Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: tLIEZv+UVI4YLl2OOWOn7UNNIkoC+rYwAseT45cAjU0=
Subject key identifier: 40:D6:16:4B:54:8D:7C:E6:D7:77:73:CA:DB:FF:82:05:06:B0:73:74
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 019D27A8D6369773AA3E0DF0635262E37E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0CB0
Signing time: Thu 26 Mar 2026 01:01:09 +0000
Manifest this update: Thu 26 Mar 2026 01:01:09 +0000
Manifest next update: Fri 27 Mar 2026 01:01:09 +0000
Files and hashes: 1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: jEwBJezTvNzPYmJLN4+xHa0fPTtg7f//VOHckYBkEUU=)
2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d6:36:97:73:aa:3e:0d:f0:63:52:62:e3:7e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Mar 26 01:01:09 2026 GMT
Not After : Mar 27 01:01:09 2026 GMT
Subject: CN=40d6164b548d7ce6d77773cadbff820506b07374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:08:9b:ea:25:c7:9f:e5:c0:51:e9:15:39:
10:d0:25:d9:9c:71:b8:52:35:00:4d:71:45:2b:c8:
f2:8e:ae:ae:81:f3:cc:d5:0a:77:a7:27:df:dc:6e:
d6:62:d7:79:47:7e:ce:67:6f:11:9a:3d:1e:26:3b:
b9:14:8f:c3:d5:17:a4:fc:6d:92:39:2a:2d:99:8b:
f3:7f:e4:4f:4d:e2:ed:37:de:af:2d:a4:14:fc:c3:
8d:64:60:2b:d5:55:e9:8a:9c:0c:0e:5a:a5:dd:e4:
52:1a:62:f0:7a:35:76:cd:a0:88:a5:48:da:2e:c6:
b0:2a:4c:05:87:bf:62:38:30:7e:39:9c:eb:b8:62:
89:4c:8c:92:d1:89:a5:6c:c1:b2:1c:7b:0a:14:6b:
ff:8e:31:fd:70:48:5b:72:7d:d9:8a:fd:6a:14:ed:
0b:82:e5:60:98:24:97:e6:ae:3d:84:d3:1b:69:3f:
75:ce:73:4a:dc:0b:3b:01:79:44:ad:c3:48:c3:e7:
e3:04:2f:48:d7:86:42:54:05:8f:89:0f:9d:64:53:
08:3f:94:87:1c:f3:7c:ff:f4:de:e5:f3:40:8b:96:
af:b1:82:fd:94:d2:8c:68:9b:a1:c9:c5:7e:50:87:
27:b7:a2:4e:2b:e3:f6:ec:4e:a1:28:3a:0b:bc:81:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D6:16:4B:54:8D:7C:E6:D7:77:73:CA:DB:FF:82:05:06:B0:73:74
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7c:57:16:48:ac:9d:29:10:03:60:c6:51:a0:53:41:5d:07:
07:3b:8c:50:70:76:71:47:e4:42:44:fc:4d:6c:cf:c1:e2:0b:
41:ad:37:73:c2:95:cf:f5:e4:2d:dc:d1:39:17:91:41:23:90:
f2:4a:0f:86:da:23:08:6c:03:08:73:b5:9c:41:ab:e7:02:0f:
4c:ba:5b:88:8a:98:0d:f4:0c:e4:ae:fe:9b:8a:a9:0e:39:ae:
60:eb:af:9a:dd:21:d5:ec:7b:ce:df:5a:59:70:45:2b:bd:19:
25:58:3f:84:d1:ac:9e:38:89:e9:93:71:8c:e8:1c:75:b7:c9:
0c:5c:1c:14:42:2f:20:5b:c0:ef:48:80:e6:e2:e5:0a:cb:66:
65:27:13:c2:45:79:70:14:04:1b:4d:19:61:a5:94:d7:ac:b2:
94:b2:1b:91:40:be:1c:8a:3d:4e:44:29:6d:0a:b8:4d:9c:58:
a4:44:25:9d:da:f2:10:bf:6c:dd:a4:50:14:5e:88:85:df:c2:
dd:08:6f:89:f2:3e:1c:00:af:b4:c1:57:dc:fc:bb:c3:03:33:
14:fd:d6:0b:d6:91:ed:3b:43:a7:8f:de:61:72:fd:ed:b8:2e:
46:ec:a1:14:a8:a2:12:46:e9:01:2e:4b:ea:10:1b:9a:50:0a:
a0:02:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:14 2026 by rpki-client