Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: J0QLEnOqUlN1Slf+MbYzBkE1HsdMJf/C5v4ciJ8RDus=
Subject key identifier: 77:82:2B:64:AB:D9:84:75:6D:CC:21:EB:6A:68:09:D4:9C:67:01:D8
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019D27A886A6D8BEE8F692A0C243E14C9CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 18A0
Signing time: Thu 26 Mar 2026 01:00:49 +0000
Manifest this update: Thu 26 Mar 2026 01:00:49 +0000
Manifest next update: Fri 27 Mar 2026 01:00:49 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: kta/K7pzAaLeeFbP9AMWu4V9hj2QFiDj1j87ALrTnQo=)
4: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
5: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
6: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
7: wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa (hash: gQ8uNZeHK/kIii6trEwXDL6+4QDEEh4ElPmKWLgPx14=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:86:a6:d8:be:e8:f6:92:a0:c2:43:e1:4c:9c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Mar 26 01:00:49 2026 GMT
Not After : Mar 27 01:00:49 2026 GMT
Subject: CN=77822b64abd984756dcc21eb6a6809d49c6701d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:17:dd:ca:60:8f:f4:6f:cb:8a:75:35:88:
4f:46:b4:22:45:52:95:44:ec:2a:2d:3b:e0:2a:7a:
e2:b9:f3:ca:55:9c:7b:a6:58:ff:af:5b:fc:f3:c4:
de:c1:c9:b3:62:23:d0:ff:ce:60:39:8a:cf:fd:0e:
3d:c6:cf:be:12:ab:40:9c:30:71:9f:63:5c:e1:74:
c3:c0:a2:06:25:6e:04:06:c5:24:e8:3d:72:8a:8c:
c1:51:6c:29:50:28:f2:10:2e:da:84:c4:c0:b3:1c:
bc:3a:23:0b:51:24:ee:9e:f7:ac:25:ba:ba:2c:3b:
4e:67:66:43:5a:a4:c3:57:86:28:34:c6:bd:a9:b8:
08:78:43:85:b9:dc:c6:76:72:d1:21:7d:e9:90:0c:
56:b4:95:e4:6c:70:47:03:f9:7e:f1:fe:1c:0d:10:
97:d2:89:4a:38:1f:c6:12:7c:c4:23:5e:5b:ed:ef:
19:4f:b9:2d:fc:0b:9f:f1:c6:06:e8:58:07:c1:e7:
cd:44:c1:7d:67:26:c0:f3:aa:b9:82:fc:21:60:7e:
93:12:7d:ed:57:7f:33:1f:b6:c2:74:6e:49:c2:0f:
6b:e2:c9:cf:dd:24:72:91:a5:70:ef:40:9e:79:81:
76:a3:13:52:41:8c:1d:ce:e8:29:d9:c0:60:c6:44:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:82:2B:64:AB:D9:84:75:6D:CC:21:EB:6A:68:09:D4:9C:67:01:D8
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4b:90:dd:2b:86:a7:c5:92:f9:39:e3:df:fd:34:9a:f1:fa:
50:09:92:4d:94:b9:bc:ed:da:7e:37:80:45:88:93:de:de:3c:
b0:8b:53:0e:e8:d2:c5:cb:09:da:fa:ee:b1:8f:61:0d:3c:37:
38:ec:3c:95:aa:c3:68:92:b5:c6:a2:0e:f2:eb:6b:c8:8a:41:
51:55:7d:41:fc:15:24:df:c1:3f:e5:c0:1c:e2:33:ea:b1:19:
6a:76:d3:af:b1:a3:bb:27:58:d8:12:c8:fc:64:e8:21:57:1c:
1f:10:6b:1a:45:83:1f:6d:e0:7a:1d:40:7f:53:8b:06:b8:34:
cd:06:f6:f8:7c:40:06:90:a6:92:dd:8b:90:60:76:86:8f:6a:
ae:f9:e8:1f:8b:de:09:73:8f:05:d4:52:c1:77:5d:a8:62:fd:
38:d0:02:60:8e:4f:8e:8e:f6:b5:08:68:35:7b:5b:90:4f:27:
17:b2:1a:ae:48:32:60:f8:a4:d9:39:4d:56:b7:cc:18:4f:29:
7f:09:9f:71:77:5e:01:76:db:53:d4:42:f2:7d:25:9e:1b:55:
c2:b0:e9:5e:33:59:16:3c:ba:4b:3f:ab:c5:7e:53:ae:4c:5a:
ca:5f:86:67:c6:91:2a:c0:52:17:1c:53:8e:59:2f:5a:ef:9e:
41:a0:b6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:02 2026 by rpki-client