Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier: yncrwTKDOOGhFx13fLQTtSN4bRoWbFYHO0EcD2VvKEQ=
Subject key identifier: EA:99:E3:25:F9:AE:F2:87:23:EA:A9:D3:2A:01:3C:DD:3D:09:68:7B
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial: 019D26CD65DE4F9D6B577ABCA87A1BBB7CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number: 0857
Signing time: Wed 25 Mar 2026 21:01:28 +0000
Manifest this update: Wed 25 Mar 2026 21:01:28 +0000
Manifest next update: Thu 26 Mar 2026 21:01:28 +0000
Files and hashes: 1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: KuLIVOtj4S/rSRlfzpDcvSh1ewaWIiiRSMlt1VXuASc=)
2: PBFghIae2xwjHfVkKp2B7TGOs9U.roa (hash: 6sEYt1wV5te4lrcRseI0CvT+vo353HmkjymuLozkj+U=)
3: tKmmsRGg9YbOwZD0WDnzLRT91zI.roa (hash: 1BiDxW73ZmhEDeC+jXIfDWgmKydIlt1YsSH4cXEQpzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:65:de:4f:9d:6b:57:7a:bc:a8:7a:1b:bb:7c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Validity
Not Before: Mar 25 21:01:28 2026 GMT
Not After : Mar 26 21:01:28 2026 GMT
Subject: CN=ea99e325f9aef28723eaa9d32a013cdd3d09687b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:5d:cd:7d:69:53:33:70:20:b5:0f:ce:fd:
6a:52:12:13:b0:10:55:dd:2a:67:89:91:6b:6e:4f:
95:87:25:10:24:ff:42:26:87:c8:11:b7:a9:20:b7:
26:25:ba:3b:63:01:f5:16:05:8a:5b:d8:d3:3c:2d:
6e:aa:ae:c5:60:eb:ea:b0:cb:6c:d6:ce:4f:73:47:
d3:07:9a:13:4d:41:05:90:89:2d:b3:13:51:c9:49:
43:5f:dc:5c:c8:14:1b:e6:81:75:da:c5:d5:91:f2:
37:2d:65:65:88:1f:6f:5b:76:7b:a7:23:e3:fe:4b:
26:6f:0f:04:46:9c:8a:ee:60:53:b2:79:56:15:9e:
c0:1d:c6:5b:00:99:a0:9f:02:b9:97:f7:82:90:53:
57:a5:81:9a:31:ed:61:3e:a0:e8:ac:c0:de:a9:0f:
cb:69:35:f9:eb:4e:52:8f:c1:7c:47:6c:42:1b:6c:
e9:b4:e3:6c:f0:39:b9:c6:0c:37:ad:f7:90:c2:5b:
4d:69:4d:1c:62:6e:92:8e:b6:43:c3:90:5d:98:79:
f9:8d:7b:30:2f:c7:0d:64:b5:47:2a:68:88:74:84:
43:cc:aa:9b:13:c2:1a:77:8a:18:96:c0:7a:dc:14:
16:15:95:c2:a1:58:09:d7:49:9e:9c:18:26:b1:ed:
a9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:99:E3:25:F9:AE:F2:87:23:EA:A9:D3:2A:01:3C:DD:3D:09:68:7B
X509v3 Authority Key Identifier:
keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:12:03:66:ae:fd:1e:a3:06:43:bc:af:3d:b0:b4:c9:5e:99:
44:37:ca:0c:25:f5:5f:25:e8:0c:fb:98:23:cc:6e:32:15:36:
9f:58:2d:fb:ed:63:7f:c4:d6:ec:12:3d:80:a3:a7:65:50:bc:
63:08:d5:c2:90:44:85:f4:ca:7f:fa:de:6b:3d:11:91:0f:21:
8c:d0:e8:f7:73:6c:eb:10:19:ae:d0:40:58:1c:a1:db:59:25:
b3:01:46:fd:76:6b:55:b3:e6:50:c9:ce:67:fa:7e:98:e7:58:
d3:c5:ca:9a:29:6a:cd:e7:f9:e8:d9:ff:1d:6f:fe:21:14:93:
29:8e:84:2c:ca:f5:e2:03:49:7d:7b:65:fa:49:81:74:c9:51:
1d:18:0a:cc:02:8e:54:d7:14:1b:9c:26:0f:16:2d:5a:56:4f:
22:6b:52:ed:39:c0:98:ec:b9:23:9f:36:58:f3:59:de:2c:27:
c6:be:f3:3a:55:f1:1a:64:b0:4a:1d:e1:33:18:b2:9c:e7:dd:
b6:6e:b1:56:ac:f6:34:5e:ec:11:58:5c:b4:74:39:55:4d:ae:
b6:e2:b5:00:58:9c:02:b3:68:ee:53:42:5e:32:4a:47:ce:f6:
b1:31:e8:9e:48:17:65:0d:f4:80:af:dd:04:7d:cd:a0:b9:fc:
ce:0c:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:59 2026 by rpki-client