddb4e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:ee:e1:d1:78:18:c6:e3:47:9d:8e:0e:57:
df:ea:64:d8:44:ba:de:cc:3b:36:3c:c3:df:aa:aa:
57:89:3d:6b:dc:a2:19:96:e2:90:82:40:88:ea:3a:
84:84:60:bf:3c:01:32:b5:d0:df:22:18:9f:92:8b:
a4:95:67:c7:f9:52:35:23:21:0b:e8:76:5a:f4:92:
37:e1:06:1a:5e:d7:57:e5:89:4b:ff:f8:c9:a6:f6:
01:19:af:96:fd:5d:66:f0:32:3d:0a:5b:74:3e:e7:
7a:ea:59:c5:94:89:36:79:dc:41:42:8b:9a:28:a1:
31:10:ad:88:1b:b9:3f:7f:f3:a2:45:ab:9c:2b:74:
ce:74:a9:4c:45:f0:9e:44:c8:2e:72:7a:9a:5e:55:
d5:45:4c:0f:4a:0e:af:34:11:e2:3a:95:22:c9:25:
ed:11:b9:23:f1:b6:9e:47:0a:c2:84:cb:42:85:32:
b2:46:79:e8:f6:eb:78:2f:fa:da:0d:4f:bc:6b:d6:
d5:77:76:68:02:3b:44:35:4b:f6:e4:c1:2a:b7:05:
d5:e9:4a:33:41:b7:bb:af:4d:2f:ab:07:7b:e4:9f:
a8:67:46:b1:90:15:8f:7e:fc:45:2a:5f:db:7a:11:
fb:9e:ce:89:b5:72:da:29:43:51:64:5d:9e:b4:35:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D6:A0:03:04:59:B6:BA:DC:A5:91:17:CA:A2:0C:8D:4D:DB:4E:32
X509v3 Authority Key Identifier:
keyid:F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:33:5b:81:55:be:61:b5:4a:44:e4:f3:bf:93:4d:f4:22:12:
b7:0b:0b:bd:8d:24:2d:85:b7:51:ed:56:62:ce:78:f2:ca:2e:
e0:b1:fd:6d:c7:f6:dd:6b:d2:6b:79:87:38:0c:3f:ce:e9:88:
d5:37:01:fa:dc:c6:92:d6:92:30:c0:80:26:0c:96:62:f5:b1:
fa:e5:65:17:2e:81:23:57:c1:d4:ef:84:dc:a0:6d:ca:d9:10:
c5:12:68:83:a0:47:39:09:13:04:71:b8:15:b6:4d:a6:77:10:
cf:63:3e:6a:37:5f:3f:38:ec:1d:42:b4:58:33:43:1c:88:7d:
d9:24:ed:18:af:0a:8c:d8:4c:7e:3d:00:f4:e7:fc:e0:bc:6b:
d4:c7:7b:16:a4:6f:f7:e3:29:b1:c3:ea:d5:01:e7:78:29:95:
f1:55:93:f9:00:81:6e:3d:08:5a:b9:38:a0:22:25:40:e2:e6:
e1:47:b9:92:23:04:1e:30:3c:ba:5c:16:d1:7a:d7:70:29:52:
ab:40:88:b9:6c:ef:4f:b8:43:51:a9:d8:3f:3f:fa:f3:2f:58:
19:0c:58:0a:f8:d6:77:21:25:28:75:7f:64:5f:97:6b:17:c8:
9f:f0:aa:56:35:86:61:f4:94:a7:4c:ba:dc:b3:6a:6e:06:a4:
0b:19:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:34 2026 by rpki-client