Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: u2/CP9jLolouEXFbBqn+KD786qIMGD9XVmcypyR+rYM=
Subject key identifier: 13:08:2D:B6:26:CD:1B:81:12:70:01:66:0F:7D:D0:F0:12:70:DB:20
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 019D2A7283204F3E8B374D1068E90CC3F7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 14:00:40 +0000
Manifest this update: Thu 26 Mar 2026 14:00:40 +0000
Manifest next update: Fri 27 Mar 2026 14:00:40 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: EcXk2wYumYC0ChkEeTMDs7B8TRPW7ZOPRStlJTJTMxY=)
2: sB9rgefHa3sSt6ZYnW1BwCOgmaU.roa (hash: svJIfKZ/TOmm8xXRzXlM/7QXfhtfTNna41fpYKpF970=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:83:20:4f:3e:8b:37:4d:10:68:e9:0c:c3:f7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Mar 26 14:00:40 2026 GMT
Not After : Mar 27 14:00:40 2026 GMT
Subject: CN=13082db626cd1b81127001660f7dd0f01270db20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:f8:62:1e:c4:dd:f3:36:61:ba:88:1e:a1:
22:05:a3:d5:3a:d8:23:e7:2d:71:4a:14:47:1b:77:
ab:55:74:0e:bb:1a:f0:5d:6a:fc:dc:45:62:e7:71:
83:9b:a1:22:54:e8:4c:29:0f:0d:45:bd:1d:1b:b6:
25:8c:08:99:f6:f4:9d:f5:64:17:10:a7:cf:7b:8e:
d6:b4:41:bd:e8:2f:bc:05:35:69:d0:bb:39:06:e8:
be:85:e2:ba:b3:c2:03:83:12:52:f7:ac:47:23:42:
b3:5f:11:d1:e9:e1:d8:fe:4b:41:5e:b4:11:fe:2f:
a3:9d:d1:b9:bf:bc:67:bc:59:a1:08:f2:9a:f6:e5:
28:98:65:42:54:68:f0:c8:18:fe:54:c9:6d:1d:fe:
6b:ab:4f:03:cd:42:53:fa:1b:b5:47:de:ef:17:c9:
66:5b:50:7a:08:fd:d3:a5:81:1b:97:26:c0:56:39:
17:05:fe:14:1b:09:7a:d0:b2:12:32:ce:03:75:62:
58:0f:5e:75:23:52:2a:e8:a0:fa:cc:a4:39:93:5e:
db:47:84:84:02:73:26:c2:e6:8a:7a:2d:83:a1:2d:
09:53:0a:c6:e2:8d:1f:28:4f:8d:b1:ef:7e:e5:a2:
1e:2b:e9:a1:32:51:25:29:98:77:12:07:fd:0b:55:
34:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:08:2D:B6:26:CD:1B:81:12:70:01:66:0F:7D:D0:F0:12:70:DB:20
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:99:20:e5:1c:f0:8c:f4:e4:c0:71:e1:9f:3c:20:b0:21:ad:
eb:74:01:ff:07:52:b4:ea:f8:66:4c:c7:cb:f1:3b:82:8f:3e:
8d:54:10:07:f8:57:32:3e:03:cd:01:84:6b:6e:b8:92:25:c3:
ee:e5:fd:36:1f:e3:36:7b:97:ce:f4:4a:dd:2c:10:0a:09:70:
b0:33:85:d8:17:23:08:08:c0:9c:d1:8e:0f:1b:1d:33:0b:03:
da:8f:24:c0:31:ae:83:af:17:04:60:8f:b0:a8:fd:70:5d:30:
a0:66:68:84:14:2e:dc:7d:d1:3f:30:1b:dd:5c:bf:4b:11:22:
5b:c7:af:b0:26:29:32:d0:67:c8:3a:e9:54:56:b7:7c:48:70:
ec:28:40:4f:34:6d:3e:12:c9:a6:54:5e:38:05:0f:6e:aa:29:
c2:06:5d:fa:ed:04:bb:5b:d1:8f:3c:ab:ee:06:87:86:3e:1e:
13:72:86:2c:cd:75:eb:50:29:d2:3d:42:7d:d3:ad:de:57:9e:
23:95:ad:cb:27:5a:82:80:32:2d:73:e3:c4:cd:05:e9:aa:ed:
ff:30:aa:52:1f:70:44:58:cb:65:ea:c0:eb:cd:52:7f:7f:22:
c8:7f:f2:41:c1:b1:70:31:ec:1c:ef:12:7e:cc:2f:70:58:ac:
c7:4e:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:10 2026 by rpki-client