Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: qPbkIFziwjdeYH+nKaFYqAZijFBXjvU6cIKprzfS8a4=
Subject key identifier: 64:B1:7E:D7:FD:16:32:30:F8:0F:6F:DE:88:DC:78:0B:94:EF:73:77
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019D2695E29CC68041423FED452EF2B335C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0BEF
Signing time: Wed 25 Mar 2026 20:00:50 +0000
Manifest this update: Wed 25 Mar 2026 20:00:50 +0000
Manifest next update: Thu 26 Mar 2026 20:00:50 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: U2BYnurNnujt2G6VKYi+iDgVRbVQ6f8EaHyggTmWdkk=)
2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e2:9c:c6:80:41:42:3f:ed:45:2e:f2:b3:35:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Mar 25 20:00:50 2026 GMT
Not After : Mar 26 20:00:50 2026 GMT
Subject: CN=64b17ed7fd163230f80f6fde88dc780b94ef7377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7e:f0:45:b7:3e:9f:e6:f2:07:50:fa:44:39:
8c:53:e0:23:00:8e:b2:bd:4c:e2:37:b4:a4:47:6c:
da:cd:35:08:77:42:d2:f3:53:28:36:63:96:27:23:
c6:ce:1f:83:a7:66:cd:d4:63:af:55:6a:20:9d:63:
7c:b2:b5:7d:72:e6:b5:1a:93:5d:9e:e9:50:4b:01:
c8:5e:41:8b:df:ef:74:d3:71:8f:7a:0a:83:0c:06:
8b:f3:95:9b:7a:47:89:58:3a:46:9c:c1:ca:d1:2c:
5a:33:93:ac:bf:fa:cd:fc:16:af:06:0f:ab:84:80:
b0:1d:ea:bb:83:e0:74:25:a1:c2:7e:cb:f4:36:22:
b6:34:0d:f1:4f:ec:64:21:48:c6:a6:62:0a:8c:a3:
33:1a:7d:50:04:42:99:a1:7f:20:32:c3:3d:08:8e:
9e:b6:50:bc:b0:04:49:e1:ca:1f:60:62:20:1b:84:
7b:28:08:6b:a0:22:49:93:2e:9c:61:57:e3:bc:bf:
be:d7:c5:c4:a1:64:4f:72:ac:4f:92:52:52:c6:02:
e4:b8:b3:60:01:c1:f2:a3:be:f0:e4:6e:09:9e:22:
f7:a7:d8:73:76:06:3e:f8:27:1a:16:58:fa:7c:6d:
e7:3c:f8:f3:23:2f:91:7a:e1:3f:49:fc:d1:bf:2c:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B1:7E:D7:FD:16:32:30:F8:0F:6F:DE:88:DC:78:0B:94:EF:73:77
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fb:4d:8c:bb:5f:15:84:25:94:8b:55:71:22:75:32:87:f7:
6f:52:c4:d7:78:24:d4:58:59:bf:ab:e7:be:4e:30:a3:9a:ff:
41:f2:1b:d7:95:39:21:23:ff:dd:2a:40:c0:de:ec:ec:fe:88:
42:19:c8:72:c5:e5:c2:ea:d2:0a:86:54:87:bf:a9:68:68:cb:
ac:25:bf:ba:45:84:4b:c8:76:44:27:2f:bc:6c:3d:de:c8:ad:
4f:cb:e8:c8:10:13:f5:ec:5a:cd:8e:79:e7:ce:12:0d:92:62:
74:57:33:0b:0b:84:ba:24:aa:b0:30:31:1c:1c:14:20:0f:a1:
42:95:f0:85:bd:0f:f9:ae:80:1c:da:56:2d:5f:3f:32:26:9c:
d5:79:15:1b:0c:f3:2a:25:f1:a0:80:e4:7e:26:dd:7f:4e:70:
6f:f4:50:c2:33:06:e0:eb:cd:33:b0:59:54:8c:6e:ef:06:4a:
dc:01:50:91:54:39:e1:16:1e:20:d8:6e:07:c1:3b:a7:52:95:
3f:a9:a5:4c:29:39:5f:60:03:25:29:4b:4d:6c:6e:aa:c1:1a:
50:20:13:13:ed:6e:04:58:28:bb:66:16:91:f4:9b:eb:e3:e1:
05:a6:9a:bd:9d:6b:11:ad:8e:e7:3c:f2:2f:73:95:ba:af:cb:
37:7b:86:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:01 2026 by rpki-client