Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
File: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft (raw, json)
Hash identifier: DFQzizBmF9PAbx/8uwq3TqLmxwlUcpnT53gZARXEMdU=
Subject key identifier: 82:9C:DE:2F:7E:1F:B5:23:31:73:43:95:75:E1:D2:CE:86:1F:7E:46
Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
Certificate issuer: /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Certificate serial: 019D2584254822EA9114E657BCD1E9429C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
Manifest number: 09B5
Signing time: Wed 25 Mar 2026 15:01:50 +0000
Manifest this update: Wed 25 Mar 2026 15:01:50 +0000
Manifest next update: Thu 26 Mar 2026 15:01:50 +0000
Files and hashes: 1: 9XSwptV-ZNILwy4i5DW_tgPkgSU.roa (hash: 1gOGH6Fm4nuBFJfCO9Q2Mvfqz47h/JLm40saj0YTiOk=)
2: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl (hash: m4na0WbaKG+hHiyLpVtGmdQIeCb3eRF1VKM8q733XAE=)
3: W-UYkYcFpRXJXOLdeRe7OrV0cZ0.asa (hash: u3Eh32uzo3YgryhEMHYkmoOOlYuyFVQMTVeW1RRgVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:25:48:22:ea:91:14:e6:57:bc:d1:e9:42:9c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Validity
Not Before: Mar 25 15:01:50 2026 GMT
Not After : Mar 26 15:01:50 2026 GMT
Subject: CN=829cde2f7e1fb5233173439575e1d2ce861f7e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:78:81:40:64:4b:f5:39:71:9c:da:81:cf:
93:9b:20:c9:02:7a:b6:73:b1:37:f7:6c:70:ef:a0:
4d:98:6a:a1:32:95:a0:37:a2:13:6c:94:85:28:61:
5b:61:53:2a:21:3e:20:52:e5:f5:64:f0:75:30:d4:
76:f3:ca:2c:13:79:92:28:b3:1a:5a:1d:1e:35:e4:
ab:de:01:d9:02:d8:47:74:e4:b3:1a:9c:c7:3a:db:
97:8d:7d:b6:45:9f:20:29:e4:dc:a4:c9:c4:33:f3:
cf:8a:dd:ca:64:be:f4:85:dd:31:f1:34:b2:c1:b7:
81:c5:4d:b8:4f:25:b8:2e:db:22:f1:51:2a:f4:a2:
93:4c:4e:ca:33:bf:1d:0f:2d:02:3d:e8:d7:75:40:
9d:f8:89:cd:de:8d:25:94:d0:c2:90:cf:87:8e:38:
af:f8:f9:3e:43:07:28:8d:21:37:e7:e2:35:2a:73:
99:50:e1:72:72:c9:ce:7b:52:67:df:41:e0:2f:15:
f7:ab:ce:0b:64:ff:8e:83:62:cb:1d:00:05:dd:37:
e9:6c:34:f4:a7:7a:a6:45:15:fc:1d:a9:86:d2:d5:
e3:19:2d:16:73:dd:5b:01:4b:9e:c8:32:6f:1e:b9:
9e:f8:50:b8:bf:e6:22:21:c7:ec:d2:a0:54:79:78:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:DE:2F:7E:1F:B5:23:31:73:43:95:75:E1:D2:CE:86:1F:7E:46
X509v3 Authority Key Identifier:
keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:17:f7:10:00:f3:07:a9:b0:af:0b:12:7a:54:d2:cc:1e:d8:
c5:38:5f:c1:1e:9e:72:db:cb:d7:63:7d:ee:86:c2:b7:82:d1:
b6:ae:57:50:da:9e:ee:86:e8:18:56:08:a1:43:9c:c9:49:8c:
71:22:48:4c:d6:47:2d:39:ec:01:5c:76:55:ca:da:03:4d:c4:
4a:9c:9b:9f:a9:2a:5d:fd:37:7c:f4:16:4c:e0:79:fb:66:19:
dc:6a:3d:c5:a3:03:f3:18:f0:c1:57:ab:05:d0:79:16:2a:cf:
5c:84:da:c2:ea:f3:a4:a8:0d:58:f9:4b:1a:85:b4:93:c0:4b:
ba:e7:d6:8e:e9:be:74:33:51:aa:20:fa:9d:03:48:8d:e6:32:
51:a7:d3:06:1c:ee:e3:ca:f7:16:1e:b5:31:7a:db:7f:ed:e3:
57:a9:ab:0f:eb:bd:7e:c0:68:03:86:14:e8:89:4c:59:65:43:
c6:27:b1:64:17:a2:06:90:81:e1:b3:c2:b7:c8:a8:34:69:52:
0b:d0:75:1e:c6:11:6c:81:3f:94:36:ae:3b:84:f6:ca:cd:17:
54:2b:6e:f2:fa:d6:55:be:02:09:ff:db:63:3e:e9:83:e3:df:
ce:64:2a:55:46:b8:90:fb:0b:b2:55:b2:c7:37:2a:06:ea:e5:
11:be:db:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:37:08 2026 by rpki-client