Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft
File: r9WY8p3VxWKY8usFdd4n_DuiCVE.mft (raw, json)
Hash identifier: JTsglr4e8Ve4UenWSu0Md0uaRqXIyjaez9CI9KfXTTI=
Subject key identifier: 13:00:BB:68:BA:04:F7:14:F5:82:FF:CD:6E:57:E1:53:7B:EA:4D:73
Authority key identifier: AF:D5:98:F2:9D:D5:C5:62:98:F2:EB:05:75:DE:27:FC:3B:A2:09:51
Certificate issuer: /CN=afd598f29dd5c56298f2eb0575de27fc3ba20951
Certificate serial: 019D329B006722B2ACFBEA20B25B44B98E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft
Manifest number: 0116
Signing time: Sat 28 Mar 2026 04:01:52 +0000
Manifest this update: Sat 28 Mar 2026 04:01:52 +0000
Manifest next update: Sun 29 Mar 2026 04:01:52 +0000
Files and hashes: 1: UJZgLa4q8XxSNPVAzvfqpj2hFmo.roa (hash: HHsZAHqUxdIIWKa7mlGz2y9bB1VZgvrrNvACwY4d8qo=)
2: r9WY8p3VxWKY8usFdd4n_DuiCVE.crl (hash: 918bL/zzPaXEgPWnsEfMMf/ndsW3N6HE0vShcOwNlLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9b:00:67:22:b2:ac:fb:ea:20:b2:5b:44:b9:8e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd598f29dd5c56298f2eb0575de27fc3ba20951
Validity
Not Before: Mar 28 04:01:52 2026 GMT
Not After : Mar 29 04:01:52 2026 GMT
Subject: CN=1300bb68ba04f714f582ffcd6e57e1537bea4d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:08:7a:40:74:8f:a0:1e:a0:3e:85:fe:89:
a9:2a:88:a0:3a:b3:0d:be:10:a1:9e:a8:56:ba:77:
e0:3c:58:95:c9:8d:66:fc:14:d4:75:41:87:32:88:
f8:38:a3:64:79:b0:ed:5d:01:39:17:46:5f:d7:ad:
73:40:af:b9:f1:c1:da:09:00:b7:48:f5:ab:63:3f:
86:5f:64:fa:d2:5d:06:1a:07:1b:a4:29:12:98:93:
53:10:5f:1f:d9:cc:e3:73:9e:d5:13:5a:80:ad:71:
9f:0d:61:77:2f:d4:66:54:e3:c2:bb:3b:92:b3:95:
81:c8:d3:9f:58:2c:d6:43:99:65:24:57:d4:18:59:
f5:e6:f8:34:63:9f:d4:28:b2:73:a7:ee:b9:06:a2:
99:68:01:38:ac:21:25:01:5c:4b:0a:d0:91:78:9c:
1a:9e:04:b8:d1:68:0e:a5:68:89:fe:36:09:01:cd:
65:cb:37:48:ff:aa:7a:45:c6:4f:7f:6d:a2:c9:30:
e3:aa:e9:1f:a0:77:7f:b5:f6:6e:df:f7:7b:f6:c7:
16:b7:08:cb:3e:58:2c:dc:67:0a:3a:2b:48:ed:69:
c4:a4:6f:7f:62:4c:d5:b1:77:56:4d:66:ea:05:e6:
12:2c:94:9b:15:5f:55:7a:9e:e5:34:5c:3a:e9:ce:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:00:BB:68:BA:04:F7:14:F5:82:FF:CD:6E:57:E1:53:7B:EA:4D:73
X509v3 Authority Key Identifier:
keyid:AF:D5:98:F2:9D:D5:C5:62:98:F2:EB:05:75:DE:27:FC:3B:A2:09:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:9f:0d:86:ca:0c:80:a3:20:fe:4e:fe:10:28:1d:35:08:36:
a0:55:1c:1b:68:98:54:a2:7c:76:4f:56:e9:5a:e5:05:21:ed:
39:38:03:84:46:1a:22:17:af:40:5e:b5:67:d4:08:42:b4:4a:
ed:4a:2a:d6:3b:b3:9e:32:1b:73:05:fc:cf:eb:85:ed:43:c7:
17:2a:60:08:96:f2:24:42:6f:92:7c:a6:c8:40:c2:5e:61:5d:
83:68:19:4c:2c:b4:d5:44:54:7f:21:d6:b2:f9:c2:49:ae:ce:
62:a3:f4:95:89:33:66:5c:b6:e6:aa:c9:63:6d:c8:c2:98:8e:
bb:63:07:a9:1c:4a:c6:39:ea:bb:f1:d0:32:51:df:34:de:64:
f1:59:92:59:e1:3a:21:e0:70:b8:56:49:ca:86:7e:e8:b8:e4:
f8:93:d9:7f:67:15:3b:04:e5:c4:97:e0:f3:7b:80:d7:e4:fb:
66:f1:cb:f7:de:90:fe:50:d9:24:a8:bb:08:41:d2:41:c0:30:
0a:3e:3b:67:19:cd:43:31:66:17:57:ad:79:f5:45:1f:f2:61:
86:33:ef:61:e0:78:6e:21:45:6b:94:a6:88:c0:d8:e9:17:c2:
7a:be:9e:45:a1:f2:70:7d:24:7a:4f:08:7e:36:98:11:fe:92:
93:8b:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:50 2026 by rpki-client