Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: SibAvf56LcEKm9jPpETn5iz/ry+wE/CSOafiiZQqQgc=
Subject key identifier: D1:E7:25:46:49:D8:FA:9D:8A:E8:62:96:C6:73:EF:64:3C:D6:F7:FF
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 019D26CCAFE86EE1869ECD598BBF0E36A487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 21:00:41 +0000
Manifest this update: Wed 25 Mar 2026 21:00:41 +0000
Manifest next update: Thu 26 Mar 2026 21:00:41 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: yvi2ZqyLqg9ZYWaMBCQoccXL2NdL1KXgk+GYY553lbI=)
2: IRtOc9xNuHtN4zmsWWnKZRqgKMs.roa (hash: jkPYQDPHDAj2YZTZO0wQGRdV29/MSC+GrpeiHVDq/M4=)
3: Jomyc4HWtnITYsIDG8BVeLdHId4.roa (hash: klQBrykZJDAdf4GMS1JWIpprMsc/7rY9pUPlh5dkvXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:af:e8:6e:e1:86:9e:cd:59:8b:bf:0e:36:a4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Mar 25 21:00:41 2026 GMT
Not After : Mar 26 21:00:41 2026 GMT
Subject: CN=d1e7254649d8fa9d8ae86296c673ef643cd6f7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:46:22:d8:4a:58:f0:c0:f6:c1:2c:71:56:
07:85:b1:9d:41:f6:ba:b0:22:78:b3:ba:ba:09:ca:
14:de:7b:86:7d:20:20:25:7f:a4:ac:68:3e:8e:05:
68:85:35:88:3c:52:c0:c1:d2:17:93:b8:69:2d:39:
d4:4b:e7:eb:f0:7f:e2:dc:11:0e:64:bd:b2:06:f9:
7a:31:44:3d:c6:d4:26:95:8e:94:13:83:e5:da:90:
55:90:c2:05:94:4e:e1:48:19:3b:4a:9d:02:88:19:
b0:a1:99:09:99:78:77:03:6f:32:a3:cd:64:8c:03:
29:36:84:51:b6:15:4f:7d:82:4b:68:e6:65:3b:65:
80:63:98:bc:c3:9d:70:9c:89:24:11:51:d2:bf:a9:
11:1f:fc:4e:fc:45:02:62:79:f5:4b:ac:6c:3f:3a:
fd:38:02:6b:d2:80:3c:f8:fe:81:5d:db:8f:d3:12:
c8:e5:f7:85:7d:7a:8e:ef:ed:23:50:bc:ea:08:fd:
fa:e0:ad:90:56:0a:ef:d8:cb:9d:e2:c9:06:cc:31:
c1:5b:c9:44:75:2f:c1:bd:fa:61:22:a9:0f:b8:ac:
5d:22:bf:97:75:f5:fd:63:40:08:81:56:c9:8b:a6:
6a:19:d5:3f:81:fc:5d:d6:78:24:2d:83:5b:60:4c:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E7:25:46:49:D8:FA:9D:8A:E8:62:96:C6:73:EF:64:3C:D6:F7:FF
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ae:28:04:5b:37:f2:ad:66:50:72:6f:37:88:44:16:42:bb:
65:fe:12:fd:1e:d5:4d:48:af:5e:34:df:17:66:1a:8b:fa:63:
01:98:f7:cf:19:65:0e:47:4a:94:fc:71:e3:0b:34:47:50:68:
47:05:82:5c:b5:7d:38:fb:77:db:f6:f0:ec:f5:f7:63:48:2d:
38:57:28:7d:d3:98:19:72:ad:79:88:9f:66:e1:da:dc:87:07:
99:b3:df:96:75:5a:da:ad:a7:5a:f5:8a:e7:47:28:06:f1:3c:
c1:28:bd:09:8b:b2:4d:67:77:46:96:3e:6a:11:59:7e:b2:88:
6f:d7:50:60:ee:39:1b:07:84:3c:31:a7:30:56:72:24:cd:e6:
a7:35:c5:6c:a3:2c:a6:07:92:e1:77:c9:c5:a1:91:05:77:d4:
f2:37:87:fd:81:d6:a5:c6:8a:d4:13:98:10:6c:e4:cb:27:0f:
0a:81:80:57:07:11:98:74:e7:59:3b:26:e4:21:85:e8:f3:e2:
e1:ce:15:8f:a4:78:65:48:3b:de:05:59:37:f8:0e:50:0d:92:
27:33:84:f9:7d:11:d0:1a:62:0f:91:8a:22:68:6b:02:ac:cc:
a6:e5:87:11:c6:b6:70:bd:7f:f3:d4:7d:35:e7:6e:d0:2a:7a:
d1:20:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:54 2026 by rpki-client