Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
File: 9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json)
Hash identifier: EBREGiyxxxkURD7Y0RbthtG8iHlJM9tokIbMygyDyak=
Subject key identifier: 0B:BE:AB:91:B0:1A:77:66:D5:47:BC:6D:61:0D:E3:EE:BF:95:A6:9C
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial: 019D2A046234D8DF864E1331FACB362588BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:23 +0000
Manifest this update: Thu 26 Mar 2026 12:00:23 +0000
Manifest next update: Fri 27 Mar 2026 12:00:23 +0000
Files and hashes: 1: 86kV-CBVfnQcJyHUwtgj6mE9ynY.roa (hash: HD7vMFw1ZLvs7IG1Ix80v+8FBmp78WtI8pixF8GnWyU=)
2: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: c8nitmkrhk3FIZT78nnVhswnGy5ItlDwaWIH4aK9NDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:62:34:d8:df:86:4e:13:31:fa:cb:36:25:88:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Validity
Not Before: Mar 26 12:00:23 2026 GMT
Not After : Mar 27 12:00:23 2026 GMT
Subject: CN=0bbeab91b01a7766d547bc6d610de3eebf95a69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:57:d2:54:0c:59:b1:62:5a:9e:9a:7b:42:
6e:0f:e7:e0:9d:5d:28:2c:17:5b:d3:75:8e:76:f0:
06:2f:f1:8a:f9:df:8e:37:55:8f:27:35:5d:11:b1:
25:db:71:95:78:54:ae:3b:2d:bb:e6:ff:f8:5f:14:
3a:cb:13:f2:a7:3e:6a:d4:64:5f:fc:d5:ab:08:a8:
cc:34:53:01:34:40:bd:ca:49:07:8c:ed:df:e8:43:
cc:ae:09:46:55:f6:59:0b:de:5a:66:02:6b:b5:ff:
a1:d6:c6:8d:9b:82:3a:fc:56:d7:a4:a1:8d:8c:89:
88:0e:ab:3c:cf:74:e1:48:e7:5f:c0:6e:f1:62:e8:
df:a1:57:fe:85:b0:d0:89:34:91:57:24:ab:db:cd:
63:32:1c:2c:6e:85:27:c3:17:21:1d:11:2c:9a:aa:
e0:84:14:47:47:43:01:c2:80:90:4b:07:74:98:c1:
c0:95:db:8b:8f:42:47:1b:41:ec:8c:b8:6e:a9:06:
b2:5d:e6:65:97:0f:74:b3:d2:71:71:02:f7:ff:c7:
d4:35:c2:95:5f:00:15:34:29:13:9f:1f:0d:3f:8f:
93:a3:a6:9a:c9:e5:07:7c:2c:6c:f3:30:f0:bb:ef:
5c:b0:50:df:77:65:9e:aa:95:b0:d8:28:22:83:a4:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:AB:91:B0:1A:77:66:D5:47:BC:6D:61:0D:E3:EE:BF:95:A6:9C
X509v3 Authority Key Identifier:
keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f2:27:72:6f:67:0d:36:eb:33:06:cf:4c:72:4f:dd:7b:0d:
f6:7b:08:7f:bd:e4:6c:23:d5:8e:dd:25:dd:c3:4b:0c:72:54:
78:6b:55:cc:84:d7:8c:64:49:42:da:b6:2d:81:6b:b8:d3:de:
2e:73:47:90:96:7b:eb:cd:dc:9e:a4:15:15:21:bb:e3:54:45:
77:5a:4e:ab:b9:0d:f9:14:06:c1:c8:c7:97:ce:cb:53:fa:4b:
7d:62:cf:82:15:f0:da:0f:5d:d5:c8:4c:14:6f:f1:f5:77:27:
91:cf:e2:0d:37:d9:7a:9c:34:37:79:91:b9:5a:79:20:ca:52:
6d:90:88:d5:0c:b5:a5:ed:b3:14:93:21:30:07:65:07:b3:8d:
b3:65:70:d0:ad:6a:df:85:50:67:7b:d7:ff:10:d6:66:be:ea:
18:9d:bd:d1:21:b4:ed:ba:f1:b2:d0:43:a4:bd:88:97:2e:81:
be:d5:d1:20:53:c0:23:ff:c2:81:1a:a2:42:e2:f6:05:c6:4b:
63:79:51:1a:d1:4e:93:1f:86:16:87:ef:7d:ef:22:94:dd:78:
56:6b:00:a8:82:ce:67:9c:8c:9c:e0:64:90:78:0a:b7:b7:2e:
12:d9:18:c5:6d:fb:cc:51:15:31:d6:9f:47:86:e6:b4:10:30:
12:b4:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:27 2026 by rpki-client