Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
File: m9ReJgecMchSFrcwDNjmMw1D1a8.mft (raw, json)
Hash identifier: ECTilsH+q0h2kio6tbEfSAMPDBN/MWf73/9lVu+6G0E=
Subject key identifier: AF:49:2F:A1:98:A6:73:3A:02:83:13:16:7D:29:69:C5:31:F8:16:12
Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
Certificate issuer: /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Certificate serial: 019D2884C1C336ED3AC976B46EA292055B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
Manifest number: 0318
Signing time: Thu 26 Mar 2026 05:01:22 +0000
Manifest this update: Thu 26 Mar 2026 05:01:22 +0000
Manifest next update: Fri 27 Mar 2026 05:01:22 +0000
Files and hashes: 1: eRcv9H0kj-nbfOiGSSrJz38IxLU.roa (hash: DewykMuWLgPE2A0H2gavCxDnLQ8/NmjjeAOgscMAs70=)
2: m9ReJgecMchSFrcwDNjmMw1D1a8.crl (hash: vvhJMXP446VBS/GchpLdESoFxhieZMkSdDA+ry3pYV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c1:c3:36:ed:3a:c9:76:b4:6e:a2:92:05:5b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Validity
Not Before: Mar 26 05:01:22 2026 GMT
Not After : Mar 27 05:01:22 2026 GMT
Subject: CN=af492fa198a6733a028313167d2969c531f81612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:db:1e:bf:4c:61:6c:d8:a9:73:1a:3e:2e:
af:43:e9:14:1b:57:dc:ea:09:24:42:32:57:6f:7e:
f3:fd:c7:15:b8:13:54:81:24:9a:4a:82:ff:bb:a0:
fb:71:f6:f6:62:54:44:df:02:77:70:8f:c2:71:e8:
1e:02:c4:87:6c:7d:b2:af:fb:20:27:77:23:c0:bb:
f3:59:f5:4b:38:22:27:d2:b4:51:9d:42:67:ee:bf:
fd:41:f2:1c:4a:d5:5d:7c:fe:73:62:4a:11:1b:34:
42:7b:df:d4:65:fa:e1:9f:6f:fa:3e:98:50:c7:47:
12:51:2f:c4:92:9c:95:5b:a0:f7:f2:51:8e:57:c8:
1e:82:91:88:d4:06:e4:e8:54:44:24:a0:73:46:7d:
a1:88:b8:6b:9a:c3:1b:e7:54:55:9c:f0:64:0f:69:
99:68:b6:99:6a:01:8b:85:8b:20:95:8b:f4:09:f5:
1f:40:e9:d1:43:8d:ed:6c:b0:57:e7:13:bc:fb:f0:
91:41:e7:29:c6:ff:6d:35:4e:48:c5:a2:1c:f5:e0:
4f:51:6a:3b:dd:df:87:d3:a8:25:7d:06:8b:aa:ad:
f1:bd:bd:ef:ef:9c:c2:51:e5:7f:9c:e7:e0:9a:f2:
0a:c2:07:95:77:16:61:c1:df:ca:b0:79:05:7a:74:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:49:2F:A1:98:A6:73:3A:02:83:13:16:7D:29:69:C5:31:F8:16:12
X509v3 Authority Key Identifier:
keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c3:73:8c:ee:3d:e0:83:0b:4f:6b:e5:04:88:70:91:ce:35:
98:72:cb:b1:dc:1f:fc:29:a8:fb:a9:ac:58:e9:f8:7a:6f:9d:
b3:59:35:33:d1:e1:02:9c:4d:b9:c2:fb:db:50:5e:7b:05:2d:
69:5a:a7:b5:eb:57:74:45:4a:8c:2d:ad:83:a4:a5:47:04:22:
63:24:dc:ba:46:b0:66:15:42:d2:d1:46:b2:a0:e6:f2:85:b3:
d4:c0:b0:0d:b5:13:8e:58:ff:0a:8a:4e:79:aa:e2:90:7a:dc:
7d:41:aa:8c:a5:c8:2d:46:42:5f:a5:7f:b9:5f:86:08:79:3d:
63:21:6c:ef:e2:b9:fa:5d:61:e2:f9:13:2a:40:7f:bd:48:fe:
4e:6f:0c:cd:d5:8b:6c:58:86:77:6f:d5:ea:70:2f:6e:dd:e4:
f4:0b:a8:22:c6:77:dc:c6:cc:7c:74:a5:f3:f3:32:6e:09:87:
58:37:c7:3c:ae:6f:99:24:21:44:e4:34:ba:f6:94:99:0b:f6:
f2:41:76:bf:41:91:a9:35:ed:a9:cb:27:a1:ca:3d:81:d1:d5:
33:1b:23:90:50:a4:34:bc:c6:21:6d:dc:0f:cf:ba:40:5f:53:
21:19:dc:44:cd:32:8c:e0:e9:86:08:33:e4:b2:39:ae:83:53:
f4:68:d2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:46:37 2026 by rpki-client