Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: A5MenB+bPyv52Xs2Q2HsAmg7IL7Nz9KzJj5WyAjlFA8=
Subject key identifier: 6A:9C:B9:41:D7:02:1F:A4:97:9C:8D:E1:E1:E5:5F:3C:CB:A9:F3:FD
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 019D27DFDD71210919BCC133DC96BEE73E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 083E
Signing time: Thu 26 Mar 2026 02:01:15 +0000
Manifest this update: Thu 26 Mar 2026 02:01:15 +0000
Manifest next update: Fri 27 Mar 2026 02:01:15 +0000
Files and hashes: 1: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: lV7I5F+M2f2XfrUK8d4wGllwukwZoR0DTP9fNbtkuTQ=)
2: Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa (hash: llVgeSirYRMnxHxg+jow3ZLNY2RJpGEBaB4uInwuLpg=)
3: q7LASc7RAdvhKI2lD0l4EEgjIM4.roa (hash: Nr2UUQFi//KxEpaf+hC6t8vMKhEd7i+ElopwPR5ej6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:dd:71:21:09:19:bc:c1:33:dc:96:be:e7:3e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Mar 26 02:01:15 2026 GMT
Not After : Mar 27 02:01:15 2026 GMT
Subject: CN=6a9cb941d7021fa4979c8de1e1e55f3ccba9f3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:e4:f5:4d:0f:68:e8:d3:45:19:e5:5b:64:
99:69:7c:73:02:f7:9a:56:10:bc:45:59:12:d0:2f:
fe:f9:18:3c:18:7c:83:9e:47:12:5e:45:68:65:69:
b3:b0:b0:a3:06:4e:62:7f:96:74:7b:80:b9:35:f0:
04:bd:fd:42:2f:2a:01:e3:89:01:96:34:db:8e:22:
3c:63:b9:45:5c:44:5a:57:87:df:ae:8a:92:9b:ba:
e5:9d:1d:90:a6:bd:c0:1f:a7:12:ef:ea:8f:69:b5:
1b:f7:2a:dd:3c:32:d6:71:8b:fc:04:c6:4f:3e:45:
ba:96:5c:01:72:42:c6:eb:22:d3:3d:38:89:57:de:
42:58:ee:3a:d2:a9:8b:0a:6c:59:52:cc:75:12:ef:
99:27:a5:ca:48:7e:5a:0f:b0:db:67:0b:9b:8a:2f:
68:d8:f3:e9:c4:7b:0b:c4:07:a4:f7:d6:fc:cb:ae:
60:60:d8:20:a3:c4:2f:29:6e:77:94:3f:3b:49:d7:
68:59:83:23:47:28:e8:31:34:f4:ab:fb:8c:0a:65:
b6:41:c8:ae:dd:e1:08:36:db:ae:96:59:dc:9a:80:
bd:a7:52:a5:06:28:4b:a0:17:37:aa:7f:61:01:a3:
da:1a:a2:79:a0:0d:09:98:a5:f2:27:e8:04:0d:23:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9C:B9:41:D7:02:1F:A4:97:9C:8D:E1:E1:E5:5F:3C:CB:A9:F3:FD
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c1:f1:c7:61:01:58:f3:65:08:df:ad:e1:b2:01:1f:a4:1d:
a4:a4:5b:f4:ca:cb:91:e8:dd:53:49:3d:33:85:6b:0e:17:26:
f4:b7:57:95:eb:9e:9b:c9:f3:15:c0:e8:f9:7c:3c:e2:b1:0f:
b7:52:30:1d:c4:b6:26:44:1e:a5:c0:4b:7d:26:9d:8c:e3:83:
2e:4d:c2:7c:7b:49:a1:b3:6e:d5:5b:ed:52:ba:25:2b:6d:1a:
d5:75:c8:a3:89:ca:e6:30:8f:07:a6:f8:57:47:84:4f:f4:1c:
8c:fc:78:56:f5:1a:a0:b4:fc:ec:93:0c:3e:bb:6d:c2:12:21:
ea:aa:6c:4f:5e:d6:74:e1:4b:b0:59:8b:49:e0:33:aa:bb:49:
3f:dc:96:f0:c2:8f:f9:65:93:38:56:02:0d:73:9e:81:81:3a:
18:51:a4:35:82:82:c0:f7:06:5d:63:8d:45:a6:b7:f3:c8:64:
fc:7a:7a:1b:5e:c3:55:2e:fc:b5:2d:61:24:c8:11:7f:74:6e:
1c:1d:1f:1c:c0:61:ea:ef:ba:bd:94:9f:a6:b0:c3:cb:05:f1:
8d:8a:e2:26:46:5d:ba:42:1d:de:65:15:6b:9a:84:9d:3b:1b:
19:b1:f7:42:b6:dd:32:3d:4b:c0:57:3d:f8:46:93:92:7c:d0:
04:f4:2f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:32 2026 by rpki-client