Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
File: 9-5cHIBMM_3jPZsIuRn3PTHQttk.mft (raw, json)
Hash identifier: bFygiaxgL5BioCZsA9niPUZ/TfMJ0VssLPnhCmhpvw8=
Subject key identifier: E0:02:C2:20:44:7D:50:70:63:07:C7:AC:67:05:D8:8D:43:6E:09:5D
Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
Certificate issuer: /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Certificate serial: 019D2A0459EAC6B40D4A244DAD9306077A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
Manifest number: 0CFF
Signing time: Thu 26 Mar 2026 12:00:21 +0000
Manifest this update: Thu 26 Mar 2026 12:00:21 +0000
Manifest next update: Fri 27 Mar 2026 12:00:21 +0000
Files and hashes: 1: 0y82NnZOUS5QhtbUGUPm-XaKV8A.roa (hash: g76Du+LlOjlKMO34J2hj9ezARBg/rEQncuJVGlyHo34=)
2: 9-5cHIBMM_3jPZsIuRn3PTHQttk.crl (hash: zbNjtqy+bfY4QxmigVxo0UOSrgRC0WStVuuv+b80InM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:59:ea:c6:b4:0d:4a:24:4d:ad:93:06:07:7a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Validity
Not Before: Mar 26 12:00:21 2026 GMT
Not After : Mar 27 12:00:21 2026 GMT
Subject: CN=e002c220447d50706307c7ac6705d88d436e095d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:3e:4a:6c:49:45:1e:89:85:41:be:5a:9a:
fe:89:b2:e1:41:6d:50:a7:e7:a1:96:74:07:dd:ec:
b1:63:df:7e:d5:c1:21:de:c9:33:98:ff:54:be:92:
d5:15:53:bb:39:4e:6a:fa:72:56:72:2f:7b:a6:fb:
6c:fe:74:e8:df:8a:a0:9e:02:c7:37:f0:c8:c0:a9:
59:68:c9:05:de:fb:28:64:4b:d9:d0:03:cc:c9:d5:
19:ca:f8:7a:ae:59:31:32:2e:da:53:73:eb:91:fe:
0d:8d:31:e5:2b:93:76:34:ee:b0:58:1e:c6:1d:90:
33:b2:70:95:17:7c:61:06:43:d2:88:ae:01:bd:b5:
50:71:fe:5a:e9:6d:3b:d8:95:44:99:ed:d2:35:f8:
3e:98:ab:c1:3b:e0:31:f1:c5:03:9d:22:ad:c5:2d:
cf:f6:48:d9:8a:1f:f0:78:b7:17:bf:fc:44:79:6c:
20:9e:d7:ac:e3:47:c5:c7:18:56:96:2f:7f:e8:68:
41:f4:69:d9:24:a9:4c:b3:69:71:33:d4:f4:3b:d1:
e7:28:72:6c:d8:0c:06:5a:2c:6f:0b:89:11:a0:59:
d7:f4:ca:29:56:ed:66:06:5f:18:f1:f1:9a:8e:93:
97:c7:60:ce:43:a0:90:16:fb:2d:29:bd:92:c8:82:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:02:C2:20:44:7D:50:70:63:07:C7:AC:67:05:D8:8D:43:6E:09:5D
X509v3 Authority Key Identifier:
keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7c:18:7e:01:09:7f:31:1f:3a:12:64:ca:dc:80:34:8d:9b:
cb:e1:d6:71:0d:89:86:01:56:68:37:73:9b:0f:ed:07:d8:30:
19:8c:e9:6b:90:9c:5a:fc:17:8c:90:c9:19:7f:a1:f4:c3:47:
fb:44:3b:c6:89:13:7a:7b:b8:1e:3c:fe:79:9f:fb:4d:7c:01:
36:8e:dc:16:a1:37:6c:39:2d:b5:86:ed:4a:c8:a1:a0:bf:62:
65:6e:29:c7:56:63:c8:83:10:f0:6d:6c:d2:06:52:67:b5:6c:
fd:c9:af:50:88:3a:71:e3:4e:f1:e1:35:a9:85:85:ae:f7:0a:
61:f1:9b:20:d1:32:54:f1:dd:2b:98:0b:e6:07:fb:57:33:b5:
da:21:b6:eb:9a:66:ab:09:cd:c6:7e:19:0d:99:62:d9:16:08:
eb:e1:ef:23:eb:98:f5:dd:fb:4c:14:e5:64:55:c1:93:b7:8d:
b5:80:62:99:fa:59:9e:eb:ea:22:85:36:6e:dd:43:e4:e0:6b:
69:3a:4b:d0:28:0a:8b:d3:57:c6:0a:38:05:d3:fb:c1:bf:0a:
fb:b1:d1:6d:d9:29:83:b3:0b:47:9f:14:71:8b:ab:ba:58:0c:
39:13:a3:00:6f:09:58:77:63:3d:21:61:85:38:8a:90:32:aa:
ec:b9:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:14 2026 by rpki-client