Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
File: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft (raw, json)
Hash identifier: 7IVTUiAvYkoNvNGUIfMNBeOlaCCgDxGDgMK1++9694g=
Subject key identifier: C4:C4:6D:52:D4:7F:44:71:51:93:58:C5:91:D2:15:35:04:3D:F5:11
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial: 019D2CCFAD7621C2E2CCD317E3DDDED6762D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
Manifest number: 1889
Signing time: Fri 27 Mar 2026 01:01:40 +0000
Manifest this update: Fri 27 Mar 2026 01:01:40 +0000
Manifest next update: Sat 28 Mar 2026 01:01:40 +0000
Files and hashes: 1: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl (hash: 8kFUwirkRXXIJ8sXvU++O7WnYiSn0nRme3Y2JqvXAqg=)
2: b5rSVSE86TGLka-C9Y6AISDjJwY.roa (hash: 0t2RVqp+17d/DpuBSPwdIacfG2COXwMxK/FmGDoAc0c=)
3: ta-CNtfidcX1EjmoTR6fl18hgE0.roa (hash: q55VmsTObI5y8vc6bmzOo3ADkQ630TErDSQUk8EgGVc=)
4: yDp_cabLhHNgFb7Jj4kWSqbMiuk.roa (hash: v8TlzmItyWM72tUXJ5LijiOK5kdxTCw7SZEC3tomivk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:cf:ad:76:21:c2:e2:cc:d3:17:e3:dd:de:d6:76:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Validity
Not Before: Mar 27 01:01:40 2026 GMT
Not After : Mar 28 01:01:40 2026 GMT
Subject: CN=c4c46d52d47f4471519358c591d21535043df511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:35:65:2c:fa:bf:38:35:9f:60:d0:f0:ff:df:
32:d1:3f:49:8f:9f:52:d8:7f:fb:c2:2f:07:a8:7b:
9f:49:b3:d2:50:5c:c5:ca:4c:3b:44:ef:01:26:9a:
c9:ff:b7:76:7f:a4:d0:c2:50:b0:65:10:c3:41:2f:
1b:ed:cb:4a:ff:c7:ac:16:6d:e6:c8:43:5c:a7:24:
c4:cf:34:ee:1a:26:8e:b0:c9:0e:a2:3c:01:99:4c:
b6:0b:80:8f:ff:cd:ed:67:a4:8f:7e:09:c6:f2:d6:
34:cc:83:f0:0b:c9:5b:7d:33:5c:38:2f:56:37:c3:
94:3f:94:dd:f9:11:65:28:24:6b:b7:b0:86:92:11:
f2:60:0a:93:2d:2a:16:cc:a1:0e:89:94:76:e9:2c:
d5:ee:8c:87:9d:2d:0e:74:91:8b:01:99:f7:84:c3:
21:86:c2:b7:6e:f7:ee:23:c6:a1:c5:a5:6b:92:2f:
07:af:84:cc:30:b6:2d:ac:e0:7f:2a:33:c3:99:26:
cf:4f:59:f0:59:55:6d:5c:01:26:9d:75:28:0c:a8:
90:9d:48:da:dc:eb:f9:92:d0:1d:6a:56:dd:44:9c:
7d:9d:37:99:fa:40:72:d7:7d:4d:55:49:19:02:c5:
82:8e:9d:19:19:84:a3:9b:8d:49:84:3a:d1:ff:e1:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C4:6D:52:D4:7F:44:71:51:93:58:C5:91:D2:15:35:04:3D:F5:11
X509v3 Authority Key Identifier:
keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e9:10:68:51:48:94:8d:2b:f8:c0:04:0b:51:ac:3e:ca:45:
55:3a:82:bf:20:93:9f:04:41:f9:0d:48:ab:10:20:8a:95:a4:
c1:c5:4c:bc:c7:41:15:46:0f:3e:1a:17:89:0e:40:22:af:00:
ec:4d:a9:ea:1f:29:f4:d0:58:d7:9f:13:3d:09:94:23:95:29:
b6:f9:30:ec:1e:3c:3f:98:01:51:84:ee:70:69:16:b9:d2:e5:
09:3a:07:bc:35:f4:63:b6:46:42:d7:17:6f:ba:33:9b:a3:09:
3c:1d:3d:44:af:66:32:98:9c:77:97:63:b8:99:55:fc:2b:a8:
40:4c:0d:1e:8f:02:96:ce:32:45:29:f8:9f:97:7c:bc:5c:ae:
df:d6:9f:99:ab:6f:5b:c8:e2:ca:4f:6b:1a:67:49:45:ef:8c:
f1:1a:9d:7f:89:86:f0:59:57:7c:03:34:24:78:40:97:33:33:
f5:cc:41:88:ca:64:77:67:06:16:43:c8:a7:22:4f:41:c8:58:
3a:59:94:a0:db:a3:f0:f8:1e:3b:b2:e9:f9:53:54:a3:a9:78:
e8:5e:98:ff:50:85:0e:03:de:4d:38:cd:6c:4a:eb:c3:07:5e:
16:b8:03:3d:fe:23:96:f9:03:6b:a9:d7:5e:26:2d:0e:6f:db:
56:f2:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:25:58 2026 by rpki-client