Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: 6dKNt5TwhIUg96OymeF/A+ddQKx60Gf/6jndNa6QeGs=
Subject key identifier: 38:64:79:C1:1B:34:FA:B0:96:FF:28:0C:D6:3A:7F:CB:19:61:B4:19
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 019D2A3C62789B8BBE6E447007CF468AB8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 04F6
Signing time: Thu 26 Mar 2026 13:01:33 +0000
Manifest this update: Thu 26 Mar 2026 13:01:33 +0000
Manifest next update: Fri 27 Mar 2026 13:01:33 +0000
Files and hashes: 1: 682zs4Hcg3A9tAlB0aIHnZEDnoM.roa (hash: C08P14YIy9ohegdz9OY/EiQStApMK1bKQ9gOr6T/J5E=)
2: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: f/7JusBE/DqmgmgLyEv0N7nHzS7+D3pX4YPJxGioyYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:62:78:9b:8b:be:6e:44:70:07:cf:46:8a:b8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Mar 26 13:01:33 2026 GMT
Not After : Mar 27 13:01:33 2026 GMT
Subject: CN=386479c11b34fab096ff280cd63a7fcb1961b419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:71:5b:d4:96:98:93:ec:16:18:6a:93:cc:
99:65:46:18:fd:ff:83:86:ab:fc:96:50:0e:95:a6:
38:3d:57:5d:2a:5f:b6:ce:c0:b2:21:f7:26:e6:68:
6d:58:23:45:4a:39:e9:68:2c:b5:00:ff:b1:37:73:
a0:a7:bb:d0:00:65:38:03:e7:ab:72:b8:71:f4:2c:
7d:23:c6:63:0f:ac:ea:b5:6a:38:3f:1f:dd:c2:7f:
c7:1a:60:e2:b5:af:3d:18:02:8a:f3:f2:0d:e1:0f:
d7:ed:69:f6:f9:60:6d:e1:51:a0:25:0a:e4:9b:52:
25:49:56:83:d3:03:41:db:e9:15:ac:94:ce:62:43:
12:8b:01:50:97:e1:50:40:3c:6a:12:8e:68:1d:c1:
76:49:2c:0b:33:d1:41:27:b7:a5:fd:0f:98:61:b9:
2c:e0:06:4d:8a:ac:bc:f5:63:ec:69:72:75:b5:29:
13:0d:b0:e3:48:1f:60:0e:04:a0:a6:be:b1:e5:1e:
4e:94:97:84:c7:e2:87:d2:d2:5b:d5:40:16:f4:01:
ca:9b:12:c5:81:bc:38:04:3a:9d:68:f1:07:4b:8e:
09:40:f7:26:e2:c2:dd:1c:01:f0:28:10:e5:ff:76:
03:12:f6:6a:5a:ab:10:86:06:fd:b1:88:0e:95:68:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:64:79:C1:1B:34:FA:B0:96:FF:28:0C:D6:3A:7F:CB:19:61:B4:19
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:99:db:43:09:80:97:36:da:b8:9c:5f:90:ed:dd:f0:2d:44:
b0:66:a4:2a:9c:a8:b9:5d:b3:f1:46:46:7a:31:e3:6a:59:a4:
55:95:da:74:2b:d6:fc:6b:ed:62:79:06:82:51:c9:f5:00:05:
bd:d2:a6:3a:ab:cc:8f:58:13:e4:15:63:a6:85:32:37:89:c4:
bc:27:9b:9f:cc:ed:09:4b:46:fb:01:b8:ba:76:b5:56:d0:c0:
43:b5:d3:01:b4:8c:08:b0:bc:86:07:e7:41:16:0c:8b:02:80:
b0:01:1a:73:fc:39:44:34:22:5d:de:ef:41:e2:7f:1f:cf:05:
ee:32:bf:19:77:13:b4:bb:52:7e:60:e0:f5:b1:69:c3:ac:52:
20:f7:f4:f0:cc:de:35:d4:3b:2f:01:7b:4e:b6:85:56:e1:ab:
fb:f0:30:3e:76:36:ef:97:e4:0b:5a:d6:ed:fc:47:09:db:af:
0c:83:b0:65:64:a1:ef:30:0b:3d:29:08:7d:54:aa:d5:d5:f6:
49:48:db:ce:74:29:0b:5f:ec:1e:e2:57:3e:05:9d:70:b1:93:
31:88:05:0e:36:8f:9b:81:27:9c:5f:67:f3:a5:cc:e3:4d:04:
dd:2f:96:de:9a:bb:52:46:c0:d7:19:5e:05:bd:0d:de:f1:b1:
5a:be:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:28:31 2026 by rpki-client