Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
File: r9I8xVrurzN-23Pq4ltZCXoneEw.mft (raw, json)
Hash identifier: +EwBTDkZYTC0JYP+hJBZ51WCotnWlPiyqEdJQiTqBFY=
Subject key identifier: 4B:9A:D7:19:F9:76:07:04:E8:68:49:E2:6E:6C:B6:64:B0:C0:E3:E7
Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
Certificate issuer: /CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Certificate serial: 019D2960D39422101BB83504B63908C2B563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 09:01:44 +0000
Manifest this update: Thu 26 Mar 2026 09:01:44 +0000
Manifest next update: Fri 27 Mar 2026 09:01:44 +0000
Files and hashes: 1: EgkLrTbqfCqKtc1_HO_4N3RqgDA.roa (hash: hSie2Ig7NXZ8GW1BlGvPkiht1lHg7Q/uBsfmB2XjW4k=)
2: r9I8xVrurzN-23Pq4ltZCXoneEw.crl (hash: zj+oyu7LCqioQ7ln8BKPqvTGvDBQpKXfBcZDHUW9Tpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d3:94:22:10:1b:b8:35:04:b6:39:08:c2:b5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Validity
Not Before: Mar 26 09:01:44 2026 GMT
Not After : Mar 27 09:01:44 2026 GMT
Subject: CN=4b9ad719f9760704e86849e26e6cb664b0c0e3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:b2:d7:d2:50:ca:9d:16:37:ab:30:9e:9a:
8e:18:3d:d3:fe:34:61:ed:07:91:83:fa:1c:37:49:
4b:a1:c8:1c:b5:ea:57:b5:8c:a9:fd:15:7a:72:7e:
4c:a1:90:d9:c6:08:6f:8d:89:9b:56:a6:3c:63:82:
18:32:75:ff:6a:12:44:30:00:b2:28:42:45:9c:ec:
9b:e5:56:99:d6:ed:68:cc:24:3b:36:1a:a9:62:80:
4a:0a:56:36:75:a2:37:40:54:d6:06:32:23:bf:93:
59:b1:1e:69:6e:4d:90:90:e9:f6:fa:7e:33:ca:14:
3b:b8:65:13:f5:6d:4d:c0:7e:78:b4:da:56:3f:3e:
a2:7d:fc:e3:78:5e:69:79:b9:c5:3c:ec:cf:bc:08:
cb:20:68:68:05:75:d7:e2:85:fd:26:bc:ca:b9:43:
82:c4:bf:17:d9:0c:f7:cd:d8:c7:c8:69:eb:44:e6:
e8:d3:38:4a:ad:63:a0:7f:17:99:99:25:3f:aa:d0:
aa:7a:b4:86:0b:a5:f8:73:a5:fe:76:e0:6b:ae:a0:
f1:cc:d4:8e:35:f6:9f:a7:10:9f:cb:a2:1e:a9:40:
ca:b9:4b:73:d0:06:37:8f:fb:9f:85:05:c0:9c:56:
2a:cf:87:35:8f:ee:c1:32:37:56:d8:0b:aa:7f:98:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9A:D7:19:F9:76:07:04:E8:68:49:E2:6E:6C:B6:64:B0:C0:E3:E7
X509v3 Authority Key Identifier:
keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c8:90:25:34:c1:d4:36:ac:9f:65:41:51:4b:cb:1d:0c:fc:
aa:01:df:31:ab:79:97:79:c1:68:4b:f5:54:1b:52:d3:ae:6f:
9a:63:a2:91:13:c3:ad:90:f7:81:8a:7e:44:d5:dd:41:a1:4c:
25:2b:44:e2:26:a8:1a:e1:14:36:c7:46:1b:d9:b3:a9:ba:a5:
bf:de:8c:f2:b1:64:1f:0f:7c:bd:47:67:d5:ee:21:95:6e:86:
27:a6:ac:88:7c:ca:dd:7a:b0:19:e5:38:ce:77:5c:69:b6:f9:
26:65:1f:4a:a3:70:be:42:70:68:b6:36:da:c6:fc:60:71:66:
14:2b:b7:61:95:58:2b:e2:bf:3f:dd:d9:92:83:16:d0:cf:cb:
bc:a8:38:d6:b3:3f:4d:61:52:ea:f3:7a:8f:4b:9b:58:7e:f3:
39:ef:c8:cd:bb:c2:a6:bc:84:25:98:38:41:56:f2:ce:81:ca:
70:84:cc:71:ac:0c:cb:aa:92:50:98:de:c4:f7:f3:fe:02:f2:
2b:d8:1c:69:bb:f3:9c:1b:fc:ff:c0:0a:1b:e8:1b:9e:ee:a0:
bb:4a:e7:29:5d:c5:a3:ea:e1:c3:af:85:1f:45:c5:d2:25:d8:
4e:51:05:a4:ef:b6:af:e2:94:b8:d6:ab:98:3f:a4:af:7a:eb:
3e:35:bb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:36:56 2026 by rpki-client