Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: A7UVWezmKA2fmQ6nMZ2v+XielC+MhJlieJZNF0SBHOI=
Subject key identifier: B8:02:1A:E4:8E:BA:04:0E:83:D3:FB:74:D7:EA:C4:7C:87:94:3B:89
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 019D27DFF532111F41A070F976F743E36B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 1870
Signing time: Thu 26 Mar 2026 02:01:21 +0000
Manifest this update: Thu 26 Mar 2026 02:01:21 +0000
Manifest next update: Fri 27 Mar 2026 02:01:21 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: Tzh+zxqDoYk9d3aM9Q5QCf7/pIKPkF2U6THoB1NLUQ4=)
2: T9rz93pJrKV5HZUDPNt-auvowcY.roa (hash: Y2TAvhfs7O4nAyyTTSyBt46eHZbCQZ13ePvrQ4ueMNo=)
3: rtoaF4eNoCfBlVaGIH3lILCxwDw.roa (hash: uP2Cltj1neggz9Zc7r+kubVviQuOHIeAbOo973WtReI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f5:32:11:1f:41:a0:70:f9:76:f7:43:e3:6b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Mar 26 02:01:21 2026 GMT
Not After : Mar 27 02:01:21 2026 GMT
Subject: CN=b8021ae48eba040e83d3fb74d7eac47c87943b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:69:d9:d8:65:e6:c4:4c:c4:08:9a:1a:00:
11:1b:52:38:c6:6a:b8:32:99:40:8b:9a:f6:e5:47:
7f:b4:14:57:82:2a:9d:29:d1:ab:98:b0:2e:1d:f3:
19:a8:42:cf:4c:ad:ea:40:3d:a3:0c:8d:5c:29:dc:
ae:77:0d:2b:3e:74:e4:dd:b0:ba:88:6f:fb:1f:46:
77:ed:50:85:67:ee:e5:a5:f3:b5:76:8d:49:38:25:
08:9e:e4:c9:67:88:45:a9:f1:25:4e:bb:d5:e0:df:
c4:81:0f:1a:e2:6e:09:bb:94:e1:3a:72:50:8e:53:
5b:58:bf:c0:fa:7a:5f:70:bb:59:26:d4:75:0e:14:
f1:5a:be:42:1b:41:3e:90:f1:b7:4e:b9:eb:fc:d3:
0e:2e:d7:b6:e3:b6:81:a1:ae:c7:96:da:da:7e:10:
2a:38:54:3f:56:17:26:f5:96:9c:0b:78:1c:34:3f:
eb:1e:2d:1c:53:3a:81:65:fb:42:02:4d:33:3c:05:
34:2a:8e:9c:46:18:7a:cc:6d:f4:d0:6e:73:86:58:
48:60:5b:88:c3:25:8f:33:a6:a3:81:c9:ab:35:b8:
d9:0d:66:bd:c4:9a:42:e2:74:86:72:2b:66:d2:75:
9c:e4:77:af:98:3e:bf:2c:fe:63:02:d3:50:f7:5b:
41:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:1A:E4:8E:BA:04:0E:83:D3:FB:74:D7:EA:C4:7C:87:94:3B:89
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:94:19:3a:2b:1d:ec:2c:e5:c1:22:cc:a2:fd:7b:b3:9f:ec:
63:c4:7c:ae:9a:2d:35:2f:29:34:e0:b3:d8:77:14:4b:c4:ed:
1a:76:aa:c0:72:98:2e:9e:1e:13:62:f3:ba:85:7c:dc:85:12:
f9:4c:05:b0:0a:51:d4:ca:89:04:e7:c4:cc:1e:86:eb:5f:70:
e2:ba:da:a6:8b:f9:26:24:be:99:35:0e:44:b5:ef:8a:94:ed:
b7:8f:79:f8:b9:49:cc:45:56:4d:a8:b6:91:e5:43:5e:ab:c6:
6f:07:0e:70:ab:19:23:35:c6:ff:0b:02:3a:f6:2f:6d:64:20:
1c:52:d8:e0:8a:40:5d:11:a3:30:b9:53:88:aa:f6:be:e1:60:
d2:73:45:d4:52:56:d3:27:4e:5c:77:e5:24:27:e5:80:46:0b:
fa:7c:91:d4:49:fa:04:9c:ad:04:60:60:58:20:a2:27:b9:97:
6c:1c:45:1d:27:ef:73:b3:84:df:2a:4f:57:c4:e7:f6:8c:b5:
97:13:47:91:35:1f:05:94:63:2d:45:ac:6e:04:7f:76:94:96:
2e:b1:78:d3:25:8e:aa:7c:42:7e:dd:04:89:ec:6c:85:ce:f2:
0b:01:b3:79:00:64:af:99:06:91:60:e5:5b:ca:46:cf:26:9d:
a3:90:ae:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:19:18 2026 by rpki-client