Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: mjbycS3/cceUZP+g/iQWn3K7sXCRfKExG8FPoMpWA2g=
Subject key identifier: EA:16:8C:0E:0B:3A:1A:81:BB:40:CB:26:C2:51:DD:5B:73:DC:66:0B
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 019D28BBA9AD781EE1C9A6248E0BE73F9687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 11EB
Signing time: Thu 26 Mar 2026 06:01:20 +0000
Manifest this update: Thu 26 Mar 2026 06:01:20 +0000
Manifest next update: Fri 27 Mar 2026 06:01:20 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: oE+HfTqkUJT/Yx0fVV6ZbT77gOczSTIn7LTWc9LF7q0=)
2: vybKFSnUUtCvuNDjBmPdlEc4moI.roa (hash: NvnlzgrButbUBUuTuJIYrEkvgNvaHTxK68ujFnkuVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a9:ad:78:1e:e1:c9:a6:24:8e:0b:e7:3f:96:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Mar 26 06:01:20 2026 GMT
Not After : Mar 27 06:01:20 2026 GMT
Subject: CN=ea168c0e0b3a1a81bb40cb26c251dd5b73dc660b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:8b:60:45:e2:68:56:ff:d8:a2:92:72:3a:
df:99:ea:b4:38:0c:cf:25:d6:35:db:0e:56:7b:ff:
f0:99:0d:dd:58:73:a6:80:15:25:67:84:c6:3a:81:
18:93:61:9b:bb:89:51:d5:ad:33:0c:1c:23:4f:23:
f3:f2:05:da:ee:c5:77:b5:5f:06:f1:e1:18:e4:6b:
de:f3:35:b0:91:11:9c:c5:1b:c9:1e:5d:d1:06:51:
6e:24:34:a8:be:66:8f:75:fb:66:74:f9:7c:2c:8e:
35:be:b2:45:96:60:11:9c:38:a0:51:f6:fe:a5:31:
88:1c:31:4b:d8:96:2c:fa:03:ca:65:b5:8d:10:e8:
b4:26:07:96:ed:67:39:5c:d8:fc:5c:48:96:21:6b:
85:52:4d:d9:13:22:75:a1:ad:bf:bc:4e:61:93:ef:
2b:70:09:f2:62:31:47:e9:6b:7d:c4:fb:7e:16:db:
24:e4:6b:f6:65:ae:97:0c:3e:f1:71:4c:d4:13:f1:
cf:06:2f:3b:86:67:a6:d2:46:a6:29:01:21:03:87:
1e:f5:50:f4:a0:7b:ae:22:ff:46:bb:6e:13:d4:ee:
f6:35:c7:36:a2:57:34:c7:29:50:9b:3f:63:fa:3e:
5e:40:e0:1a:f2:b2:c7:01:85:23:2d:a6:bc:73:7c:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:16:8C:0E:0B:3A:1A:81:BB:40:CB:26:C2:51:DD:5B:73:DC:66:0B
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a6:c8:a0:b4:9b:b3:51:65:0d:ae:eb:eb:0e:48:ff:71:ff:
a9:af:e5:21:4c:79:18:42:47:5c:4a:32:92:02:13:44:dd:cf:
33:ed:54:96:7d:0c:85:84:e1:b1:4b:20:22:f2:97:a0:c1:35:
eb:63:98:7a:8e:af:ac:3a:72:e6:b4:42:90:dd:ab:72:4e:1f:
ba:2a:81:9d:be:80:3b:f7:c3:82:85:64:0f:88:93:9e:f1:9c:
01:2c:dd:fb:ab:6c:38:9f:a0:ff:1b:6a:96:91:e2:dc:b7:37:
32:16:47:ca:58:61:04:ae:c7:ce:dd:5a:06:ed:af:1b:74:d7:
cf:91:d7:d0:d7:7b:e6:ce:ea:5f:6e:c0:4c:f5:22:2e:84:c3:
0a:f3:71:1a:29:6d:a4:c8:19:35:53:09:68:e6:7d:e5:6a:87:
53:38:bf:b4:0a:2b:0b:60:c2:04:e4:29:2d:aa:6b:a4:f3:97:
10:ea:13:33:5b:c6:3d:fd:93:98:ae:46:a2:50:dd:f2:e6:67:
4d:49:f0:8e:d7:26:d1:3d:fe:2f:f0:32:25:1c:10:60:d4:00:
a7:7f:fa:14:20:9f:62:bb:d8:70:49:74:8d:8b:33:79:82:6a:
5c:22:ac:2e:52:c5:cd:50:ce:01:8e:7e:83:cf:8d:12:7c:16:
4c:62:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:22:58 2026 by rpki-client