Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
File: 9YQK34T7C3WOuopaE1qYA5Pov3M.mft (raw, json)
Hash identifier: LQlbhCI6WGOusqFH492tNpbEiSTOLIU4QOo1Qy2MacY=
Subject key identifier: 00:31:3A:62:85:2E:BE:F9:5B:7C:30:9B:A2:9C:66:EA:9C:7D:C4:16
Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
Certificate issuer: /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Certificate serial: 019D25BA9C42B713A9C2E0EE47518B0B955F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
Manifest number: 0431
Signing time: Wed 25 Mar 2026 16:01:19 +0000
Manifest this update: Wed 25 Mar 2026 16:01:19 +0000
Manifest next update: Thu 26 Mar 2026 16:01:19 +0000
Files and hashes: 1: 9YQK34T7C3WOuopaE1qYA5Pov3M.crl (hash: +70yT5ZEmbV7NKyN4TWh+kYdDHbMDDdDKsX1ZhnrBp0=)
2: drA-qEeuOhXaBIliMFDyRwjzUIs.roa (hash: LRSsWiFp5H7cghjLHXgtjNhMqPss6jgTVs0oIRjr8vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:9c:42:b7:13:a9:c2:e0:ee:47:51:8b:0b:95:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Validity
Not Before: Mar 25 16:01:19 2026 GMT
Not After : Mar 26 16:01:19 2026 GMT
Subject: CN=00313a62852ebef95b7c309ba29c66ea9c7dc416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:81:21:02:11:2a:5b:81:c2:27:9f:38:14:
de:47:e7:05:50:82:8e:15:5c:1b:af:e7:4d:50:25:
dc:86:e0:5d:40:c0:a5:99:d4:76:4d:18:47:54:a9:
17:48:4f:9a:b6:e9:97:38:4d:6e:60:ce:ae:05:dd:
37:8a:17:f9:bc:cb:5c:41:cb:63:2f:56:61:a4:a1:
a5:8e:db:73:17:39:3d:0b:58:1c:3e:51:25:64:fd:
e9:12:1c:a7:da:b4:cf:6b:30:64:77:a1:5c:6b:ce:
0f:5a:5c:15:ca:54:87:94:14:35:77:5b:c4:6d:0d:
77:c0:df:f0:9f:c4:b0:9d:be:90:d9:4d:85:8b:5d:
91:06:18:e8:53:71:d3:c9:13:45:88:64:54:d5:d7:
b7:5f:2e:53:b3:bf:b4:9e:f9:ff:dd:be:b3:56:9f:
80:c3:78:80:28:6b:b0:2e:e4:d5:cd:9f:73:7f:a1:
33:6e:6b:62:db:82:56:77:30:0d:92:4b:9a:4d:f5:
9c:61:e3:74:b2:cc:6b:8a:37:c1:9d:88:df:47:aa:
c5:72:ce:e7:a5:e3:04:8d:52:41:36:74:67:31:2a:
35:41:df:63:81:b8:6b:c3:cb:87:00:b2:25:43:22:
34:c2:4a:05:65:7e:20:e8:8b:79:a4:3d:7e:21:66:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:31:3A:62:85:2E:BE:F9:5B:7C:30:9B:A2:9C:66:EA:9C:7D:C4:16
X509v3 Authority Key Identifier:
keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5f:4a:48:00:c1:a8:d8:28:7e:91:33:d8:94:ef:7a:10:b9:
90:3c:96:cf:14:ce:5b:18:80:30:89:c0:8e:f5:20:ac:e2:e1:
74:be:ce:fc:b1:e1:b7:ab:ee:19:18:59:19:6f:02:65:9f:45:
63:12:17:67:90:f9:4c:61:7d:47:0a:ec:4e:48:d1:e0:d2:66:
33:ed:b5:bb:ad:16:95:0d:03:fa:31:b0:ea:c6:6b:69:e9:fe:
50:20:36:2a:ed:96:8c:d2:34:ca:a4:48:3f:8d:ae:93:c0:ed:
d3:a3:aa:3a:65:27:38:66:a4:9f:f0:d9:9b:30:0c:82:51:23:
e5:37:23:4f:c0:d7:78:9a:36:fa:51:2b:15:5a:37:68:0f:be:
59:83:25:0c:55:f6:c6:de:94:3a:da:59:ee:c6:57:a5:e4:b1:
3e:a6:70:67:9c:c3:5f:9c:4c:59:f2:9f:c0:33:7c:07:67:ef:
7c:9b:81:99:bf:27:93:1a:fd:89:17:db:49:ae:9c:b7:91:30:
90:07:5e:e1:3d:d7:49:00:36:c2:34:71:b2:11:61:b2:81:ba:
db:60:01:f1:f3:2e:0f:bb:50:88:8a:f0:1a:4a:43:ea:23:71:
1a:47:a0:81:fb:c5:ce:05:1c:80:38:5d:0d:af:14:34:86:6e:
84:f9:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:05 2026 by rpki-client