Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft
File: b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft (raw, json)
Hash identifier: x77tjpnpMOrfrV3SbxJG/PKNE9txs8q9lZIY3r0NKZY=
Subject key identifier: 13:90:FF:6C:16:94:6F:C2:73:0C:73:8B:9F:0D:61:17:85:D8:4D:B2
Authority key identifier: 6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1
Certificate issuer: /CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1
Certificate serial: 019D25BA8CB93258CD1E51F2FBB67541CB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft
Manifest number: 1254
Signing time: Wed 25 Mar 2026 16:01:15 +0000
Manifest this update: Wed 25 Mar 2026 16:01:15 +0000
Manifest next update: Thu 26 Mar 2026 16:01:15 +0000
Files and hashes: 1: 1-wan3b-ajvxmgxKzG2_bCriESyE.roa (hash: OT/P/yJmBbJTLWUNPmI1kEQL5s4kHqN1N19Q4ZEyjuw=)
2: _x8j518GtOzZKIwSFjgw77WJ0cg.roa (hash: qLLB1jWYWXmu3/lWGQcppyz40ROIJakXXeLah7poVjw=)
3: b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl (hash: HX059TVFJeoZhWQRUvXNs4CguHbA1Hgj9vQ7Q3vnCoU=)
4: pzTDdoiRqJT_m82j1zVgjxb2XAc.roa (hash: m6adch5DIkkECliQTrAwnaj3Hlmzg1nCza1B5z8+Tj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:8c:b9:32:58:cd:1e:51:f2:fb:b6:75:41:cb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1
Validity
Not Before: Mar 25 16:01:15 2026 GMT
Not After : Mar 26 16:01:15 2026 GMT
Subject: CN=1390ff6c16946fc2730c738b9f0d611785d84db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1f:3a:1d:75:7b:cf:0e:54:b3:8d:4f:0f:f5:
31:58:54:08:e6:97:e3:5a:05:6a:5b:14:1b:ba:99:
42:a2:01:f3:06:b4:67:dd:75:0e:2e:9e:aa:3c:ee:
60:d1:f8:de:d1:ba:0b:df:98:c7:87:6c:d1:42:e4:
a4:45:e4:88:8e:aa:54:60:89:18:1e:d6:ca:eb:29:
37:f9:aa:fb:de:46:22:6c:ac:6d:cc:b2:de:ec:66:
a2:3a:d1:99:cd:a8:bf:4b:80:7d:d6:69:f8:c4:16:
98:d0:c6:90:dd:b2:2f:3f:b9:ed:53:df:7b:0d:ca:
05:48:ec:6b:1d:00:99:dc:22:df:bc:0d:60:5a:0c:
a7:5c:4f:ef:d1:37:bd:53:e9:6b:b9:15:5f:fa:8e:
d0:2f:43:ee:6b:75:d8:32:82:fe:c2:97:4b:18:22:
23:04:29:9a:20:87:a7:c9:49:e6:a8:67:4f:51:c5:
cb:98:ca:3f:cf:e6:78:b5:2e:7f:ce:d3:56:43:e1:
02:d0:09:c1:17:81:4e:52:c8:b9:83:26:03:c8:43:
59:7b:d9:c3:18:af:06:d7:83:37:e1:4b:4c:f2:72:
1c:82:6f:49:98:8c:f1:a4:64:13:a8:d8:af:83:60:
9d:82:2e:0f:24:41:bf:f0:2e:39:ed:d4:64:39:49:
32:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:90:FF:6C:16:94:6F:C2:73:0C:73:8B:9F:0D:61:17:85:D8:4D:B2
X509v3 Authority Key Identifier:
keyid:6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:97:bf:5a:b0:b7:0a:6d:d0:2e:5c:fc:fb:83:da:0d:59:88:
1c:f0:2f:1b:fa:6a:a0:ec:3e:89:72:0f:1b:ad:7f:cf:f8:7e:
03:7a:b1:1b:50:cc:72:98:9a:01:42:fe:40:95:72:5f:87:41:
88:cc:43:d5:46:a8:30:aa:3c:5b:c9:a7:77:56:fb:be:4b:27:
81:15:84:71:24:a5:dd:47:f7:52:3f:d7:73:1e:d0:a8:f5:38:
df:f4:5f:a8:cf:73:45:af:30:12:16:cb:c8:04:11:74:f6:dd:
29:cf:30:6d:45:c3:3f:9b:4c:65:a1:b2:f7:66:c1:b0:22:0b:
ec:87:52:9c:4f:69:7e:07:1c:16:c2:29:5f:67:bb:5e:4d:37:
98:47:e4:8a:37:d4:ed:1f:b8:63:26:ec:e6:45:8d:5b:ca:f7:
14:65:c3:61:ef:69:2d:8d:48:13:4c:2e:c2:a4:75:02:c5:5c:
af:f6:ed:b0:23:31:6f:a9:04:42:8f:ca:21:ff:7a:45:c1:f0:
14:f5:4f:75:18:0d:a2:77:46:17:6c:96:9e:a6:c2:ac:f2:d5:
ed:f7:1d:d0:c9:31:15:3f:1d:69:bd:fd:25:35:ba:6c:38:03:
14:dd:a1:a3:36:21:00:01:da:7a:bc:8b:83:f7:4c:58:d8:53:
41:f6:b3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:57 2026 by rpki-client