Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
File: 9rkcLAjwDWdj0unmosRCETDz3b0.mft (raw, json)
Hash identifier: 85JTV3m1RAyQL3MTj+HI0cNu6gCFjy1EWxAp6GfN91E=
Subject key identifier: 61:53:3D:D7:89:8D:9A:06:81:30:9C:AC:6B:CD:A6:95:88:AA:86:CA
Authority key identifier: F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
Certificate issuer: /CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Certificate serial: 019D273AED21607171F8E22305E1FE9C4BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
Manifest number: 0534
Signing time: Wed 25 Mar 2026 23:01:06 +0000
Manifest this update: Wed 25 Mar 2026 23:01:06 +0000
Manifest next update: Thu 26 Mar 2026 23:01:06 +0000
Files and hashes: 1: 9rkcLAjwDWdj0unmosRCETDz3b0.crl (hash: DdSYJL1EvXeCUxHbhj1dWHNfzTrCs31QI3c7Zs4e88I=)
2: O9gvHkG2h2zO-WbCdSfRap-erlk.roa (hash: oEpItWYo36cnFY6gqJseSt67WlSCENpXs7wywbBecHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ed:21:60:71:71:f8:e2:23:05:e1:fe:9c:4b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Validity
Not Before: Mar 25 23:01:06 2026 GMT
Not After : Mar 26 23:01:06 2026 GMT
Subject: CN=61533dd7898d9a0681309cac6bcda69588aa86ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c0:a9:9d:71:34:9e:f3:97:46:fe:63:4e:bc:
bb:29:e3:d3:86:88:fd:a0:66:0d:b9:83:17:1b:f8:
23:9d:c0:21:6c:00:86:f9:d3:89:f8:a6:92:6a:e9:
aa:8c:c7:38:6b:d8:91:ea:6d:3d:ed:b5:c1:61:66:
01:eb:00:f9:77:45:b0:5a:a6:24:4b:54:74:e1:c0:
81:d6:a9:13:60:5b:81:6d:72:7f:fa:37:f2:c3:85:
bf:9f:46:d7:f6:80:63:57:01:62:e4:67:df:b0:4f:
8b:25:18:b5:65:5d:dc:14:0e:f5:64:b1:30:5d:27:
42:2d:73:1a:a2:52:79:42:35:e3:dd:2b:60:de:29:
a7:9e:e8:98:89:32:06:7a:63:81:f1:d0:e1:0e:a9:
d0:9b:73:49:6c:f6:8f:68:34:ea:c3:5a:6f:3d:38:
e1:3e:38:57:f8:ed:17:fb:ca:24:36:c3:4a:1a:93:
8c:25:0b:a0:ba:86:92:e3:1a:76:d0:49:3d:50:92:
ef:8c:04:67:3d:71:de:c4:f9:1c:fc:fc:32:83:90:
6e:58:83:fd:59:c6:4c:33:91:72:e4:24:02:a7:3e:
3b:47:d1:2a:f1:64:2a:24:a0:bf:3c:46:76:36:90:
d1:de:bb:72:c3:b9:e2:cd:98:2c:3f:51:99:81:02:
c8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:3D:D7:89:8D:9A:06:81:30:9C:AC:6B:CD:A6:95:88:AA:86:CA
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b4:40:14:f1:17:e5:6a:bf:7c:9e:d1:32:71:61:d2:98:90:
06:51:16:34:2d:91:9a:22:6e:2c:4e:74:bc:48:2e:e2:90:e2:
8c:cf:b3:b9:2a:43:62:5c:c6:8f:13:e6:03:3f:59:ed:c1:c9:
1b:e8:5b:26:6b:23:ab:26:46:0c:2a:bf:a5:1d:0b:68:3a:87:
a7:c0:6d:3b:de:c7:0f:96:ba:ce:8e:bd:31:e7:c1:b4:01:0e:
63:b1:be:ea:3e:73:11:41:ac:e7:81:18:ca:77:9e:20:b1:2c:
ec:1f:1a:fa:14:37:f9:aa:31:4b:02:67:82:0f:3e:d1:ff:e1:
7d:7d:e4:3c:4e:ef:a7:00:5f:2e:22:09:03:8a:bf:c7:8f:af:
94:e3:c0:7b:e9:50:e6:04:7a:ed:7a:7d:aa:45:aa:72:c6:7e:
aa:da:6c:f0:aa:3d:d6:2d:5c:30:f7:ac:d6:b7:64:5b:d2:16:
ce:79:20:da:66:24:e6:20:4c:12:99:24:68:bb:2c:8c:e5:b1:
7b:77:c1:ed:bf:af:6b:3b:ce:e9:46:48:e1:c1:cc:03:6b:e6:
ab:4a:d4:3c:97:b6:44:1b:ae:13:a5:f1:43:91:f0:b4:64:ae:
08:d5:13:6e:99:47:66:d8:ea:36:55:d6:c8:2f:8d:39:bc:5f:
38:b7:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:44 2026 by rpki-client