Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File: 9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier: Gfj1XrIkvH0z+81/eH9jI7KWh0HZlTQ0mV6aV0izBLA=
Subject key identifier: 66:0F:28:F4:CE:0A:03:B5:61:A4:A3:7C:BC:81:F7:99:47:A1:84:90
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer: /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial: 019D25F16EC9B1396C5219CE216DC2999B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number: 059F
Signing time: Wed 25 Mar 2026 17:01:12 +0000
Manifest this update: Wed 25 Mar 2026 17:01:12 +0000
Manifest next update: Thu 26 Mar 2026 17:01:12 +0000
Files and hashes: 1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: P1LI/UjAb2Mt9muvo05aYL+pkSIA0BQkujmktk0EICA=)
2: Fnxy3WJWYvuek9Fr0KYOmQUUsw4.roa (hash: Ch+0FQEjljg05e4GEw4ZsydId/PhinfJoSdNkBFbTQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:6e:c9:b1:39:6c:52:19:ce:21:6d:c2:99:9b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Validity
Not Before: Mar 25 17:01:12 2026 GMT
Not After : Mar 26 17:01:12 2026 GMT
Subject: CN=660f28f4ce0a03b561a4a37cbc81f79947a18490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:e4:d5:2b:0d:54:b9:40:96:e6:32:47:30:
b3:ad:e1:a4:04:3d:e9:36:1e:d9:3a:cd:95:f9:55:
bc:f5:7c:e3:f3:a7:2e:bc:27:29:bb:56:ec:f7:47:
e5:bd:8f:23:ee:40:90:64:fe:6a:f5:c7:87:39:14:
5f:68:a2:d0:bf:75:e4:12:a7:84:26:41:9b:f7:71:
c7:3f:42:24:71:31:db:36:86:6e:e0:8b:65:4d:d4:
59:39:82:6f:b9:74:17:68:8a:75:4f:09:c6:f0:ed:
62:86:6c:c2:c6:1f:8c:64:4c:7f:93:13:32:38:a5:
7c:01:8b:0a:87:0d:e3:17:62:fd:b8:e6:bd:e3:9e:
bc:9c:de:c1:5c:0f:66:f7:f5:0b:b9:db:90:e2:e6:
83:5e:bd:5a:49:4f:84:73:53:17:37:9a:09:ae:81:
78:21:40:4f:84:c8:73:f3:7f:d7:fc:bc:7e:cb:9b:
69:64:e7:8d:0f:e5:99:63:63:53:e9:94:23:82:73:
b7:bc:ad:8f:22:de:ae:68:47:7e:09:df:4b:7c:15:
2f:2c:23:e2:23:cc:c7:09:06:a3:81:e2:43:93:04:
b3:53:ed:3b:54:a2:7b:cf:34:39:88:b9:1d:82:bd:
f7:4c:b8:80:ec:e3:5f:36:ba:b3:da:fe:2a:ea:6d:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:28:F4:CE:0A:03:B5:61:A4:A3:7C:BC:81:F7:99:47:A1:84:90
X509v3 Authority Key Identifier:
keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:05:58:f7:66:ae:c6:da:f9:ef:a5:9a:96:4e:0a:34:ff:6e:
6a:c0:3a:55:46:90:f7:61:5a:83:21:50:ed:19:91:05:03:7f:
bc:88:f9:02:a2:10:39:40:23:e2:97:47:1e:3c:a8:da:db:f7:
9c:fc:b8:b2:43:bb:71:93:02:80:ed:35:c1:1f:26:01:2e:1e:
d9:59:2e:db:a8:4a:e0:5f:7d:31:0a:04:fa:ba:2f:c8:e8:91:
2e:22:42:6d:cf:13:2e:b6:f9:93:44:39:35:8c:aa:00:12:db:
3e:e5:f8:88:34:88:03:50:43:5d:f6:7c:2a:92:65:bb:d8:1d:
0a:27:d8:5a:bf:b1:c8:62:33:38:8e:71:28:de:79:29:0c:63:
30:c3:57:94:fd:b8:a6:27:76:ba:e7:ad:8c:f2:a4:c7:ae:26:
8f:9c:de:88:e8:34:ae:fe:a9:df:1d:2d:23:78:99:8c:ba:8d:
66:42:a7:87:45:ff:fe:98:d2:a4:73:5a:2a:27:f3:b6:f0:39:
b6:e7:7e:d5:2a:32:88:b7:d3:5d:7c:1f:c0:8c:b1:e3:3f:ec:
65:2b:cd:df:19:5c:5c:60:99:3f:d8:e8:43:23:99:48:93:eb:
94:08:7e:e8:b7:85:8b:0a:a6:f4:27:e4:03:19:3f:61:d1:38:
83:17:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:18 2026 by rpki-client