Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier: 0AGpehT4+DLoBFz7CJ6bdR3GHsl7eEdQGXkD4HW5pYs=
Subject key identifier: CB:EE:9A:49:8D:BA:8B:BB:46:F2:3D:3E:47:7D:A4:4C:75:0C:E9:EB
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 019D258399D6C724E1A6DA87E9AE2FF45182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number: 0D7A
Signing time: Wed 25 Mar 2026 15:01:14 +0000
Manifest this update: Wed 25 Mar 2026 15:01:14 +0000
Manifest next update: Thu 26 Mar 2026 15:01:14 +0000
Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: SD2UJNyyQDxxmvu1BV+pv5i9N1Wa57m8ykaNZKNPCzs=)
2: h1BmnlXgB6ac2TWYQTKQ2ChwBMo.roa (hash: yzd9rByRC5Jsp/Gy055ZEn4rSEyip4EOwsA55gh4BjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:99:d6:c7:24:e1:a6:da:87:e9:ae:2f:f4:51:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Mar 25 15:01:14 2026 GMT
Not After : Mar 26 15:01:14 2026 GMT
Subject: CN=cbee9a498dba8bbb46f23d3e477da44c750ce9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:ce:d3:52:8f:eb:5c:09:31:5e:25:11:ae:
e3:11:f9:2a:cf:36:63:29:24:bf:98:dc:37:76:eb:
e3:04:05:59:76:ba:6d:f7:f3:77:a6:f8:b3:1d:1e:
dd:49:9b:df:a6:7e:01:ed:66:72:ef:67:ed:c9:96:
53:18:f3:34:5c:57:ae:ea:68:2d:e6:5b:59:2e:27:
47:2d:d8:1a:48:7f:22:4c:03:ed:ee:65:49:9c:91:
d3:2a:bc:cc:99:62:60:55:ff:ad:1e:01:9a:26:45:
99:83:89:85:0f:02:d8:9c:63:3f:1e:df:51:b5:b0:
da:14:df:60:a1:0b:ee:d1:20:3e:77:6f:a7:b7:62:
9d:62:dc:69:f5:5f:b9:62:e9:88:67:38:40:7d:fa:
37:f8:ac:80:ca:65:20:79:81:5c:b2:9b:1a:5e:54:
98:15:b0:55:23:ed:a2:28:66:e3:c0:c3:57:82:8e:
f3:a7:a6:b7:6d:0f:29:44:7c:b7:00:7b:fe:8c:9c:
05:dc:43:b0:44:08:18:c4:6e:e1:13:96:ce:22:8e:
3d:54:f6:be:a4:28:41:a2:4f:60:b1:ef:db:e2:e5:
b3:c5:31:a2:23:ca:42:97:a4:1e:0d:85:67:70:ff:
a4:25:96:6c:d9:73:34:b8:a7:e9:3a:34:6d:5f:c4:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EE:9A:49:8D:BA:8B:BB:46:F2:3D:3E:47:7D:A4:4C:75:0C:E9:EB
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:71:38:2c:a1:b5:f6:7f:ca:99:27:ae:f8:55:c6:7f:91:0a:
9f:62:9d:cc:7f:e1:44:aa:e8:12:f0:1c:e5:d8:f9:f1:47:e8:
be:70:8b:3a:ee:9f:50:9d:2d:01:c7:b9:50:e0:c6:1a:50:7b:
e2:c2:ec:e6:16:b6:36:38:a4:d7:2b:bf:96:3b:84:04:04:17:
a6:d4:69:34:58:1a:d1:9e:4a:da:d0:9d:5e:dd:8f:a3:bb:ee:
6c:37:f6:3e:50:68:b5:74:ea:b4:18:bf:68:e5:9e:d7:f0:f8:
59:14:7f:0c:ad:c2:f3:37:c5:70:2c:36:7b:4a:67:a6:2d:c4:
b8:24:97:ca:26:b0:61:49:e8:71:ce:32:02:a4:f2:b2:50:6f:
07:86:44:8f:3a:dd:0a:16:5e:7e:49:b0:fa:5e:13:db:6c:78:
24:e3:60:51:cb:cd:5c:05:69:f5:eb:71:3d:44:7e:d0:f1:fa:
98:79:7c:9f:53:55:2f:76:bf:b2:4d:5f:e8:c0:bb:a9:36:42:
7a:a4:22:d8:93:32:c5:88:63:47:14:c3:f2:bb:52:fe:c9:97:
7c:a7:6a:79:09:c6:77:9b:db:09:66:cb:12:88:bc:e8:60:5d:
75:2e:7d:23:f7:47:bd:e7:3a:92:0b:f1:d8:6b:d8:59:b7:98:
5a:4f:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:37 2026 by rpki-client