Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
File: 9Ma33VF1vo23oFIvfU5BxcQsayk.mft (raw, json)
Hash identifier: PLno73lrxNCXlGZqMGLje2CA0sXKVvOZdL4GbZEurSY=
Subject key identifier: 32:F8:C0:2C:BC:95:16:DE:24:C6:BE:ED:CC:48:48:63:E2:D6:C7:01
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 019D2583615535AA022E9D09D88D8AD0FDA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
Manifest number: 1512
Signing time: Wed 25 Mar 2026 15:01:00 +0000
Manifest this update: Wed 25 Mar 2026 15:01:00 +0000
Manifest next update: Thu 26 Mar 2026 15:01:00 +0000
Files and hashes: 1: 3h0POrtVf5nJ4mgIC0AN_6072nA.roa (hash: wWqhTW//DXt8BkOdsP6vJO3z7/S5yHx7Zy7mNRD3gCQ=)
2: 9Ma33VF1vo23oFIvfU5BxcQsayk.crl (hash: 94U+CNeHRAyI858Wd9Va9rGbZVFtxVZYWg51qnjey98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:61:55:35:aa:02:2e:9d:09:d8:8d:8a:d0:fd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Mar 25 15:01:00 2026 GMT
Not After : Mar 26 15:01:00 2026 GMT
Subject: CN=32f8c02cbc9516de24c6beedcc484863e2d6c701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:b4:0a:9a:9d:25:ea:70:79:99:61:39:1c:
f3:0a:0a:ae:f5:13:72:fc:cf:37:a6:2d:a2:9b:ac:
7d:be:a2:c3:a8:45:6a:eb:1a:7d:89:50:f3:5f:ba:
63:07:43:7f:99:5d:63:a9:9a:aa:20:d2:97:60:ec:
2b:35:30:4f:58:7b:3c:bc:8d:09:c4:c9:1f:29:83:
38:13:a5:98:44:5e:ea:af:45:8a:d7:88:44:93:46:
50:da:90:d4:7c:ab:cb:bf:ed:49:c0:7e:92:1e:d7:
d9:0e:8f:4b:43:de:d3:3a:87:fb:f7:e7:24:12:0c:
35:8f:9f:2b:e3:35:63:58:dc:11:57:e7:ca:b7:99:
c2:8e:c8:83:8a:9a:8d:d2:0a:3c:e1:4c:09:f4:89:
cc:59:e8:21:25:4b:5f:27:12:38:c5:aa:d0:c6:0b:
5d:f7:62:1f:b3:1d:7b:2e:a3:ef:46:ec:28:9f:db:
9e:c9:26:f6:cc:e2:59:c5:77:2b:65:9b:c6:ec:c9:
fd:28:64:b2:95:5d:69:a5:6f:c9:bd:e8:b3:38:65:
41:d1:c0:11:4f:d9:77:c0:c1:d5:33:4b:62:9f:67:
dd:9e:50:7f:26:95:72:43:36:03:40:94:d7:ce:f3:
0b:8a:34:93:64:0c:ee:fe:11:43:c6:2e:d2:e4:d1:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F8:C0:2C:BC:95:16:DE:24:C6:BE:ED:CC:48:48:63:E2:D6:C7:01
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:31:51:97:03:03:c6:c1:44:6c:19:b4:38:07:65:45:65:aa:
6a:38:68:2b:cb:86:23:72:bc:d0:bf:be:39:ac:83:ab:dd:a3:
e4:4e:24:77:a5:ab:35:de:94:fc:28:81:18:83:49:ea:25:64:
cb:a5:b2:c7:28:6c:3e:e1:9a:68:8f:9a:11:b1:88:f0:12:5b:
79:a1:be:e4:f8:9f:be:bd:7f:b1:88:70:1b:32:82:ee:30:ee:
57:00:07:5c:ec:aa:4b:d1:d4:4c:14:f1:ba:f3:71:43:71:b7:
15:3c:28:1e:b2:da:75:18:17:35:b0:1d:fc:dd:58:61:95:aa:
38:4f:ea:3c:e7:8f:98:44:52:0d:02:e3:3e:e1:9c:f2:96:39:
53:85:4d:7d:58:bb:89:9c:c2:14:a0:ba:9c:a9:9c:c8:e4:51:
4b:67:ca:58:2a:a0:76:65:c0:13:e1:54:98:5a:51:c9:d9:8d:
49:5b:90:8c:f5:c8:1c:a1:6d:16:99:d6:0e:89:f7:1f:4a:1d:
ca:67:09:eb:04:ba:ef:30:c3:d0:72:6e:3c:0a:22:b4:f5:fc:
a3:0e:88:ff:17:b7:a5:4b:ca:91:bb:4e:6a:51:14:f5:19:29:
9b:19:e3:87:43:e5:9e:94:c2:b5:78:11:e5:54:8c:96:ea:3a:
26:55:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:17 2026 by rpki-client