Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: tqpjr0C0ddwuQ1ALsdu5tc7trHfSjqx5G5WzUTSA6co=
Subject key identifier: 31:1C:16:8E:35:57:70:BA:BD:7F:74:21:12:DB:6B:77:74:43:68:EF
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 019D2960BF14D34703BC4EFEA6D4D01C10FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 0E4E
Signing time: Thu 26 Mar 2026 09:01:39 +0000
Manifest this update: Thu 26 Mar 2026 09:01:39 +0000
Manifest next update: Fri 27 Mar 2026 09:01:39 +0000
Files and hashes: 1: NYQTyqXhO5SfIKalilF-9jPbRJo.roa (hash: 5lrctU6hrWDAzuX+vKa0ZLHPNzNKbXOgcE47QemStpE=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: Xi96Jm9Ohs+iElz0G1QvmWJoYw13SjrxrgfbvVO1mLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:bf:14:d3:47:03:bc:4e:fe:a6:d4:d0:1c:10:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Mar 26 09:01:39 2026 GMT
Not After : Mar 27 09:01:39 2026 GMT
Subject: CN=311c168e355770babd7f742112db6b77744368ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:74:84:0c:01:19:74:ab:c5:eb:94:48:82:
5c:61:39:c9:e1:19:ad:1a:99:c4:90:31:d8:b0:64:
52:5e:a4:cf:64:6c:56:a8:30:58:cb:df:1e:a5:32:
73:4b:86:30:60:5b:bf:f2:96:ca:75:ad:47:99:dc:
17:79:ba:c4:b7:17:8c:55:55:4b:56:73:45:20:c5:
c5:a5:34:31:f1:03:97:82:7b:7d:89:71:96:c4:3b:
b7:81:ae:aa:7f:ad:92:ee:91:94:b5:52:29:89:c7:
b0:ca:80:5c:12:f1:e2:59:14:75:f9:1d:3e:a1:77:
a7:1f:1e:0f:bc:98:30:f9:cb:06:33:65:e8:b1:8b:
b0:35:9b:a1:31:91:de:61:a1:53:03:da:0e:bf:e5:
59:43:ab:e5:ff:f3:af:95:c4:98:cd:62:2e:93:4b:
9c:7c:84:91:57:0a:c7:68:02:73:ed:85:e2:ac:03:
b7:a9:be:ab:12:2b:74:df:cf:47:3d:e5:4a:8a:e6:
e7:bf:16:11:87:55:f8:9c:40:90:e5:2a:27:7c:7e:
64:7d:70:ad:de:dd:29:cc:db:d1:7b:a1:e0:c5:0e:
34:b8:eb:4f:f1:90:2f:5a:5f:ef:4b:46:98:31:3c:
af:3a:ee:b4:73:ca:9a:4c:34:49:1e:57:c2:af:90:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1C:16:8E:35:57:70:BA:BD:7F:74:21:12:DB:6B:77:74:43:68:EF
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a3:41:b7:14:1a:36:8c:21:67:7b:92:38:e9:e7:9d:8f:7d:
9c:c5:3a:92:13:a4:83:d9:ad:6c:1e:70:64:85:74:0a:d2:7b:
b4:da:92:3b:77:64:6c:73:61:f1:63:03:13:44:12:a1:47:9f:
cf:4d:69:0c:40:1c:76:53:5c:b7:7b:74:a8:d0:64:e8:50:28:
21:d3:d2:80:c6:de:77:3e:d8:a3:dd:02:63:ad:ab:ad:28:12:
d4:d5:9a:a1:e1:b7:99:e5:59:3b:b4:1b:93:4a:73:39:ea:82:
a6:67:78:ca:4b:b3:27:42:c9:6b:fa:54:98:04:49:71:c6:93:
a6:e9:83:27:78:2c:54:ee:18:a5:10:5f:5b:8b:97:16:17:bf:
6d:d5:56:a2:06:c4:d0:07:3a:88:79:78:dc:28:62:5f:8d:2b:
7a:2d:36:a1:dc:38:31:42:6d:d5:24:23:5d:8d:4a:5a:e5:4b:
67:74:50:c0:54:a1:93:04:d0:6a:ce:8c:af:65:3d:c6:5b:56:
e5:5b:dd:9e:4c:3b:65:8c:da:41:cb:96:1a:e4:88:e7:32:c7:
cf:e2:3d:93:c7:56:02:fe:9a:af:ff:e7:99:0c:13:19:a9:10:
cd:00:26:65:b6:61:d9:b9:13:e9:99:b8:97:7b:97:ab:cf:67:
56:ef:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:34 2026 by rpki-client