Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: fRh3EsobUWNhk5JcFzz4CXNJoIvQt8mSjQBL4sNid4c=
Subject key identifier: 09:D4:3D:ED:4E:C4:6F:6D:14:EA:B1:DC:0E:7C:15:AF:F2:F3:A1:CE
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 019D29CDF0F8AFF5D7B6208C07B5D75259B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 116F
Signing time: Thu 26 Mar 2026 11:00:55 +0000
Manifest this update: Thu 26 Mar 2026 11:00:55 +0000
Manifest next update: Fri 27 Mar 2026 11:00:55 +0000
Files and hashes: 1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=)
2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: ET4t3MjUTo4Ddl6c4fjGLMncwzir3Keq52QZ8zKzhFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:f0:f8:af:f5:d7:b6:20:8c:07:b5:d7:52:59:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Mar 26 11:00:55 2026 GMT
Not After : Mar 27 11:00:55 2026 GMT
Subject: CN=09d43ded4ec46f6d14eab1dc0e7c15aff2f3a1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:16:ec:11:6d:44:a6:e2:a9:20:50:d7:58:
2e:ac:cd:ae:35:6d:25:81:8c:71:dd:6a:0f:e7:99:
b0:cf:79:35:11:f5:91:3b:5b:d6:c7:37:2c:cf:d1:
38:4a:05:83:93:10:8d:c2:d0:26:bb:73:4a:bf:b9:
97:44:9f:86:84:7d:43:c6:88:13:25:bf:73:8f:a3:
22:ad:53:81:26:53:54:37:b0:78:15:fd:d0:77:44:
43:c5:77:f3:6d:3f:99:15:db:f0:0a:5c:f1:4a:1d:
d1:84:b1:f7:12:fa:2c:99:14:6f:d8:52:1d:55:74:
a0:a9:86:9c:43:29:75:68:f2:53:e1:a3:b9:7b:24:
51:34:37:5c:38:c0:80:93:79:b5:b3:8a:f3:e6:a9:
7d:4d:7a:19:13:23:ee:d9:60:13:8f:b5:8c:bc:8e:
71:9a:3c:7a:d7:a4:7b:a9:0e:58:8d:14:45:f5:ba:
96:b9:4f:ef:e6:64:a5:46:ce:32:3a:b4:59:42:a7:
48:dc:b0:ec:54:0e:4f:93:24:f5:4c:83:a8:7c:3b:
40:31:ab:d9:75:93:71:0e:d8:b6:83:6c:15:8c:4f:
8d:ff:8c:ef:62:03:fc:4a:8e:c1:cc:0d:9f:0a:8c:
64:de:4a:6d:3b:db:45:24:6a:33:ff:e2:c7:b9:7a:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D4:3D:ED:4E:C4:6F:6D:14:EA:B1:DC:0E:7C:15:AF:F2:F3:A1:CE
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:38:b5:dd:c5:a6:dc:aa:90:21:8b:f9:c5:74:f7:22:1a:21:
ae:05:34:b9:19:74:fb:ed:cc:b3:1c:b2:d8:90:92:61:25:15:
a4:7f:a4:0a:40:2e:b2:2b:53:64:72:7c:e1:59:23:c0:af:2a:
09:24:39:c5:da:8c:4c:7d:0f:f2:fd:08:5a:cd:2a:59:f7:d1:
36:fb:66:96:b5:ad:68:e8:8c:6e:37:76:04:e1:c1:f3:72:d2:
ad:36:f6:35:b3:59:ac:46:38:b4:dd:e7:2a:ff:8a:a5:5c:fe:
a5:d5:16:36:40:32:47:61:4a:c4:f1:9b:93:d0:78:06:a0:37:
e6:2f:da:45:ec:fe:73:48:1b:6d:d9:74:1e:bb:58:1c:89:25:
36:69:d6:55:05:11:e8:e5:c7:4e:a2:04:b3:ea:ac:a7:d4:eb:
b9:d7:1c:85:f6:ed:a7:2c:70:a6:62:64:f8:bd:08:42:53:df:
aa:8e:63:d7:27:ca:c4:6a:f3:d6:89:f7:cc:6a:11:da:26:77:
be:78:ed:20:70:b5:4d:be:83:45:f8:65:37:c6:15:12:1d:d7:
93:19:b7:87:da:bb:a9:21:de:6a:ad:2a:08:5e:d3:c7:54:b4:
66:a5:48:6d:5c:f7:27:47:ee:c7:d8:de:14:d9:3a:42:66:9e:
09:ff:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:53 2026 by rpki-client