Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier: Djs33xlT0XBIOtV594ukc+sGe+rqQMBfBMIpNhYp66I=
Subject key identifier: 4C:8E:50:45:D2:9C:01:3B:39:E2:67:C4:12:A9:6B:7A:87:78:CE:32
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer: /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial: 019D28BB8F6CF0E6A2025F4F08B15A891EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number: 167C
Signing time: Thu 26 Mar 2026 06:01:13 +0000
Manifest this update: Thu 26 Mar 2026 06:01:13 +0000
Manifest next update: Fri 27 Mar 2026 06:01:13 +0000
Files and hashes: 1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: 3mHrVo+czkUyUJp7cTgk59qC2CqDlt/9SBThIq0CUoI=)
2: UEAaPo6VUETHn6B0u4mE40cQPvI.roa (hash: oDl/sgYlJlPoPDa6gI6+975HLzl7ybSw7kcsMPOBkCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:8f:6c:f0:e6:a2:02:5f:4f:08:b1:5a:89:1e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Validity
Not Before: Mar 26 06:01:13 2026 GMT
Not After : Mar 27 06:01:13 2026 GMT
Subject: CN=4c8e5045d29c013b39e267c412a96b7a8778ce32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:2f:48:d5:83:46:0d:0a:82:24:9c:95:d6:
91:26:2b:27:06:2d:9a:64:d9:f0:18:f6:4b:7e:25:
27:fb:6e:58:90:6f:ec:fa:92:b6:37:92:f4:bb:ee:
21:10:49:bf:e2:64:b1:75:9c:ab:3d:77:c2:42:2e:
9c:17:95:30:f2:56:4d:44:70:9b:16:20:34:3e:be:
79:9a:45:e8:54:1b:93:ef:69:49:4d:2a:8f:24:a4:
9f:26:31:c8:37:64:35:3c:19:43:c5:76:50:98:56:
83:3f:04:49:10:13:31:b3:b1:84:0a:39:e1:d7:b7:
64:21:af:ad:b6:a7:52:c1:ea:83:7e:54:5a:4a:22:
27:28:2a:4b:bb:4e:7c:b6:bf:b5:be:ab:13:64:92:
11:fc:b9:9b:12:3e:1b:0b:47:28:59:4d:d4:b9:b5:
c0:82:42:8a:3e:61:19:d0:e8:b3:4e:14:0a:bc:d6:
a1:cc:29:dd:b3:dc:0a:a6:6c:98:98:da:79:af:c1:
cd:03:86:d0:80:4e:31:02:e3:80:31:b0:44:e0:95:
7b:10:61:18:8e:d1:35:27:a0:e7:4b:61:4f:bb:1c:
43:51:89:56:61:e7:9b:1a:1b:49:90:6e:1d:4d:db:
84:07:f6:3a:4c:73:4c:13:a0:c4:1c:31:96:ca:e0:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8E:50:45:D2:9C:01:3B:39:E2:67:C4:12:A9:6B:7A:87:78:CE:32
X509v3 Authority Key Identifier:
keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5a:c7:b2:e2:3b:1a:76:bb:d9:5f:9d:92:60:a6:f1:40:3c:
10:30:32:95:e2:38:77:67:85:53:43:61:10:fe:d3:95:81:d2:
1a:52:05:99:a1:ac:7a:91:94:4d:32:00:52:79:4c:76:1e:81:
0c:9b:3f:58:cc:27:bc:ea:00:bf:32:48:32:85:af:74:46:d4:
f7:1a:17:01:5b:2a:88:46:98:18:88:6f:9a:d5:00:39:a7:2d:
de:ac:2a:ba:46:0a:08:4c:32:ab:2c:87:76:80:8f:0a:3b:2a:
8b:18:81:52:58:97:2e:d4:27:6c:1c:71:b9:0b:23:5a:5a:bb:
c3:96:39:cf:20:a3:af:c8:5f:fc:fa:28:e8:d0:e6:ce:f1:1c:
cb:94:be:31:8b:a8:e7:55:87:a9:00:89:08:26:6a:a2:94:03:
e3:0b:ad:64:2c:3f:58:8d:5a:f2:1e:01:f5:b8:55:85:5e:a5:
ef:3f:d7:f4:29:13:c0:2c:48:cf:fc:4d:f1:bf:9f:fb:90:d4:
fe:a0:42:5b:82:43:9a:3a:f9:44:1e:8b:8b:f9:a4:07:bd:75:
d7:7c:49:73:06:ff:20:8c:9a:89:7e:1e:74:33:fe:58:ad:58:
76:e9:22:f3:0e:72:03:57:9d:47:37:58:78:b6:97:55:65:4d:
b2:a1:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:47 2026 by rpki-client