Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: vPZYP98FArmKh5JOhIMYr3Md6AGpKemBthCs+U0Lujk=
Subject key identifier: 74:17:99:38:9A:8B:1D:89:6D:DD:0E:66:B3:48:29:F1:60:C3:49:7E
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019D26CD7B826881520BD2496186BE108B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0A02
Signing time: Wed 25 Mar 2026 21:01:33 +0000
Manifest this update: Wed 25 Mar 2026 21:01:33 +0000
Manifest next update: Thu 26 Mar 2026 21:01:33 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: KmSAWwsSXyqImjkEa4kuqxbKlE3l7ZccOWP9hCcIfxo=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7b:82:68:81:52:0b:d2:49:61:86:be:10:8b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Mar 25 21:01:33 2026 GMT
Not After : Mar 26 21:01:33 2026 GMT
Subject: CN=741799389a8b1d896ddd0e66b34829f160c3497e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a5:a8:5e:31:98:e3:24:4a:b8:1d:ee:94:b2:
99:be:e5:18:13:fb:64:bf:c6:14:85:c1:78:1b:f7:
1f:34:e9:c5:e7:61:45:4a:2e:29:c8:cb:3b:9c:1e:
8e:4c:1a:98:e0:53:b9:62:6d:f1:b6:89:0b:4b:ae:
f9:ec:40:fc:3c:07:b2:96:cc:e9:10:8f:63:91:34:
00:72:17:7c:d6:19:2d:83:ce:fc:11:f1:23:b4:94:
00:7b:c0:b1:21:7f:ce:1f:06:93:df:eb:f8:7b:7f:
62:1e:8d:ea:fd:7b:35:9f:8a:48:61:5f:a9:1c:4d:
f0:3c:16:42:2b:c4:40:14:55:0d:21:5a:b0:43:c5:
51:4b:7c:76:b6:2d:12:e3:7f:2a:f0:54:80:56:63:
4d:d3:34:9b:31:56:a4:93:7a:9c:f9:2f:cd:00:0d:
96:3c:7a:17:a2:8c:ea:30:25:63:07:3f:59:ed:64:
48:d9:c1:ca:fb:08:2d:af:0e:e8:44:60:d5:26:ce:
e6:4e:4e:e7:07:03:a8:e6:a3:57:38:0e:cf:30:85:
0c:89:75:eb:7e:b8:f2:8b:bd:22:7d:9d:36:ab:90:
c4:04:5f:1a:93:63:0d:db:0d:19:64:a7:ce:e7:e5:
3a:4f:86:07:7e:6f:b3:b0:60:e6:29:86:7a:a3:8b:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:17:99:38:9A:8B:1D:89:6D:DD:0E:66:B3:48:29:F1:60:C3:49:7E
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:22:7f:a1:3c:a9:e1:26:50:21:e5:d9:a1:fb:ea:83:10:f6:
7b:b3:ff:c7:b2:7d:46:a6:c5:5e:fb:5d:61:b3:de:51:1c:82:
c3:1a:d2:64:bc:dd:f8:03:64:c4:8d:00:38:85:80:a0:ed:e0:
53:c5:70:5b:c2:2d:f9:06:a5:3f:d0:b2:d4:76:e9:fd:ad:18:
5b:fc:56:96:59:74:41:d7:50:49:bb:5a:81:24:19:2a:67:e9:
de:db:02:eb:f1:02:fd:78:f9:c4:a9:36:78:81:18:eb:3d:33:
53:7f:14:fa:02:e3:57:8e:7e:71:3e:57:eb:3f:05:21:23:fd:
ac:2a:b4:14:70:8f:5c:1c:65:e6:de:da:22:d5:eb:2b:f3:47:
e0:23:48:46:b8:7a:28:62:ed:46:fc:4e:aa:93:6d:ea:d9:fe:
c3:9e:95:cc:32:7b:ac:40:3c:d7:d9:93:e2:32:27:80:5e:da:
a8:ef:60:20:5f:45:61:c7:3e:06:37:30:39:6b:2d:e3:0b:b0:
da:f0:32:44:c6:83:2d:4f:76:a4:a5:5d:a1:e5:d3:b3:77:af:
50:f4:65:4f:31:56:93:04:d7:21:d3:de:f1:e5:e7:f7:ec:46:
6a:ac:5d:72:4a:83:8d:87:fc:34:90:94:ac:47:d6:0d:03:9f:
a8:cd:02:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:34 2026 by rpki-client