Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier: xgdk15+jPFWUPKsM87pvSyXU3klGeBNXpwTdoerheew=
Subject key identifier: C9:9A:58:F1:8B:A5:31:A7:05:C9:FF:DA:DA:3B:77:6A:E1:3A:84:FC
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial: 019D28BBB3A3E3B7E822CABF09C8FAF097A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number: 0858
Signing time: Thu 26 Mar 2026 06:01:22 +0000
Manifest this update: Thu 26 Mar 2026 06:01:22 +0000
Manifest next update: Fri 27 Mar 2026 06:01:22 +0000
Files and hashes: 1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: JGuKgIB8FUonpmtKRK2g+Pn4BFMggZ5532v+HK8/aG8=)
2: PBFghIae2xwjHfVkKp2B7TGOs9U.roa (hash: 6sEYt1wV5te4lrcRseI0CvT+vo353HmkjymuLozkj+U=)
3: tKmmsRGg9YbOwZD0WDnzLRT91zI.roa (hash: 1BiDxW73ZmhEDeC+jXIfDWgmKydIlt1YsSH4cXEQpzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b3:a3:e3:b7:e8:22:ca:bf:09:c8:fa:f0:97:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Validity
Not Before: Mar 26 06:01:22 2026 GMT
Not After : Mar 27 06:01:22 2026 GMT
Subject: CN=c99a58f18ba531a705c9ffdada3b776ae13a84fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:cb:dc:0b:1d:c7:95:25:34:5e:69:7a:31:
51:ae:83:a7:e3:c3:39:93:4b:d1:79:34:68:c4:db:
d5:45:16:f0:5d:50:58:c5:d5:de:62:e0:8f:64:f6:
64:71:0d:76:13:d4:4e:72:3a:5c:d3:19:05:ff:f1:
01:38:8f:35:12:2f:03:8e:4f:45:c1:4f:50:4b:8f:
12:56:e7:84:f9:3c:40:9d:6e:31:7c:fc:d2:f6:83:
5d:50:74:0b:7f:e3:88:aa:24:3a:47:95:62:f4:ba:
fc:51:03:4d:16:16:91:7f:eb:04:b0:2e:26:fc:0c:
7f:94:76:8a:94:db:e9:c4:20:ae:6d:98:5e:b9:41:
95:0d:a1:5a:75:df:e3:cf:0a:24:7b:cf:f1:14:45:
f4:6b:98:16:8d:30:6d:39:b1:10:25:e2:3f:67:df:
e6:5c:8b:cc:fc:33:3b:49:d3:84:42:1f:11:bc:14:
5e:1c:01:e0:72:7b:6d:f0:39:e8:b3:78:c7:0b:bc:
c2:57:da:66:0d:44:94:5b:c0:ee:71:28:9a:40:74:
5e:2e:8c:29:06:77:c4:66:e4:ef:8b:6c:3f:0a:dd:
9e:9f:d0:f2:8b:c3:f7:9a:28:3b:c8:ef:70:ef:6d:
9f:d7:b9:6a:9d:36:9a:a3:89:05:f8:bf:4c:b7:dc:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9A:58:F1:8B:A5:31:A7:05:C9:FF:DA:DA:3B:77:6A:E1:3A:84:FC
X509v3 Authority Key Identifier:
keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:18:0c:a3:11:f8:f4:39:22:90:0a:18:ad:72:7f:80:10:a0:
f8:40:6b:51:a0:f4:f7:be:fd:2c:28:ea:4c:e8:c7:2c:f5:eb:
4b:31:0b:f5:e1:f7:53:80:7b:97:76:90:81:7b:44:2f:e4:05:
43:5a:b5:4f:76:e9:d5:73:4b:28:73:05:d6:2d:c3:a5:b6:42:
b5:36:61:d1:fb:24:84:4b:84:d9:48:9a:7c:22:58:89:85:c7:
92:c4:0d:75:59:4a:c8:ae:f9:3f:d8:f6:f0:2c:f5:e5:dc:c3:
78:f3:0e:5c:ad:f0:cd:eb:3f:83:f0:cc:57:10:99:fd:0a:51:
90:cd:d0:64:c3:a5:95:64:58:3f:95:59:14:0a:e9:4e:23:d4:
c7:6e:7b:8d:25:15:ad:7f:c3:98:09:ac:bb:a0:8c:3c:6a:b2:
a6:5d:68:c2:e2:f4:10:41:71:28:a2:cc:6e:2d:72:98:f3:45:
46:a5:0d:99:3c:41:6b:4c:ea:1a:e9:e0:92:21:4c:9e:33:9b:
22:bf:fc:72:31:b2:c4:66:32:29:a1:cb:86:16:4d:cf:29:73:
f8:f6:db:19:33:d5:df:50:34:c6:68:20:24:0a:5f:de:dc:b8:
5b:2d:08:49:35:3b:14:f9:ce:95:16:68:6c:6d:e7:98:f6:1d:
64:50:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:43 2026 by rpki-client