Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
File: mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json)
Hash identifier: FqbPk6ZZHGhbhXQQS4+ZTApP/X2UTXq3bqHVinZtfn4=
Subject key identifier: E3:A8:11:52:0B:02:CB:B0:04:B4:65:0D:92:E4:1A:A0:77:C4:2E:60
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Certificate issuer: /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial: 019D28F2465269A46FA68EB06C31D45CF6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
Manifest number: 0857
Signing time: Thu 26 Mar 2026 07:00:59 +0000
Manifest this update: Thu 26 Mar 2026 07:00:59 +0000
Manifest next update: Fri 27 Mar 2026 07:00:59 +0000
Files and hashes: 1: Xgkh2jqWshIrm_XP38KT2hJAFLI.roa (hash: HtXZbHm1lMY4MWtIUl2UqL3oGRY9eBOP4/14fbeHHSQ=)
2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: NOW5MLHcj5wzbj3kB62YEAUSrjqfl7N6i+nVJqh4IME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:46:52:69:a4:6f:a6:8e:b0:6c:31:d4:5c:f6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Validity
Not Before: Mar 26 07:00:59 2026 GMT
Not After : Mar 27 07:00:59 2026 GMT
Subject: CN=e3a811520b02cbb004b4650d92e41aa077c42e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:34:99:c9:4a:7e:e1:23:d8:4e:fe:59:e1:
a9:e9:02:b6:94:46:27:97:1c:89:53:6d:0b:53:2f:
ee:97:6d:2d:da:40:d8:a6:13:b7:b5:3a:53:54:1e:
9d:d3:8c:89:a9:8a:df:40:fd:e2:e4:de:82:04:e1:
96:53:b6:31:a6:c3:1a:e0:94:5d:33:c8:68:7f:3e:
ee:44:47:2b:85:7e:7d:c7:c3:40:14:a0:c7:8e:8f:
a2:23:3a:c9:bf:a8:57:ff:cc:db:71:5a:cc:ab:a0:
b7:1c:bb:6d:14:09:b5:c6:17:30:34:14:6c:20:71:
ba:fe:f0:ca:bf:74:11:69:3c:be:89:bf:24:ad:13:
af:51:18:02:37:93:1e:a2:de:a4:91:d8:3f:d6:13:
96:fd:5f:d8:81:7f:c0:33:af:ac:2a:c6:96:b6:56:
89:09:49:8c:e6:1a:fb:53:ad:63:53:3a:52:11:dd:
b5:11:fa:69:fc:55:b8:25:45:00:e8:f1:21:0f:e9:
5d:78:c3:e4:66:03:a6:3e:f8:30:e9:36:42:ed:06:
f5:84:cf:4d:6c:11:64:2a:3e:4f:2b:a1:bd:86:d4:
92:2d:e8:68:1b:09:06:40:e5:f0:2d:b1:b3:da:bf:
77:a8:09:86:f4:98:2f:c1:42:e8:9a:d8:95:d9:f6:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A8:11:52:0B:02:CB:B0:04:B4:65:0D:92:E4:1A:A0:77:C4:2E:60
X509v3 Authority Key Identifier:
keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ba:95:57:7d:bf:cb:bd:71:6b:54:01:95:4b:f2:df:c2:2c:
ae:e1:70:e5:4a:a9:27:a8:73:d8:a0:a5:60:45:a3:a0:ec:7d:
78:b2:31:d8:53:d1:4c:08:04:a2:fe:dc:87:b2:78:1e:df:60:
3e:e1:26:a8:90:e9:de:92:43:da:d0:e0:92:91:eb:0f:48:19:
df:2c:9c:e0:5e:1e:b5:84:bd:eb:9b:8c:8b:7d:87:16:0e:01:
4e:2b:9c:d8:a3:de:60:d8:2f:3d:7d:f4:3c:a8:b3:59:6c:3c:
37:9d:0d:1d:6b:46:12:67:7f:d7:c7:00:e7:95:15:e8:1e:88:
5c:6e:b4:6d:d0:f2:b1:66:bc:d6:d2:6e:da:de:f5:56:13:28:
20:4f:6c:6f:93:99:5f:51:6f:c7:ee:a6:24:df:79:e1:a3:a3:
61:11:00:ca:4d:4c:56:24:fd:4d:d6:16:4e:f1:ab:8e:14:2e:
7b:43:0b:af:03:8c:8b:8b:e8:af:0e:b8:4f:a3:b8:fb:ff:15:
0c:4d:d7:91:6c:eb:37:bb:8f:9b:de:ba:5a:27:c9:50:69:7f:
14:bf:b1:44:49:da:d6:eb:c8:81:93:c9:a4:a3:f5:8e:b2:df:
40:f4:16:ea:21:d1:4b:90:ab:94:ff:48:54:0d:89:3f:c1:78:
f0:64:a7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:11 2026 by rpki-client