Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File: 9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier: s5gatfZMc6YCiPamO0KhbQIXNc/HAiRhviJmaKyLSdw=
Subject key identifier: 28:39:E5:7F:60:E4:F6:09:4A:40:EB:AA:A4:FF:C4:D1:B1:4D:28:61
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 019D258436CD423F68DB3481083379D4B177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number: 0AF2
Signing time: Wed 25 Mar 2026 15:01:54 +0000
Manifest this update: Wed 25 Mar 2026 15:01:54 +0000
Manifest next update: Thu 26 Mar 2026 15:01:54 +0000
Files and hashes: 1: 3FkzAPl5dDeXfEEMRSwLpvP5dBw.roa (hash: qThiWbhOm4MVwzcc4QS1C0KW/Cr2nD4QzMpn3VG/nII=)
2: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: EnLWxe3dll4YonXAJXHY/E10fmCzjXxFSKRtAU8y+TY=)
3: GvMwO11Qb_MZ3FmpbZFa_YHcQEw.roa (hash: HHH3HBau0CenEM488oLj5N8VnZu9hoi/hHRUfx5gvaA=)
4: vAGwaiC2Bp1wYYYgaEDGo4Uiqpc.roa (hash: kDL6yMpm7SXuYLlIMpKeyi5R+9DyzeTyoxzQraFeyqU=)
5: yXsRkQTNVDsj9z8xG-aM4CEyin8.roa (hash: ts64cc9kwijL/HlxdE2LWSMe9OcM5b1Rlyuz3fR2RTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:36:cd:42:3f:68:db:34:81:08:33:79:d4:b1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Mar 25 15:01:54 2026 GMT
Not After : Mar 26 15:01:54 2026 GMT
Subject: CN=2839e57f60e4f6094a40ebaaa4ffc4d1b14d2861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:8f:5b:eb:25:22:25:33:48:aa:d0:64:ee:
55:7d:32:67:94:63:bf:6e:57:36:cf:63:2a:9b:16:
72:94:34:4a:d1:05:ec:13:a3:76:70:e7:21:3f:5f:
bd:4a:67:01:c1:a4:31:69:78:72:83:49:0c:53:7a:
0b:13:10:18:04:d3:75:13:b6:cb:a2:27:3b:ec:06:
a9:0d:19:92:51:40:2d:11:f5:a1:e1:10:68:c0:9b:
11:37:c8:6a:be:ea:79:ac:a3:fa:5c:e8:67:c4:5c:
a1:4f:7c:6d:53:de:1f:19:e2:b7:3c:98:3e:38:db:
e7:54:b3:bc:03:14:4d:14:5c:78:da:51:01:1b:a1:
28:e0:2f:be:9e:8d:60:3a:fd:a3:c0:88:27:a2:96:
8e:47:23:43:a2:e9:df:25:01:c4:66:ab:ce:0c:fb:
af:51:6e:06:4b:67:30:d9:19:db:d5:b7:98:2d:10:
a5:2b:f2:e0:f8:b2:3e:57:04:bd:55:8a:45:ec:ca:
ff:7a:e4:ef:b6:d5:35:aa:eb:27:05:48:64:85:af:
3d:49:5b:15:7e:9d:cf:c6:f4:42:2f:f1:aa:e8:96:
82:df:16:63:ed:19:6d:88:e1:b0:1d:d3:e2:a8:1c:
bb:41:30:cf:7b:ec:94:fa:92:4c:33:c8:23:23:27:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:39:E5:7F:60:E4:F6:09:4A:40:EB:AA:A4:FF:C4:D1:B1:4D:28:61
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3e:a0:ec:5e:d5:13:86:5c:03:72:d9:fc:2c:80:63:d2:36:
32:75:07:c5:e7:b2:6a:9e:83:ad:61:00:c6:9f:11:d3:d0:29:
f9:f7:ea:6e:1c:16:09:e5:e9:0e:a1:dc:6d:20:94:a6:2f:a4:
fd:45:85:97:ea:d6:89:05:91:f1:cd:15:ad:ce:0c:d7:1c:c5:
a1:98:9b:b6:28:cc:ea:d3:01:62:ae:68:2e:39:6a:51:88:cc:
10:6f:3a:ba:f4:d4:4f:0e:d1:d4:ef:15:77:cc:c5:6a:e4:96:
3f:74:5d:a0:c9:f6:d6:ae:43:0b:96:d5:75:99:66:4e:75:1e:
d3:48:16:81:1e:37:f2:01:55:25:4c:5b:3b:f8:da:b9:7a:d6:
5b:00:c0:3e:8f:cf:25:02:5b:3f:21:60:3d:17:29:94:8c:41:
16:91:57:aa:d8:db:cd:6b:14:1f:29:e0:8c:7b:01:79:cc:30:
c8:8b:a9:6e:c0:53:2b:c1:4a:d5:a1:ac:b2:b9:1c:71:49:54:
15:12:60:dc:5d:b7:bd:22:fa:59:57:ee:e9:79:2f:98:51:4a:
c0:29:e5:89:7f:9f:45:95:29:27:27:8c:28:2a:97:9e:1d:3c:
35:6a:9f:2f:66:19:14:dc:73:01:e0:0e:99:15:f9:5c:ac:d1:
2f:17:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:25 2026 by rpki-client