Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier: jbN7p9iZsIHM7SNJJjWIOk84ZujSze+rVJzff3J4CTM=
Subject key identifier: D0:91:6B:6E:CF:3B:62:F3:6D:D2:1A:D0:8F:7E:78:D3:BD:64:06:E4
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 019D284DD5433836010D0DBB040EC1805D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number: 0DA4
Signing time: Thu 26 Mar 2026 04:01:22 +0000
Manifest this update: Thu 26 Mar 2026 04:01:22 +0000
Manifest next update: Fri 27 Mar 2026 04:01:22 +0000
Files and hashes: 1: 5FdT73JkLCgHgzugWWXpOCrhVgc.roa (hash: oluoiDxtzFoApZrsUB2VZK/Twzibw5WYce0WItyA/mY=)
2: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: HssK6FC7sNT/wAokKcSsmYzoYePvrfzwPD5grkc/piQ=)
3: gFVBldPsPJ9_Z3436EbOexrFKyQ.roa (hash: XpNUD5CKdNtgQ6f8YKYlS0lGIc67007/Bg5jHv80Qgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d5:43:38:36:01:0d:0d:bb:04:0e:c1:80:5d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Mar 26 04:01:22 2026 GMT
Not After : Mar 27 04:01:22 2026 GMT
Subject: CN=d0916b6ecf3b62f36dd21ad08f7e78d3bd6406e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:fc:4e:bb:aa:2e:c7:ae:37:e9:b9:39:da:
b8:29:45:e5:e8:5f:0e:81:2a:89:d9:60:d0:e7:38:
30:7e:9f:52:1a:f9:90:24:46:ba:f5:d5:60:0f:a8:
b9:d6:d4:63:ec:17:fe:3a:8b:83:50:09:a3:6b:ed:
aa:4e:49:2c:ad:31:fb:f1:cf:f9:46:4e:9d:21:b1:
81:2e:ba:85:f4:47:55:75:e1:ac:c4:27:cb:f1:98:
db:35:39:7f:b7:92:d5:06:ef:a7:4e:32:1d:e3:5b:
45:3f:6a:d5:bc:13:81:35:6d:41:b9:fa:35:7f:57:
a8:87:f9:94:91:cf:7e:38:63:8f:8a:25:41:42:2d:
e7:17:4a:cd:93:aa:99:4f:27:f7:ec:6e:42:04:34:
f8:f3:9d:ba:3d:c1:03:4c:91:26:7c:42:82:37:a1:
2d:96:cd:4f:10:56:13:9b:2b:d3:d5:98:a6:f3:01:
dd:c8:91:9f:3d:ff:59:f4:43:bb:b9:4d:4b:ee:24:
34:98:7f:35:68:44:a1:f8:f8:33:28:ce:36:e0:f4:
43:49:2a:d9:72:d5:94:c3:ec:b1:7e:29:03:ba:28:
60:39:fc:be:c5:ba:be:b5:e7:80:bb:a7:e7:aa:ea:
a1:07:68:bc:1b:20:45:1a:59:cd:65:7c:32:cd:03:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:91:6B:6E:CF:3B:62:F3:6D:D2:1A:D0:8F:7E:78:D3:BD:64:06:E4
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d2:43:08:78:5f:64:f8:d4:db:51:05:62:93:04:01:44:0c:
5a:3e:15:5e:55:d7:06:0a:d3:a1:6a:8d:b2:59:2d:0c:39:f8:
da:97:75:0c:46:ef:3c:31:3f:a6:86:52:f9:0c:bb:c0:59:d3:
33:30:69:81:de:fc:c8:f0:29:f2:99:51:af:d0:e8:cc:45:3a:
f8:59:19:1e:b0:3f:4e:01:06:21:a0:d6:31:c7:4f:21:3c:53:
95:7e:1f:a5:34:86:4a:9f:b1:61:38:72:ab:96:bb:b3:6a:11:
d6:d6:c8:e1:fa:2e:39:ff:f2:bc:39:17:b0:4d:7c:b0:7a:59:
2b:d2:1e:46:33:b7:32:2b:a6:c4:ec:0e:13:32:6c:48:5c:f6:
1e:e7:44:9a:f9:9d:0b:61:b1:c4:ca:84:15:72:b2:f8:01:56:
a4:2c:8c:b1:4e:41:77:07:50:78:34:64:b1:02:53:89:c6:4d:
13:d0:39:bb:00:87:33:88:8d:e2:86:6c:30:8d:66:4f:34:72:
ff:71:c0:5b:06:88:3a:70:ff:11:30:74:43:52:7b:27:38:4e:
ff:19:0f:fe:b4:7f:ec:e4:88:c4:5a:10:29:2f:8a:ca:ad:39:
91:0a:0b:0e:77:a0:9f:a3:ff:c5:60:01:fc:10:b4:5f:9f:6f:
43:50:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:09 2026 by rpki-client