Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
File: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json)
Hash identifier: tMOKarhTheWJibjdp8JFEFK67fvvqTlFOu/YmufqBBA=
Subject key identifier: A0:5C:4C:2D:1A:B3:C9:4F:08:EB:21:AA:48:4E:FE:EE:23:BF:AE:2A
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 019D2A04ABCCAD3BF37913C35768A7B4C09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 12:00:42 +0000
Manifest this update: Thu 26 Mar 2026 12:00:42 +0000
Manifest next update: Fri 27 Mar 2026 12:00:42 +0000
Files and hashes: 1: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: 7uXqgV1h87o54WArl0SKjXMQ32tHVtuVEHjS8oIs5uE=)
2: PYWU_RF9KCEHExOcrGZnBOpnB-4.roa (hash: f0fVXG/hovvTJl8KzpzSKb0MupU8bmPJlIET0byULUM=)
3: _6hmu4GFNhmBqCCRqDNxKXY1fbk.roa (hash: FrvAixUNPJAiTcwGMH2vfi0uNBTHI7SiZ+ky1/2nJX4=)
4: m1AMEfz2rq9UYyTrv-YyIrpi3OE.roa (hash: Gy2fPWkA44bEyqmTq2kzpwyTOHR1dG7Fs+P1u7NBrmQ=)
5: zRYCcQ03Zo7Mtjwf5o0jfcWViDY.roa (hash: hObMfSwMh57HZlCx8OTlbluNMpET5Cy14GAtqwnhGDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:ab:cc:ad:3b:f3:79:13:c3:57:68:a7:b4:c0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: Mar 26 12:00:42 2026 GMT
Not After : Mar 27 12:00:42 2026 GMT
Subject: CN=a05c4c2d1ab3c94f08eb21aa484efeee23bfae2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:6a:55:48:4c:1b:0b:97:ef:19:89:35:28:
9c:08:03:db:6a:f8:cd:36:c9:17:f4:0e:ff:7c:87:
47:0f:37:fd:1b:36:a2:4e:7e:1a:55:4f:7b:19:22:
1d:a5:9f:76:78:a0:31:a0:18:37:ab:54:c1:8f:76:
1a:29:87:31:f3:3f:c7:bd:43:2e:be:f8:16:4a:5d:
16:f9:b5:74:24:3c:cf:a6:4c:08:01:1d:8a:8c:f2:
b2:83:ab:be:08:48:4f:3e:b0:30:ee:d7:88:83:07:
8a:55:bc:c2:4a:e0:5c:39:e7:ef:fd:30:28:18:7a:
25:90:14:37:e0:37:e7:b4:63:3c:ab:67:71:c0:cc:
e2:e7:93:d0:9c:91:52:b7:b3:f8:ec:5e:e6:71:b8:
4d:99:f2:c3:13:72:48:66:f7:59:d2:e9:fa:5e:25:
a4:80:78:e2:2f:71:74:e0:47:1e:8d:01:24:c3:5d:
28:44:cd:b9:7b:6e:99:10:68:48:11:14:4d:07:16:
1a:7f:a1:5c:5b:04:40:e3:22:b4:6e:ef:6a:74:04:
57:f8:37:3a:63:f1:a5:27:5a:67:36:35:db:9f:3c:
f2:76:90:ac:78:2c:db:72:63:6c:af:c4:4b:0e:76:
a3:35:89:b8:63:0a:a6:52:03:3a:77:2e:7f:e4:d1:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5C:4C:2D:1A:B3:C9:4F:08:EB:21:AA:48:4E:FE:EE:23:BF:AE:2A
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:71:f8:ad:ba:59:43:32:04:c3:84:8e:15:a8:8e:ad:ca:fe:
9d:2d:35:ca:5f:d8:74:3e:eb:2f:9b:d2:1a:7a:78:04:dd:a7:
55:89:b1:0e:89:a0:09:5a:2c:35:48:fa:83:8e:5a:50:f1:05:
04:d1:dc:63:a2:08:34:8b:42:43:80:a2:d4:a4:85:6e:fd:b0:
04:e0:3b:1a:8a:41:1f:85:2b:aa:cb:f3:d0:bf:34:76:bf:8e:
16:0c:43:25:1a:4b:c1:91:d1:23:23:ed:f5:e9:d5:3c:06:3b:
ca:3d:a9:d2:7b:49:5a:bc:94:b0:6c:a1:38:5f:34:a8:c5:d8:
43:95:dc:ec:6f:a3:ba:81:18:33:b6:4c:86:e3:73:8b:3f:82:
0d:1c:98:f9:fc:34:9c:4d:58:b0:0e:70:75:32:ea:cb:86:80:
14:a4:70:99:1d:d3:d1:25:92:4b:63:21:62:33:ed:55:21:08:
a0:4b:3d:93:ed:29:e5:3d:c9:14:7b:0b:43:de:5e:e6:82:5c:
0f:f9:81:87:a6:f1:ef:2e:be:fb:0a:49:a9:e9:87:14:68:17:
0b:ae:86:06:7c:4f:54:05:da:2d:a4:28:e7:98:32:d6:a6:02:
ba:9e:ff:bb:c5:d7:0c:e9:cb:87:78:16:5d:03:af:6d:56:b5:
b0:06:a8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:28 2026 by rpki-client