Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File: 9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier: SDlYzI9Et07RXg2r2xELRGL7qSlRNRk2PHkFQ2iO6Gk=
Subject key identifier: F7:50:F8:F4:C4:76:95:DF:D0:69:04:00:E0:DD:C7:3A:FE:66:F4:9B
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 019D27DFD368120A00DA2C39F4A4BD8E3C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number: 0C4E
Signing time: Thu 26 Mar 2026 02:01:13 +0000
Manifest this update: Thu 26 Mar 2026 02:01:13 +0000
Manifest next update: Fri 27 Mar 2026 02:01:13 +0000
Files and hashes: 1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: ZA2cKxVMDT415X4IuY32hlC0CLuXGJ0fTxul6xPGHo8=)
2: Qm9bE-GI0zpGIyQXKmibjGTghBs.roa (hash: VsN2fFZJM1gh3rfmfLU0muoVmQ/GoiIrwpbvbvg5qLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d3:68:12:0a:00:da:2c:39:f4:a4:bd:8e:3c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Mar 26 02:01:13 2026 GMT
Not After : Mar 27 02:01:13 2026 GMT
Subject: CN=f750f8f4c47695dfd0690400e0ddc73afe66f49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:f4:fb:c1:b5:b7:c8:f2:e6:3f:fe:5a:11:
23:f0:9d:3a:9f:ce:54:8e:44:81:32:f9:8f:52:01:
1a:50:ed:1d:9a:f6:72:cc:3a:6a:07:57:b3:6d:f5:
4d:24:c5:86:d4:72:b0:a1:0c:3e:e3:36:21:3f:d9:
ac:a7:5d:8b:15:ce:ca:23:af:f4:97:52:4c:73:de:
66:ff:db:9f:74:7e:50:01:61:8d:29:df:49:8e:1a:
65:8f:ab:36:0a:7f:34:3f:08:38:c5:65:29:c8:8b:
3a:97:71:4d:99:f3:54:5b:d2:41:30:61:68:11:38:
8c:66:99:7f:80:27:2e:25:90:2c:be:5e:55:e6:e6:
c5:1e:24:46:30:72:4a:bf:15:7c:99:16:c0:e1:1b:
e0:ea:e6:56:6d:56:7d:e7:66:b1:d4:d9:e9:d1:20:
3d:ed:2f:fe:cb:f6:a0:5f:72:eb:c5:ab:4b:72:84:
77:4f:38:3d:79:a2:e2:b4:95:2f:00:69:f6:ce:85:
b4:2f:1f:27:8a:90:0d:4c:90:d6:ab:eb:98:ac:ad:
a9:7d:8d:c3:bc:c8:5d:87:3c:8a:4d:c2:11:09:7a:
f5:13:f2:ba:ba:30:9f:9f:4f:bf:b8:7b:c7:ec:72:
a9:81:23:9e:fe:d1:c9:eb:72:84:1b:4a:3d:06:8a:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:50:F8:F4:C4:76:95:DF:D0:69:04:00:E0:DD:C7:3A:FE:66:F4:9B
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:28:26:f1:c2:82:9f:c5:33:58:0c:d6:9c:2f:84:5b:88:60:
40:84:00:cb:1f:7e:69:d2:a5:2e:23:8d:ee:e6:5c:c8:11:cc:
34:7e:d7:48:e2:f4:65:e1:da:c8:b4:56:fa:33:78:ac:1c:ca:
e4:84:2a:de:6c:09:50:b4:fc:6a:58:ac:17:0e:98:28:ea:d9:
22:82:73:da:ef:56:38:82:36:06:03:56:50:1a:48:3b:15:92:
f8:87:59:b2:74:31:51:8b:5d:92:31:77:bc:ec:e7:7a:84:46:
09:ae:32:31:24:0b:41:d6:65:32:56:47:d6:f4:96:75:c6:75:
ff:ba:38:05:5c:ef:36:8a:db:48:32:f0:ba:8e:1c:c7:f1:b0:
d6:1c:fc:35:30:a3:72:6d:90:65:56:00:1c:8a:94:98:61:c0:
4d:79:35:92:ee:2b:b0:db:fe:18:96:93:eb:3a:8d:d4:e7:91:
6d:33:2a:c6:f8:56:db:1d:62:bd:e5:7f:eb:66:dc:70:3a:45:
fd:d0:72:18:a0:90:02:89:c7:30:66:41:75:c1:9a:7d:60:04:
82:4f:53:f1:64:99:59:ac:68:24:fb:c0:3e:94:e8:45:ce:9d:
f4:67:d4:72:4a:0a:0c:b8:20:9c:4e:fe:76:78:0a:ce:9e:fc:
b8:16:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:13 2026 by rpki-client