Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier: R+ylGbj4yrnRi7/DkceEHHF54Ciy7CvFEmq216x8NLo=
Subject key identifier: B8:64:65:1C:7A:A5:C2:AF:24:2C:72:68:C3:AC:20:B7:C5:56:06:C0
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial: 019D2A723F92D0C33F23AE4E452A555210AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number: 1410
Signing time: Thu 26 Mar 2026 14:00:23 +0000
Manifest this update: Thu 26 Mar 2026 14:00:23 +0000
Manifest next update: Fri 27 Mar 2026 14:00:23 +0000
Files and hashes: 1: G6WXhyvVtMAy_hDzbTynLKDz6nI.roa (hash: hU50SCH6HViVYgZI7FoCwUv3dNNmWkj31LMFtbg1FRw=)
2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: 2Fb2xU3homTUAYTNx0aANaEouofqTsb6Ux1UfSMcjsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:3f:92:d0:c3:3f:23:ae:4e:45:2a:55:52:10:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Validity
Not Before: Mar 26 14:00:23 2026 GMT
Not After : Mar 27 14:00:23 2026 GMT
Subject: CN=b864651c7aa5c2af242c7268c3ac20b7c55606c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a6:e5:45:8d:52:32:6c:ce:08:90:85:13:f1:
68:24:3d:b1:45:31:01:0d:15:53:d5:8e:ba:79:ad:
aa:0d:b4:d9:21:23:37:6a:7d:cc:b3:19:6f:41:71:
9d:69:c2:f2:6e:56:7b:e9:f0:23:82:c0:d3:f0:48:
f3:1e:d2:72:5c:aa:43:77:9c:40:ec:54:f0:49:26:
4f:b6:4b:11:5a:74:8f:a2:5e:5a:58:51:0b:49:70:
e7:17:f1:87:cc:f9:61:82:de:c5:3d:a5:97:92:62:
05:2f:72:0b:ca:25:e6:53:6f:9f:f0:fb:fb:63:ee:
3a:33:33:94:29:aa:f9:29:72:c5:b9:18:64:7a:50:
c2:7d:7f:f3:32:33:fd:4b:9f:9e:46:24:43:ef:b4:
af:d1:dd:f2:37:6b:7a:16:02:61:d1:9d:e4:42:27:
51:13:34:09:fb:33:61:4b:c6:91:49:cc:1e:a4:8b:
ed:54:38:57:25:a3:50:37:29:cf:46:a6:93:f0:ce:
26:f3:8b:12:0d:a0:1a:9b:ad:01:79:6e:a4:0e:4a:
4f:ef:50:3c:bc:04:06:9b:c6:17:19:0f:5e:02:ed:
77:71:20:25:0a:66:09:68:f0:9d:79:42:b0:d0:bc:
49:76:9e:aa:c8:36:4c:95:8f:dc:e4:22:c1:47:5a:
9f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:64:65:1C:7A:A5:C2:AF:24:2C:72:68:C3:AC:20:B7:C5:56:06:C0
X509v3 Authority Key Identifier:
keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f5:e0:2c:0f:db:35:c1:bf:04:fe:88:ef:b6:28:de:61:a1:
ca:cd:97:a9:c6:e3:9f:f8:db:2d:b7:08:d6:73:7f:82:d0:44:
87:41:c1:02:69:84:12:f8:90:f5:39:4f:9e:07:96:1f:7e:1b:
5e:a2:64:3c:b4:1a:49:b3:1a:2c:7c:9d:06:9a:fe:3f:d7:c2:
d7:2a:26:3a:88:98:ce:ab:83:a0:39:88:1b:e6:9d:b3:87:f1:
88:3f:cf:da:36:39:e9:1f:72:30:af:ed:44:59:0b:df:5b:0b:
ae:0f:1a:a0:59:c9:e5:1c:87:97:b2:7a:6e:95:da:80:05:9e:
bc:eb:70:85:15:4d:ac:70:67:9d:c4:e3:06:75:5a:72:a6:19:
9a:66:b8:5e:cf:5c:37:bb:77:af:d4:14:71:56:fc:6f:29:7f:
23:82:16:b6:fd:c1:5e:f5:db:4b:ee:b7:f3:59:f0:ec:8a:96:
93:dd:0c:3d:53:eb:aa:98:f9:e0:c9:19:53:f1:2b:c5:a6:ca:
91:66:91:fd:45:68:f3:a6:ce:5c:34:ea:c1:57:ac:70:4e:be:
12:7d:0a:cf:5e:1f:3e:7b:5e:52:9c:82:71:14:32:81:1f:3f:
1d:fa:6f:55:e6:02:3c:3f:c3:22:1a:c2:21:b3:f9:7c:00:fe:
fe:df:31:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:45:21 2026 by rpki-client