Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
File: 9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json)
Hash identifier: wOsbaQ10IQUAmM+NdI2Awljjw8XkhNmg9wUPFHxuZNw=
Subject key identifier: 84:90:B3:86:E3:A0:9E:0F:00:69:5F:94:DD:54:80:F8:CA:01:67:59
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Certificate issuer: /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial: 019D27A90BCF12FBCFA4E3851B36750D0AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
Manifest number: 135E
Signing time: Thu 26 Mar 2026 01:01:23 +0000
Manifest this update: Thu 26 Mar 2026 01:01:23 +0000
Manifest next update: Fri 27 Mar 2026 01:01:23 +0000
Files and hashes: 1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: IAmGKYmc++YKzz/Wv+6XfW0VvPe1oh6PTkVmm2/ufus=)
2: ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa (hash: /54TVaQGpWQlA0th+KPLCMlkXLtNsFvetSrJmgBZFMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0b:cf:12:fb:cf:a4:e3:85:1b:36:75:0d:0a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Validity
Not Before: Mar 26 01:01:23 2026 GMT
Not After : Mar 27 01:01:23 2026 GMT
Subject: CN=8490b386e3a09e0f00695f94dd5480f8ca016759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:da:5a:10:09:6d:19:23:a1:97:5e:70:3d:
87:78:31:2c:30:d1:1f:91:aa:8e:f0:09:e9:e3:24:
81:ad:e1:6a:a9:5a:f0:0a:0b:d6:6d:93:64:ae:15:
bc:fb:ca:b7:ba:c7:a1:fd:80:cb:48:87:56:81:aa:
89:e2:5d:00:4c:ed:56:7a:9c:53:72:96:4f:52:5c:
49:78:d6:6b:6d:0a:02:5b:c5:39:19:ea:97:95:36:
38:d9:1c:29:29:45:57:b1:b7:4d:85:75:66:93:b8:
b3:79:e0:d0:5a:09:2b:ce:96:a5:84:1e:e6:05:6e:
68:b2:26:a1:e6:76:90:02:af:63:cb:be:f7:af:0a:
9b:4e:17:c6:e9:86:77:b4:39:5c:29:76:8a:c6:f0:
d1:f1:ce:e9:80:15:32:dd:b6:ab:2a:97:2e:83:f6:
5f:a3:3d:2e:97:b3:45:30:b0:62:dd:20:c8:ea:a6:
4c:4f:6c:bc:4d:b8:bc:03:60:c4:ab:2e:94:8d:9b:
66:ef:30:db:d7:2d:d5:0e:34:c2:78:13:0d:05:22:
8c:79:f3:88:48:12:b0:c8:e0:50:be:c1:bb:3a:e8:
ee:c1:03:69:ee:0a:bd:e6:7e:62:72:e8:5b:6a:cf:
18:47:83:f1:97:c6:83:86:77:a2:be:ad:13:5a:4b:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:90:B3:86:E3:A0:9E:0F:00:69:5F:94:DD:54:80:F8:CA:01:67:59
X509v3 Authority Key Identifier:
keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:30:a1:78:1f:7e:08:b9:27:6e:3e:2a:bc:1a:e5:6a:d7:8c:
ca:28:bf:08:da:72:62:03:1f:f2:07:c8:0f:7e:dc:e0:ec:81:
7f:60:df:ee:8c:10:25:c0:9b:ea:91:07:94:f1:ff:0e:e6:1d:
d1:8e:db:5c:cd:33:5f:d4:2e:ba:1d:ed:1d:da:da:2f:7b:c8:
b7:0b:0d:95:d6:5d:c7:3b:bb:0a:87:1b:12:8a:9e:4a:32:c0:
22:6b:a4:2f:01:10:fc:6b:6b:ca:51:c6:17:35:9f:07:6f:6c:
21:b4:09:81:c5:45:87:ae:ce:2f:02:d8:50:aa:a3:c6:3f:b6:
fe:9e:c0:11:0c:0e:bc:d4:09:be:66:eb:1e:5d:c2:97:5b:69:
71:7e:5d:6c:05:ec:e0:7b:cd:dc:20:34:e2:b4:85:a0:ce:76:
89:06:07:21:78:1c:e1:e9:09:f1:f1:2c:31:2e:0d:1c:f4:f3:
45:4f:78:7a:d5:a9:f0:b4:60:9c:34:21:6c:cf:ed:be:44:77:
cc:9d:36:5e:99:63:5d:69:6d:be:4e:64:8c:e7:26:25:20:fe:
0e:e7:94:de:46:37:9f:d6:4d:aa:28:a7:0c:8b:5b:b3:8c:70:
66:f9:79:87:85:cb:e8:d1:6d:00:9b:26:5c:31:77:a4:ef:24:
c1:8d:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:42 2026 by rpki-client