Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: pL5GdXl/4aVlf/MGRuFm3RUMOEptH6KPr4Xa7sSpPlw=
Subject key identifier: F4:3E:27:EB:F7:9C:59:EB:86:03:C6:B4:08:25:65:48:96:8F:AE:8A
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 019D28F28A271E9F133F9ECA27CAA10B6735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0AAB
Signing time: Thu 26 Mar 2026 07:01:16 +0000
Manifest this update: Thu 26 Mar 2026 07:01:16 +0000
Manifest next update: Fri 27 Mar 2026 07:01:16 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: hpRF9is9ehygq40xlTgAVeSu4aA2iRx0Cvoq0mtNmxc=)
2: eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa (hash: G/mSpJ5ilGB6NcS3kOpxScz/226GTJNOO7cls8f2b0g=)
3: ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa (hash: RZTYOXGch0DUBzdLJFR6bBMusCngAipnQLe9rTFjcIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8a:27:1e:9f:13:3f:9e:ca:27:ca:a1:0b:67:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Mar 26 07:01:16 2026 GMT
Not After : Mar 27 07:01:16 2026 GMT
Subject: CN=f43e27ebf79c59eb8603c6b408256548968fae8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:ba:c9:42:33:2b:97:ac:9e:3b:82:31:6b:
bc:fb:57:67:a3:4b:6f:60:72:70:b6:41:76:91:dd:
18:07:ec:d1:ca:44:0d:53:18:c6:61:80:a4:b3:a8:
76:e0:35:cb:5d:9b:10:2b:44:de:76:70:bd:32:82:
ab:7b:95:33:0c:03:da:b5:67:10:70:f9:71:ec:6c:
ad:a0:8f:37:66:2b:76:a8:ec:43:62:a9:0b:8b:31:
ca:b3:e7:91:ae:b5:00:56:7a:db:90:84:f3:44:b4:
0a:46:cc:8e:49:63:ba:04:3f:b0:89:8e:4c:f2:4d:
0d:7e:b4:bb:68:0c:af:8d:82:c7:da:9b:a3:2b:a5:
38:73:13:e1:fa:f7:a0:80:65:90:34:2b:ad:24:68:
7f:e4:9d:7e:af:c8:f2:c0:fc:d8:cb:0d:c8:ff:80:
3d:52:8b:8f:7f:f0:7e:85:eb:cb:9c:e7:56:78:92:
6d:ea:f6:7b:87:1b:f9:19:da:aa:47:fc:26:c1:77:
bb:6d:c9:aa:bc:5e:eb:c6:0b:9f:f9:45:39:1b:fd:
02:89:e5:1f:66:ca:e5:aa:0f:2c:bd:51:14:a7:d6:
9a:df:40:0b:c5:2a:74:f4:00:68:1c:95:d6:72:7a:
5e:68:fd:df:9f:93:c2:b3:e0:4d:2a:e5:66:d9:d4:
89:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3E:27:EB:F7:9C:59:EB:86:03:C6:B4:08:25:65:48:96:8F:AE:8A
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ab:44:25:2b:7d:86:7a:08:b2:0e:53:eb:04:3e:7b:00:c9:
8f:a6:c6:d4:f8:0a:71:d0:e0:99:27:47:e4:e8:d4:84:c1:f3:
53:e7:a4:2f:59:c9:d1:2c:16:6e:2b:33:b6:57:40:23:6a:15:
fb:dc:35:10:b1:2c:67:ae:28:56:fc:5b:28:c2:de:79:00:97:
30:5f:2f:3d:3f:68:a5:cb:e9:98:76:67:39:1a:14:51:b1:8f:
bb:6d:99:7b:23:b3:2c:fe:85:1d:ae:d8:9e:89:9f:15:54:43:
b1:eb:b9:e6:e6:9e:be:04:3f:72:b2:0f:de:68:43:2b:38:47:
3c:4e:8f:f6:a5:3b:56:a9:0b:fc:fa:ff:f9:55:5c:0b:31:96:
d3:5b:da:24:98:16:63:26:98:f8:e2:04:8f:66:22:71:00:63:
66:90:ba:40:90:a6:50:79:3b:e3:7d:39:c4:d5:d7:6c:36:16:
e4:cc:04:d9:7c:bd:4d:1b:62:a1:57:f4:c9:2c:6b:64:59:fc:
c6:b3:a0:4d:85:f1:c3:4f:ea:58:c5:4e:e9:46:74:7e:92:ea:
d4:fc:e2:5b:e5:a0:ec:1e:c1:c9:5b:7a:1f:27:6f:01:fe:44:
fc:37:f4:b0:e2:c2:fa:a0:3b:ea:0c:55:57:73:cb:22:1a:69:
f9:7d:1e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:40 2026 by rpki-client