Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File: 9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier: w8erf/dBCg29qL44cLLnIuiQdbGRu6b+MxZirCyqMnY=
Subject key identifier: 52:21:31:30:AF:15:0F:28:15:91:CB:4C:1A:AA:5A:A7:26:4B:99:FC
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 019D277202518E41AF1977F79B01B2964F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 00:01:16 +0000
Manifest this update: Thu 26 Mar 2026 00:01:16 +0000
Manifest next update: Fri 27 Mar 2026 00:01:16 +0000
Files and hashes: 1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: NOl/VF8iw0j4MoGr9RlLjitsABoIkcq3g1NZdsTy/DI=)
2: kemm2WFFjUfdfPOT05bIGh6Qr8U.roa (hash: KeQbE1A9fOz9QJdCPRsOfpL6c34Chbb6zODaWyyEB6c=)
3: q322xaSHMZx1k4xaVe30RdNBWuo.roa (hash: DQXWLyhzw4r+tbYvkotbpHRusQgaYcOI5F7MnlMraO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:02:51:8e:41:af:19:77:f7:9b:01:b2:96:4f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Mar 26 00:01:16 2026 GMT
Not After : Mar 27 00:01:16 2026 GMT
Subject: CN=52213130af150f281591cb4c1aaa5aa7264b99fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:4b:ff:3d:94:9b:7f:4f:d0:81:4e:c5:5a:
10:90:36:f9:2d:62:76:a7:51:08:7a:c3:c1:37:c7:
16:d6:e1:62:f7:52:46:52:d7:d9:4c:e0:b5:ec:c7:
83:7f:49:50:5d:e5:ad:ed:be:a3:f9:fa:6b:1c:21:
1d:5f:c1:fd:c1:da:a3:db:84:78:89:d0:4d:ae:67:
87:e9:68:72:0b:2f:ed:c0:79:19:9a:c4:a5:8c:44:
5d:03:fa:84:77:a5:71:4a:ce:5a:dc:a4:8d:c3:c6:
44:5f:2b:28:40:50:f6:6f:23:33:a8:8e:b0:24:b1:
95:8e:f9:84:f5:c7:d5:ba:bd:33:9e:0f:4a:bd:32:
45:30:a2:4b:d4:67:00:7b:6f:1e:14:2e:17:b3:e3:
7e:57:8f:7f:40:37:b3:6d:ff:66:28:17:b8:e8:3e:
d8:0e:ac:1e:e4:5e:87:30:90:ae:d0:9c:20:a5:1c:
c2:7a:15:39:3e:5f:87:0f:71:cd:e6:54:75:7d:3d:
15:fd:6f:82:1a:ef:be:26:73:05:10:fc:41:c6:d1:
b4:d6:a1:df:26:56:b0:68:73:1e:bb:66:0c:6d:02:
32:f7:fd:5f:ce:33:82:0b:bb:60:29:c9:bb:16:2c:
20:4d:1e:1a:34:17:44:46:d8:c8:fa:fc:dd:28:5b:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:21:31:30:AF:15:0F:28:15:91:CB:4C:1A:AA:5A:A7:26:4B:99:FC
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:de:f4:b7:09:c6:16:15:f0:57:dc:07:0d:8d:6a:a2:99:46:
9a:a0:fd:ae:ff:a0:91:11:e0:f6:f6:08:6e:28:f1:fb:bf:17:
cd:8c:55:1f:f6:47:38:45:d7:1f:fb:de:20:de:b5:88:dc:f0:
64:02:f4:8f:b8:c6:ea:d6:9c:c5:ab:83:bf:a4:bd:4c:b6:2e:
fa:e4:b1:c0:f0:23:d2:1a:ea:b9:38:2f:a8:65:73:9e:7c:20:
aa:a0:d5:90:5c:e1:dc:ce:d2:e1:9c:2e:6f:d7:67:00:42:3f:
e0:fa:d5:a8:83:d8:4d:70:a2:53:ce:c4:af:71:d8:83:d9:8c:
8a:ca:1b:a6:31:a6:61:52:72:8b:99:2d:93:2c:c8:16:15:f1:
34:d4:4f:f5:bc:96:07:5a:a4:58:35:a4:ba:f5:4f:a6:3f:40:
64:b9:dc:5f:78:07:7a:77:a1:cd:20:a2:5e:4c:fa:36:fc:40:
7e:d2:aa:18:1e:cc:09:80:d4:b4:cf:cc:a6:ca:db:1d:4d:d0:
0b:bf:c1:e2:70:e6:f8:f7:c7:f2:68:b8:46:2a:4c:04:5c:22:
1f:69:e1:3f:79:de:5b:d9:10:b3:35:48:ad:9a:4e:11:95:53:
22:52:3a:f8:15:09:06:59:8f:3a:94:36:a7:96:91:9a:3d:3f:
b9:e7:f0:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncgJRjkGvGXf3mwGylk+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OGIzZjBjNmE4N2MwNDViZGNmZmFiZDkwMGRiODg5MmJl
NzAyZTEwHhcNMjYwMzI2MDAwMTE2WhcNMjYwMzI3MDAwMTE2WjAzMTEwLwYDVQQD
Eyg1MjIxMzEzMGFmMTUwZjI4MTU5MWNiNGMxYWFhNWFhNzI2NGI5OWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14tL/z2Um39P0IFOxVoQkDb5LWJ2
p1EIesPBN8cW1uFi91JGUtfZTOC17MeDf0lQXeWt7b6j+fprHCEdX8H9wdqj24R4
idBNrmeH6WhyCy/twHkZmsSljERdA/qEd6VxSs5a3KSNw8ZEXysoQFD2byMzqI6w
JLGVjvmE9cfVur0zng9KvTJFMKJL1GcAe28eFC4Xs+N+V49/QDezbf9mKBe46D7Y
Dqwe5F6HMJCu0JwgpRzCehU5Pl+HD3HN5lR1fT0V/W+CGu++JnMFEPxBxtG01qHf
JlawaHMeu2YMbQIy9/1fzjOCC7tgKcm7FiwgTR4aNBdERtjI+vzdKFveNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIhMTCvFQ8oFZHLTBqqWqcmS5n8MB8GA1UdIwQY
MBaAFPSLPwxqh8BFvc/6vZANuIkr5wLhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlzX0RHcUh3RVc5el9xOWtBMjRpU3ZuQXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yZTI3NDctYWQ3NC00ZDMxLTkyNTYt
ZDM1ZWRiOWZkZDIxLzEvOUlzX0RHcUh3RVc5el9xOWtBMjRpU3ZuQXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yZTI3NDctYWQ3NC00ZDMxLTkyNTYtZDM1ZWRiOWZkZDIx
LzEvOUlzX0RHcUh3RVc5el9xOWtBMjRpU3ZuQXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAud70twnG
FhXwV9wHDY1qoplGmqD9rv+gkRHg9vYIbijx+78XzYxVH/ZHOEXXH/veIN61iNzw
ZAL0j7jG6tacxauDv6S9TLYu+uSxwPAj0hrquTgvqGVznnwgqqDVkFzh3M7S4Zwu
b9dnAEI/4PrVqIPYTXCiU87Er3HYg9mMisobpjGmYVJyi5ktkyzIFhXxNNRP9byW
B1qkWDWkuvVPpj9AZLncX3gHenehzSCiXkz6NvxAftKqGB7MCYDUtM/MpsrbHU3Q
C7/B4nDm+PfH8mi4RipMBFwiH2nhP3neW9kQszVIrZpOEZVTIlI6+BUJBlmPOpQ2
p5aRmj0/uefwig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:46 2026 by rpki-client