Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
File: h9qWV60f35jec4uxmnPv0NsLOio.mft (raw, json)
Hash identifier: g8g7KCJ9eaiJYyZtrscMjbsqyZpd7vNm6x9irCBaJ5A=
Subject key identifier: E9:FE:5B:2A:CF:FD:53:CB:3B:04:17:F2:24:90:51:B5:30:E3:9B:2F
Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Certificate serial: 019D2772E266036299773B1399A3ED6A6C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
Manifest number: 0326
Signing time: Thu 26 Mar 2026 00:02:13 +0000
Manifest this update: Thu 26 Mar 2026 00:02:13 +0000
Manifest next update: Fri 27 Mar 2026 00:02:13 +0000
Files and hashes: 1: dd_8XOt-AgZFAxv4LVoQ4tuZiZc.roa (hash: SfXOkOIMQUgKz0cDtjyVCOFX4NWLQaKSkA6RWiEx530=)
2: h9qWV60f35jec4uxmnPv0NsLOio.crl (hash: XgJcirFYDqq289GJOxJExteFQzJHwuzIuotSpvFRu9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e2:66:03:62:99:77:3b:13:99:a3:ed:6a:6c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Validity
Not Before: Mar 26 00:02:13 2026 GMT
Not After : Mar 27 00:02:13 2026 GMT
Subject: CN=e9fe5b2acffd53cb3b0417f2249051b530e39b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:03:f6:3c:59:38:ba:82:41:6f:72:e4:8a:
4e:92:39:9c:cf:3a:7f:0c:92:4d:7f:26:00:f2:58:
be:1b:17:ba:b9:1a:b0:0f:89:16:ae:c8:e2:ed:a0:
e5:96:8c:ec:1b:33:8d:55:1b:03:72:0a:92:06:b8:
8c:73:3c:48:99:f7:0d:d6:cf:2e:74:b3:c8:5d:5f:
df:5d:9a:a5:3b:b7:8c:4a:9a:ff:e8:7a:8a:51:9d:
e3:6e:b6:56:2f:11:58:32:b7:4a:2c:c3:5c:fd:9a:
bf:83:9d:ac:5b:fb:41:f4:3a:ea:b5:3c:f6:6a:21:
28:a7:4a:c3:51:58:70:4f:13:ee:93:66:38:83:65:
71:a1:b9:1a:47:d4:c4:d8:83:ad:46:18:52:d6:cc:
c6:3f:c2:ce:de:8e:40:32:ff:c7:16:f0:54:73:d8:
bf:69:a6:68:38:ea:08:01:8b:d5:2d:8b:4f:89:9b:
19:fa:71:0e:c0:87:a6:49:65:36:4a:68:01:81:0c:
e6:b8:35:d4:11:ce:45:3b:c9:a6:2f:58:d3:3f:f0:
72:4a:f1:df:96:7b:5e:cd:e4:0c:be:be:74:d6:eb:
a8:05:32:74:69:8c:44:b0:76:9f:3e:7b:60:3e:b2:
3a:4c:e1:61:83:b2:a2:ed:c8:71:de:54:c1:15:6b:
32:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FE:5B:2A:CF:FD:53:CB:3B:04:17:F2:24:90:51:B5:30:E3:9B:2F
X509v3 Authority Key Identifier:
keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ae:54:0e:fe:b6:6c:14:23:b7:cb:6c:c7:b4:5a:c5:2b:07:
bb:c9:3c:ec:03:c8:f1:ae:c8:4b:54:f2:7b:4a:fb:d9:20:7d:
22:fd:f0:f0:1d:86:7e:9d:ae:bc:b2:c1:73:10:0f:55:ec:41:
c2:08:2b:17:81:f6:3e:00:ea:b0:2f:ad:7b:7f:35:df:03:ec:
05:eb:bf:6e:67:e2:4c:ab:26:82:aa:ca:1c:fe:1b:53:68:c6:
69:0d:28:c0:32:67:8a:0e:27:82:c1:aa:54:7b:15:60:0d:f5:
88:00:57:04:b6:d8:6c:f8:e4:d4:34:04:50:85:02:d2:84:63:
b1:31:82:a2:ec:e2:a8:f3:2e:c8:48:e2:e1:11:26:48:43:ba:
38:14:f5:73:bc:21:76:d9:34:f3:52:85:79:c4:2f:f6:de:f4:
55:a1:6b:49:28:2d:a7:50:87:2e:4a:42:37:7e:37:7e:b6:3b:
a6:3d:ef:a8:29:2a:3c:87:a7:d0:19:cf:c5:3a:68:ce:f3:0a:
37:9b:3e:65:98:fe:e8:0c:85:b9:0c:27:ab:6a:cf:5a:ce:83:
8f:71:ea:de:2f:0e:cc:de:fe:c3:b5:2e:e0:08:01:75:c4:49:
7c:9e:cb:90:8a:6a:12:9a:3c:81:5e:a3:9f:2a:aa:fb:11:80:
95:a5:60:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:35 2026 by rpki-client