Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json)
Hash identifier: hs3QwcNwytnLKTsUTnFvv6w2JLKmn4AqWKOmUmP1n6I=
Subject key identifier: CA:C9:9F:31:A0:B9:FB:82:D8:C2:3C:88:02:CC:A6:4F:56:58:48:7C
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial: 019D2515EA1B22CFB3ECB5B378B32CA9991A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
Manifest number: 0222
Signing time: Wed 25 Mar 2026 13:01:26 +0000
Manifest this update: Wed 25 Mar 2026 13:01:26 +0000
Manifest next update: Thu 26 Mar 2026 13:01:26 +0000
Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: RUovz3odp7TQYg6YEj/Sca6tExv/I1qD79X3V0bP+NY=)
2: gFSyqMzduDiA854t0vAjekdq0Zw.asa (hash: Dfz1RNuUP2ZQSFWAImj3h5vywanLi9lBAQZshEdsMcs=)
3: mqyazNOfM1ZVPm3cOVRYyNHDwpA.roa (hash: C7VZbHKV6HPYsBlX1X4bgcS+0xR52AiRYn6dtHpeMwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:ea:1b:22:cf:b3:ec:b5:b3:78:b3:2c:a9:99:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Validity
Not Before: Mar 25 13:01:26 2026 GMT
Not After : Mar 26 13:01:26 2026 GMT
Subject: CN=cac99f31a0b9fb82d8c23c8802cca64f5658487c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:4c:6a:93:0d:03:91:e0:0e:f5:55:6e:4c:
3e:5f:5e:9f:8c:4c:ec:41:c0:70:22:f0:59:ed:6c:
28:4a:49:2b:cb:46:61:73:e7:8c:94:e8:fc:89:6d:
8f:89:f3:74:55:c5:54:1b:1f:7b:7c:62:63:e2:76:
bf:86:ba:37:88:8d:35:7f:55:12:56:ff:bb:53:af:
fa:72:77:be:14:53:31:df:57:b7:9f:97:e5:65:8b:
2f:cb:e4:00:eb:2f:0a:b1:60:16:84:9b:96:ac:c7:
c5:6a:6d:e0:2b:fc:07:f3:26:a9:6a:c3:83:75:84:
eb:51:33:3f:25:1a:36:ef:e9:61:41:0f:0f:dc:22:
23:6f:45:39:90:d5:f8:4c:48:05:51:27:67:06:19:
d3:d3:42:36:a3:cd:3c:0f:a7:14:a8:36:2a:04:11:
06:2e:fa:9f:1f:a3:4b:62:26:a4:fd:6b:a2:de:39:
a1:5f:d2:28:f7:59:74:6a:14:01:57:93:85:03:68:
81:b7:2f:ae:66:c4:de:df:89:1c:2c:e3:88:fc:07:
18:e6:cf:46:8d:47:a3:5c:37:91:6b:b5:91:f6:eb:
9b:98:40:75:c8:44:78:62:e6:1c:3e:c5:af:dd:ec:
5c:e9:77:0c:41:c3:ba:82:bb:d6:51:56:df:10:f6:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C9:9F:31:A0:B9:FB:82:D8:C2:3C:88:02:CC:A6:4F:56:58:48:7C
X509v3 Authority Key Identifier:
keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:61:29:eb:5d:30:54:f0:78:d1:60:24:73:52:77:73:42:14:
1f:4c:6c:bd:0d:29:52:c7:65:27:39:93:e2:cc:9c:bd:ad:29:
14:4d:28:6f:ff:ab:d2:85:1d:c9:ef:1c:10:25:b2:ec:f9:34:
e2:50:44:d2:2c:51:63:e0:f3:86:40:26:41:ae:47:69:c8:a1:
86:52:22:d0:af:9e:00:57:d2:0b:a4:d2:7d:53:76:a4:a5:ef:
35:6a:15:99:eb:c2:b9:4f:97:5c:88:8d:db:d9:73:ef:77:fb:
e9:e5:d0:3c:15:6e:79:a3:0e:77:dc:09:70:ce:8e:2a:b2:ba:
13:02:f8:1e:d8:6b:23:4d:16:f1:01:43:ab:bc:f4:a2:b4:e7:
ff:cd:37:01:e7:b9:98:e7:2a:36:ae:3f:6b:13:4d:51:d0:74:
73:92:9e:a5:79:d1:db:bf:9a:99:fa:ec:ff:f5:20:1e:54:c2:
18:cf:0a:05:a5:e2:e0:9e:1f:c5:c8:d1:be:8d:cf:ce:bb:0b:
ec:45:b7:17:36:6b:e9:8e:77:df:c0:bc:1a:38:90:f2:f2:7c:
e0:23:f2:40:c6:cc:67:46:26:77:73:5d:7c:c5:7d:ef:b0:78:
16:0f:f7:c5:bb:55:95:95:4e:b1:9e:d5:ec:e1:08:f5:71:41:
a5:d4:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:05 2026 by rpki-client