Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier: JzcIUgVbCYNryjY6QiYkdbYKBTP3XCQypQyx3CO/cbg=
Subject key identifier: 73:04:95:09:4B:9C:A4:40:C9:16:91:35:95:42:C8:2E:4D:E6:39:FC
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 019D052390D12899A51F65229156EE124897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number: 04CB
Signing time: Thu 19 Mar 2026 08:08:30 +0000
Manifest this update: Thu 19 Mar 2026 08:08:30 +0000
Manifest next update: Fri 20 Mar 2026 08:08:30 +0000
Files and hashes: 1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: V+6/aGi63Nva36NdF7QgEjjtF2KedrjUrTXd2lTT+uU=)
2: A5r5Qaig76Fi-h_x1MJZp-FQeMg.roa (hash: BufIVjQJ6C3azRulNXmnwhmvj6IKqHgaJCn65BJ4x/c=)
3: v-Rbh3pxcVUKjfTtgX5z8ooyagk.roa (hash: uuCpdpCqPNt2JovXlEfYgnQ3c+mrQwXOG7tL6P9AQY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:23:90:d1:28:99:a5:1f:65:22:91:56:ee:12:48:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Mar 19 08:08:30 2026 GMT
Not After : Mar 20 08:08:30 2026 GMT
Subject: CN=730495094b9ca440c91691359542c82e4de639fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:02:34:1e:c3:29:84:5f:ee:1c:2f:7d:97:
9b:f0:0f:1f:7b:98:8e:3c:d1:98:d1:6a:93:1c:57:
68:35:1a:2d:aa:95:dc:5f:81:77:5d:0f:1b:44:11:
21:ef:1f:ce:da:ab:c4:df:ac:0d:c8:09:79:fa:78:
86:b9:18:ef:69:55:72:88:71:1d:c2:da:fa:4f:31:
e5:01:47:39:18:d0:a9:a6:8d:7f:05:04:fc:c7:aa:
c5:c4:cd:c5:62:7d:d9:09:ee:e9:b4:3e:a9:45:d0:
8a:ee:30:56:70:55:55:e9:94:33:b2:2e:70:63:ab:
bd:cf:2f:b0:e3:69:01:15:76:db:6d:99:65:04:5e:
34:4a:f7:7a:b4:3a:c6:d6:71:47:73:50:f8:32:9f:
b1:d8:35:e6:f7:8c:0d:b1:41:54:83:b3:e9:e5:b0:
7c:fa:f0:f5:74:59:a9:2d:b3:4e:07:0b:59:c8:71:
28:f4:96:ca:0c:bf:d2:3c:b2:01:40:9c:c2:e9:7b:
05:e4:7c:c6:68:1a:59:88:52:24:33:3b:08:dc:eb:
a3:6c:5e:79:dc:88:07:fc:98:d7:8a:03:3e:47:44:
c7:b5:be:a9:cb:c7:7a:1a:5a:94:74:bc:0c:27:88:
e5:d6:ec:5e:6d:17:65:ef:ae:ef:e2:62:bf:14:08:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:04:95:09:4B:9C:A4:40:C9:16:91:35:95:42:C8:2E:4D:E6:39:FC
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:4f:b8:e3:13:af:18:48:85:03:82:79:67:4a:91:14:80:49:
71:95:49:ac:37:eb:5d:bf:22:80:09:98:69:8d:50:96:a2:8c:
0d:69:2c:88:12:54:d9:18:2d:da:c9:f6:5b:27:5a:35:da:12:
0a:93:92:c9:77:c8:bc:e0:14:15:40:c3:4c:5b:b6:66:d5:40:
36:13:50:8f:01:e8:15:f6:ca:8c:9f:53:a9:c4:5a:d8:21:44:
dd:43:65:f8:83:6b:ca:ca:39:43:3a:a0:02:f2:fd:76:a5:38:
5e:d8:e2:4a:b0:fd:31:38:aa:86:3e:0e:bb:1a:a4:8d:a8:02:
02:35:35:66:2e:29:a3:a0:19:ee:a3:b9:e0:a4:46:73:da:3f:
bd:4e:eb:1a:8e:bd:34:95:27:71:f0:f6:c7:05:d7:43:51:07:
52:4b:7b:df:08:e4:53:8a:2e:68:dd:93:0b:80:e0:77:b2:12:
57:98:5d:dc:ef:3d:e7:d9:3c:f0:de:66:fa:c2:f8:02:e1:73:
b3:99:6f:26:14:94:8d:02:76:b9:b9:97:17:41:fc:a9:f4:84:
0a:8d:29:af:2a:2c:8e:e5:12:43:6a:77:90:1d:fd:90:44:86:
0a:3c:6f:77:8a:d0:fc:42:6c:db:b2:71:0c:f7:86:08:24:e7:
a1:a7:29:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:02:22 2026 by rpki-client