Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
File: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft (raw, json)
Hash identifier: wkJXGRcY52O386CUFRhj38wGtBxb5zR+RBKS6DzqxWw=
Subject key identifier: 5A:D6:0E:95:EF:F9:82:39:68:95:82:02:E0:98:13:AC:AF:54:F6:3C
Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Certificate serial: 019D2628095F12DB098304333514F12B3553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:00:51 +0000
Manifest this update: Wed 25 Mar 2026 18:00:51 +0000
Manifest next update: Thu 26 Mar 2026 18:00:51 +0000
Files and hashes: 1: apX_x1EULE6OQInOykLn4fvDEsM.roa (hash: Wg0gBA9FtZ5MGhtWvzfiZrQJ2iSQBvq5YHTLEMZVAk4=)
2: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl (hash: Xawjyk3jtEB/NedIJqRqmLC5+rt7a10WJFCm9m+4oB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:09:5f:12:db:09:83:04:33:35:14:f1:2b:35:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Validity
Not Before: Mar 25 18:00:51 2026 GMT
Not After : Mar 26 18:00:51 2026 GMT
Subject: CN=5ad60e95eff9823968958202e09813acaf54f63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:bf:12:99:36:7b:93:09:92:26:a2:1a:bc:
72:df:2f:8a:2f:1e:6c:16:f1:87:84:45:ea:46:1f:
b3:7c:86:7f:a8:ea:ee:7e:63:3a:db:41:03:31:c5:
7a:82:9c:5f:32:b8:60:a2:ef:09:1e:67:5e:15:c1:
00:00:86:1f:1d:06:79:eb:ea:82:b5:9b:f9:50:29:
da:22:50:64:65:02:c4:19:3a:fd:01:d6:fa:1d:68:
79:f3:e5:aa:fb:13:98:fa:25:df:b0:77:a8:f9:13:
ed:32:41:87:27:e4:51:05:a3:c6:a4:1f:b8:11:7d:
e0:7e:6f:39:ca:d1:0d:85:04:52:e7:a7:83:a6:18:
37:ba:20:40:27:72:ec:e8:f3:44:d6:92:e7:dd:d8:
ec:89:bd:ce:6c:61:c8:0b:20:ef:64:f3:39:d6:0f:
96:45:f8:8e:e7:5a:db:80:d7:f2:32:3e:58:9c:48:
36:62:77:51:4f:2a:ea:dc:9d:d8:30:9a:fb:e1:21:
29:c9:a3:fa:a0:38:41:c8:d4:b4:5b:a3:41:9f:ff:
b8:f1:76:ca:27:76:d9:d3:fa:ac:6b:02:70:23:c7:
a4:b4:48:fa:12:d8:6c:43:84:fc:24:f9:00:88:ff:
e8:25:31:53:28:76:51:2a:72:96:79:33:c5:4b:c7:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D6:0E:95:EF:F9:82:39:68:95:82:02:E0:98:13:AC:AF:54:F6:3C
X509v3 Authority Key Identifier:
keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bf:14:51:64:f2:fc:c1:a4:c9:63:5f:f4:8f:37:aa:a7:c7:
05:16:a0:5d:f6:ac:26:b8:b7:b7:dd:9a:4e:21:44:01:6d:d4:
25:f6:1e:7c:e0:63:0e:bf:30:5c:59:78:f3:c3:c1:55:3d:f0:
56:de:6c:f0:5d:41:06:aa:7b:fc:12:33:22:9d:c9:8e:59:34:
d9:06:32:21:cc:94:64:84:ab:bd:f7:cb:7a:53:25:e4:57:ba:
5f:2a:e4:d3:2c:f4:f7:d2:5b:eb:37:7a:2c:f8:18:58:e7:b4:
03:51:07:c8:73:0b:26:05:66:f9:6f:3f:a5:4b:e2:5b:5b:7f:
0f:c7:f3:b6:c2:79:af:db:9c:79:67:72:63:3b:67:04:08:0d:
da:30:cc:f0:29:d7:d7:0b:01:29:37:1f:d4:c0:e6:32:f6:f4:
a5:fd:fe:66:d6:06:55:4f:0a:d8:12:50:f6:9a:d8:3f:94:e7:
2e:b7:92:48:d6:e9:29:04:e8:cb:1b:4b:b5:5e:8b:62:9d:cd:
0f:0b:c1:11:0f:c4:e9:72:7d:af:fd:9b:d0:9e:75:e8:ad:14:
e5:29:a4:88:3b:f6:df:b7:c2:17:fc:a2:80:1b:2c:71:e2:7c:
69:0a:49:ca:d2:89:77:27:b2:27:a0:dc:4b:06:02:dc:75:26:
5f:38:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:50 2026 by rpki-client