Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File: t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier: +PPSW5qvTLNwUXeQbKzvIQ7xlpzFCelk2hFIP/HWI0E=
Subject key identifier: FF:FA:D1:CA:09:EA:A5:2C:2D:6F:01:0A:8D:D2:C9:9E:72:57:35:28
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer: /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial: 019D25BA698041BBBD8A5BE69459D86B8669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number: 1629
Signing time: Wed 25 Mar 2026 16:01:06 +0000
Manifest this update: Wed 25 Mar 2026 16:01:06 +0000
Manifest next update: Thu 26 Mar 2026 16:01:06 +0000
Files and hashes: 1: QkD6kvbjOFF159SqIoxtVy6uYtw.roa (hash: moRNSt3cT3MEpll0Dp7Um5vSYqeXw33T13RgwrHAltU=)
2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: QSv0mcF4+Mq84ujL83fQ3a36q0XkQTH7pB2GDo4LDA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:69:80:41:bb:bd:8a:5b:e6:94:59:d8:6b:86:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Validity
Not Before: Mar 25 16:01:06 2026 GMT
Not After : Mar 26 16:01:06 2026 GMT
Subject: CN=fffad1ca09eaa52c2d6f010a8dd2c99e72573528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:5f:b5:90:32:26:8d:66:3f:e4:15:14:39:
14:b7:10:ed:df:23:e9:be:d0:83:41:71:c9:57:6c:
42:13:f7:83:08:8f:64:0e:a4:52:26:69:73:7c:b1:
f3:6a:1b:a5:c9:b2:91:27:03:5b:b8:7a:1f:ff:c1:
1b:b3:86:69:77:7c:e1:8a:dd:dd:f6:48:3e:71:f8:
eb:59:ea:8c:99:17:69:3d:fd:8d:dd:93:3a:ce:49:
83:80:c4:a4:77:c5:b8:8e:24:44:6f:7d:65:40:30:
f2:77:60:75:86:96:71:a0:38:e0:49:6e:38:23:d7:
04:54:ee:f3:dd:8a:e1:a0:42:a1:7f:68:69:02:a1:
96:8e:4c:4e:88:cf:06:9b:d1:5a:da:0a:95:7f:95:
3e:e6:4f:b8:f8:ee:c0:dd:97:01:64:54:2c:1c:10:
19:e2:82:6f:60:4a:10:ea:ba:d6:ee:e6:c7:d3:d4:
95:05:82:dd:d4:a0:70:b1:4f:04:be:1f:f5:4e:a3:
fc:e1:7a:ae:7b:c1:2c:fb:d3:ac:7b:94:fe:ef:bd:
0d:35:c9:e9:60:0f:b4:4a:78:d2:c6:92:09:55:2d:
98:cf:c8:35:22:e5:25:a4:1b:7a:eb:bb:5c:b6:f3:
6e:a8:8c:a6:7c:da:17:bb:1b:8b:58:0a:32:e8:44:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FA:D1:CA:09:EA:A5:2C:2D:6F:01:0A:8D:D2:C9:9E:72:57:35:28
X509v3 Authority Key Identifier:
keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:97:61:11:3d:35:dd:3b:f8:7f:af:09:da:12:d0:52:4d:8c:
24:e1:bc:a7:5f:f8:ab:e0:61:6f:52:7e:bb:81:17:0f:bf:12:
13:d2:9f:75:b5:5b:20:84:d2:ac:11:ce:1d:60:9c:dc:69:94:
93:9a:4b:96:1d:11:14:02:45:a4:bc:24:a9:f5:27:d8:04:13:
59:9a:33:e8:9f:09:ab:9c:a4:c0:3f:77:50:d9:30:8f:8b:0b:
e5:6d:72:a4:e1:9b:5b:6b:ea:8a:62:08:ff:88:29:dd:b3:f0:
66:87:8d:17:a0:79:65:00:9f:f0:03:ff:86:39:64:1a:7a:f2:
36:99:05:bb:68:ee:0d:b1:05:73:e4:25:56:c7:27:b8:07:1e:
6e:aa:b1:51:b5:be:56:c7:cf:5d:d4:10:fe:1b:39:af:f0:19:
88:cf:fd:2b:11:71:b0:02:a3:a1:f1:02:f7:04:45:6a:45:d4:
0a:06:fa:c2:85:af:05:a9:40:a2:78:10:2d:33:c2:78:23:46:
e4:f9:62:17:77:4a:bd:de:33:c3:12:8d:f3:c7:77:60:97:46:
ba:31:35:59:a4:3e:2a:fb:f7:42:5b:c1:1c:7e:a3:6c:cd:10:
a1:3e:dd:07:8d:3b:f9:56:29:26:78:48:1f:7b:b9:22:5c:c6:
82:b8:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:31 2026 by rpki-client