Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File: 9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier: U8jhoucKqKIAKBwh0SKTPuGF7Pp1paIkxT3kajwHNRE=
Subject key identifier: 8A:79:A7:B3:85:E4:61:18:F3:E9:37:66:96:72:EB:D9:A9:93:F7:B4
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial: 019D273ABD5DDB265EEE0C1445DD80B94E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number: 1657
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: dAe3ZV2x+CuVu0FIlvGYZ/q0/SO1MkkUGRUXrJg/IkM=)
2: QlPUYBIgA-X6jp0IaJHxAc-p46U.roa (hash: HXbV30gZlG5FM4CNzA/Ff6hakg3IrjI+qN7q3gKgozw=)
3: tyC-pTUzo6nFgSSwAa_6pbmsyAg.roa (hash: RK6LVWTWWbUKXe8FdCeUVJN0A7lPCOyvPPPfNNmHAao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bd:5d:db:26:5e:ee:0c:14:45:dd:80:b9:4e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=8a79a7b385e46118f3e937669672ebd9a993f7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:2d:36:2f:7c:8e:18:b5:7d:5c:f2:9d:1e:
e1:37:9e:31:ed:11:23:30:ac:77:10:84:84:43:15:
4b:45:bc:84:27:d2:e7:7a:57:89:9d:3c:4f:1f:3c:
07:f2:91:78:94:8a:c6:7e:90:9a:87:e4:1e:f0:db:
8c:ad:89:c0:76:0f:e3:f9:57:57:82:95:4a:b2:c1:
4a:bc:41:64:c0:61:b8:2e:53:52:81:e4:5d:e8:8b:
34:e6:e5:92:2e:e9:e2:eb:92:e7:3c:8b:39:36:58:
5e:3c:5d:90:ac:d2:74:03:cb:46:5d:a8:42:9c:5c:
56:60:0b:ff:39:b7:cb:e8:75:93:6e:4a:a1:10:fb:
57:db:dc:fa:a2:4d:d4:e3:4a:d0:01:dc:3e:92:a0:
b7:33:b6:ce:87:78:ea:c4:70:03:e5:84:4a:89:a6:
d0:f7:0e:04:ae:02:12:10:1a:e7:0e:01:02:fb:e2:
dd:e2:44:d1:b4:55:f4:00:5c:0d:96:75:e2:46:ba:
6d:6f:16:fc:66:50:22:51:79:bb:44:98:29:bb:f0:
6b:37:19:2f:a0:22:7d:f0:4f:d0:74:84:06:b5:9b:
86:52:b6:e1:4b:c4:8b:aa:2a:ea:d2:9d:66:e3:24:
3c:15:2f:c7:0a:d2:53:61:aa:f7:61:4e:a1:1a:94:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:79:A7:B3:85:E4:61:18:F3:E9:37:66:96:72:EB:D9:A9:93:F7:B4
X509v3 Authority Key Identifier:
keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:59:c6:c9:d0:1d:fc:38:47:6c:64:16:4e:17:36:05:b0:5e:
cb:af:3e:4b:ae:65:d0:4b:16:60:0d:ca:7a:ac:7b:e5:d8:57:
6b:30:c2:24:ab:26:47:ea:f0:bf:f1:b4:66:78:4d:45:74:60:
70:fc:35:8c:32:2a:35:11:89:fd:a1:38:cf:dd:46:53:83:0e:
16:6d:ab:ff:27:a4:0b:8d:df:67:64:27:57:cd:9e:de:39:a8:
5b:de:52:5b:0c:f3:9a:58:fa:9f:b5:d7:b5:bc:c8:09:fa:85:
15:6b:3b:4d:8f:7e:bc:6c:ec:1c:55:54:fb:f9:e4:3a:08:f0:
93:d1:aa:01:66:a7:30:b6:ff:95:f9:3a:03:25:c7:99:b4:bc:
a5:90:dc:26:f1:64:a2:1b:6a:9c:84:16:19:6b:44:31:12:5a:
6f:15:fe:41:64:60:65:7e:29:43:33:e8:aa:7a:88:8c:69:25:
31:1b:c8:36:a0:a7:f6:38:6f:ea:18:d4:a7:07:8e:e5:a3:52:
83:a6:7f:e5:86:03:99:b8:19:43:87:d9:15:ac:56:90:20:e7:
b0:46:33:04:d0:d8:1a:51:cd:80:1a:c1:71:0c:bc:e2:82:b1:
6a:4f:3f:78:3d:c8:96:29:f2:76:83:94:9f:b8:52:de:a9:fc:
5f:80:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:37 2026 by rpki-client