Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
File: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft (raw, json)
Hash identifier: MV4+yo9jloca8cGI9JRECcF46Yq/fJHbn5gIO4Sq7CQ=
Subject key identifier: 27:FA:FB:BC:FE:62:7E:BA:2F:C4:F0:D6:97:F4:5B:05:1D:D6:1C:FF
Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
Certificate issuer: /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Certificate serial: 019D265EE7C22BFC99F83FB3A5AF2990B2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
Manifest number: 159A
Signing time: Wed 25 Mar 2026 19:00:47 +0000
Manifest this update: Wed 25 Mar 2026 19:00:47 +0000
Manifest next update: Thu 26 Mar 2026 19:00:47 +0000
Files and hashes: 1: 48esUEjzOBICw-DAm0mO74jcC50.roa (hash: gMR9bADhJEei6lcf6w7gc94Lp3W0Rts74YHyQSE5Nn4=)
2: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl (hash: iavfXUbfDrDXXKlku9IZhxIyoHkgSQUc5HlVLSrV4Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e7:c2:2b:fc:99:f8:3f:b3:a5:af:29:90:b2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Validity
Not Before: Mar 25 19:00:47 2026 GMT
Not After : Mar 26 19:00:47 2026 GMT
Subject: CN=27fafbbcfe627eba2fc4f0d697f45b051dd61cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:5d:46:00:9d:f9:f5:58:7b:b4:d9:c5:c5:
cd:6e:3d:43:75:b6:20:50:92:75:35:74:ae:02:4d:
33:52:40:a4:5a:29:a5:7a:9d:6e:03:35:e6:23:0e:
ed:58:da:45:15:84:00:b0:8f:ae:40:98:73:be:a2:
99:70:ef:0e:39:3b:6d:38:18:75:46:80:60:bc:5f:
7c:aa:ec:65:db:b8:20:b8:f5:e2:6a:a6:0f:54:28:
2f:ea:c2:7a:da:7e:1a:f4:31:f0:b5:fa:a4:e5:82:
82:4f:77:7e:d6:8f:f3:85:01:9c:ae:1f:39:3b:f7:
ee:58:02:1f:36:1a:77:a1:2f:ce:99:52:3c:81:99:
96:3c:c1:c1:ca:3f:54:c3:e3:6e:d0:17:ce:cd:cb:
27:f6:99:02:f6:49:69:e9:f9:8c:3a:24:ad:fb:a0:
1c:ee:de:58:ff:70:ac:aa:5e:4a:b6:58:e1:be:b9:
75:3c:2a:ae:cc:1b:54:f4:ff:2d:47:49:70:7a:86:
9d:c0:e1:5c:68:39:11:b2:59:d8:7e:a3:2d:e3:84:
58:9f:f6:a6:54:7c:c6:28:f2:86:86:b4:d0:6d:30:
d6:02:1f:3c:8c:4b:25:33:cc:27:94:9d:a1:2a:06:
d1:bb:52:47:01:c4:b7:0d:e2:e5:57:64:16:09:d1:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FA:FB:BC:FE:62:7E:BA:2F:C4:F0:D6:97:F4:5B:05:1D:D6:1C:FF
X509v3 Authority Key Identifier:
keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:82:f3:9e:5a:78:62:6d:e5:7d:b2:e4:69:df:f2:01:3d:3e:
d2:71:a8:f3:a7:9d:51:fc:c3:e7:de:5f:70:35:f6:71:b8:30:
1a:b6:a3:49:7e:43:9f:02:ad:fa:fd:6c:92:a4:fb:d1:37:c9:
85:b8:12:7c:87:45:2a:8b:0d:69:6f:90:b7:be:3d:83:08:33:
14:b9:e1:64:b7:9e:5f:a2:44:0a:5f:ff:49:a5:27:a2:6d:69:
61:44:28:d4:e9:4d:a8:55:6d:5e:1a:74:cc:b9:15:d0:7d:18:
e4:18:20:da:4e:25:9e:24:bb:dc:b3:5d:5c:e9:fe:65:46:5f:
ed:bf:03:0b:0a:4f:43:26:0d:b7:e6:3a:26:5a:0c:f3:d2:84:
05:ef:b9:5b:5d:cc:bd:36:8b:bb:9c:da:ff:ff:ba:03:7b:e6:
9d:10:f0:e0:56:b4:fd:7a:99:ce:74:de:10:60:34:b0:80:fc:
6a:cd:54:a6:f6:e5:ba:41:31:82:c4:10:ff:72:08:fd:7f:ed:
cb:4d:57:cd:7f:b4:39:74:01:e7:bd:2e:76:06:42:bd:b9:3e:
3d:38:0c:05:3a:b9:d9:ee:33:79:57:bd:13:58:65:47:a4:dc:
28:e4:d4:1a:63:63:66:42:13:b1:04:43:ee:c4:82:6b:77:ec:
4d:17:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:25 2026 by rpki-client