Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier: 7OprjUVlx3k9gPgmazCt06fFuGP3RM+BpuRBiSnWJuw=
Subject key identifier: C0:60:EC:A8:BF:B0:9E:FD:EE:04:FE:29:8B:BC:D7:9C:91:BC:4F:CC
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019D26CD1B49A67F3E48568947A93A13C205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number: 18B2
Signing time: Wed 25 Mar 2026 21:01:09 +0000
Manifest this update: Wed 25 Mar 2026 21:01:09 +0000
Manifest next update: Thu 26 Mar 2026 21:01:09 +0000
Files and hashes: 1: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: GE0kQpqT60p4BhT7riEhjL1XlIVC0Lc8SyfAOHnNfQ4=)
2: 9T5HxPAk6GRZfVjyQisSJLW6HMQ.roa (hash: knO4Gk2h5gl6DIilBrsY3DO4/TsFIejRcQFsRNg8tUk=)
3: DVhhYEUtlGY-o7FWTsaEjCsuSfM.roa (hash: 3BdDvo6VSykP4vfXUdkCcVvQTTeKHnDzmOoaSk9BBMM=)
4: GaY0PBVBeo4KpiNFKZ9BeK4puOg.roa (hash: kSV2htK/TB9FGgHOzLvBWeHTLFTLf67Ynu1IuSCMkQQ=)
5: a5hCb5Cdai95FYR9YFoqO1Kg0gU.roa (hash: kx49KQ5uWwvHf8W3SxasVESt8hk4w/HfpOwNe/XbefY=)
6: anxwGT_hdXpk7cbEV0EpXEFDWqA.roa (hash: 8r+8KS8jGQEq5fnlkaNPMhStA1hIa0zPj5xBUeOCXTw=)
7: mhe7ueS03W2XSdgcfakYwSroXsA.roa (hash: ldAOnBa8GgZlBCGXaADvQnAefafOoOly2oTch4zw0Po=)
8: u6zwrz1fIMPIG6Fq4E3yGzATiH0.roa (hash: WU20DcSmscAh/PhHLfFRUUagNsUT2dCDLJJdqOdtdKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:1b:49:a6:7f:3e:48:56:89:47:a9:3a:13:c2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Mar 25 21:01:09 2026 GMT
Not After : Mar 26 21:01:09 2026 GMT
Subject: CN=c060eca8bfb09efdee04fe298bbcd79c91bc4fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:76:22:3b:0a:59:15:f2:a4:7f:c8:9c:2a:
e2:d1:93:2a:df:16:6f:85:71:f2:28:1f:0d:01:be:
ed:a0:2f:3a:5b:d4:7f:8a:4e:62:1b:12:98:d7:55:
b2:1b:fd:fd:0a:4a:dd:31:bc:3d:b7:96:00:ec:a2:
cd:75:8c:b7:7c:e8:01:4e:21:a8:3e:ff:c6:9e:ae:
bc:c8:aa:d8:0d:48:09:f4:85:bf:79:88:e4:a2:e8:
2d:84:40:3b:af:94:d8:5d:17:2e:2a:36:e3:b6:43:
99:b4:78:80:f8:e4:76:84:46:9b:3e:d4:43:85:b9:
0c:39:d0:5e:bb:2f:30:21:3a:9a:76:82:20:7f:2c:
ce:ea:a3:dc:6a:29:d8:bc:37:84:42:30:70:d8:d3:
7f:46:ca:08:75:1e:a5:f8:57:1c:fa:71:70:1c:23:
19:46:04:f4:09:b7:51:52:08:11:4c:3a:ac:bc:45:
3a:c8:45:69:31:be:2d:8d:e8:17:85:e1:e9:f3:c3:
e8:2d:0f:27:21:8a:df:d0:0a:18:62:fa:1f:24:57:
a3:a2:c2:e1:5a:9b:ca:2d:ca:9f:28:2c:ed:48:25:
fc:e5:6b:92:40:c0:29:61:b5:e9:ec:db:f4:6d:17:
30:27:99:09:8e:7d:04:fd:dc:f0:98:86:5b:a4:5c:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:60:EC:A8:BF:B0:9E:FD:EE:04:FE:29:8B:BC:D7:9C:91:BC:4F:CC
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a5:af:7e:3e:d1:a3:2f:c4:97:35:f8:2e:bb:34:1b:c3:19:
7f:97:d1:bc:ec:d6:68:e8:47:2c:31:7b:07:a8:d8:73:57:bd:
38:77:b6:56:14:ad:5b:6a:ef:db:7f:67:72:8e:fa:94:27:db:
e9:df:9b:4f:d3:48:ea:de:52:57:28:8c:14:58:cf:68:76:cb:
57:51:3d:95:bb:78:f3:fb:f1:e7:be:89:d6:48:e4:67:56:43:
ad:60:06:a2:1c:ae:a3:8c:5b:76:bc:dc:f1:be:1c:d8:75:4a:
6a:60:e8:38:39:a6:33:73:5a:2a:d2:3a:26:a8:80:77:c1:5f:
b1:82:d2:a2:ab:9a:98:fc:94:72:f1:bc:c4:b4:5b:1a:2c:df:
07:f2:e4:5e:9e:56:79:c2:0d:24:1a:f5:2b:d2:26:51:fb:99:
0b:8b:d8:2b:34:34:62:21:9f:4c:08:ba:89:79:a2:b6:bd:3e:
cf:bb:f1:64:67:80:bb:f5:eb:e9:82:0d:4b:05:e7:f7:45:00:
0f:b5:a6:71:de:c2:dd:ad:fe:2f:63:2f:da:d3:5d:37:09:37:
53:01:ed:c8:65:de:37:b1:f2:23:ef:85:9d:ca:ad:7f:f1:cb:
3a:c6:af:57:f9:1d:91:70:ad:05:62:b0:42:b3:4f:73:51:f9:
f3:75:23:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:14 2026 by rpki-client