Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
File: f9gGjnNZlrir5x24LODWupZcJTs.mft (raw, json)
Hash identifier: VWszHtOXvpTZfaIDv4HIUDzdf9BSL4E/e6cGyPtW6MQ=
Subject key identifier: 11:4A:ED:14:11:27:61:E7:09:7F:36:08:FF:35:AC:57:47:21:9E:91
Authority key identifier: 7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
Certificate issuer: /CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Certificate serial: 019D254CDAD8DED6316288CF464850926C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
Manifest number: 66
Signing time: Wed 25 Mar 2026 14:01:26 +0000
Manifest this update: Wed 25 Mar 2026 14:01:26 +0000
Manifest next update: Thu 26 Mar 2026 14:01:26 +0000
Files and hashes: 1: 4wayKTDL0C1-3fX0fDk8_7nVVzE.asa (hash: vPLSw9x0tUrEHh7KFV3i9yLuIjiZTpCl5KAxhMoqI9Y=)
2: FL1sqcRejDIMSh0sMhL_ZqJw4wM.roa (hash: cBRPTc3S/Wcw8/oeYxpadl2du6Hf1WSqA+6+KI3HY8o=)
3: f9gGjnNZlrir5x24LODWupZcJTs.crl (hash: NkhYjgfqIJkk0pGFbSzTQwD6yXI5pVnmeLhnbtPDZY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:da:d8:de:d6:31:62:88:cf:46:48:50:92:6c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Validity
Not Before: Mar 25 14:01:26 2026 GMT
Not After : Mar 26 14:01:26 2026 GMT
Subject: CN=114aed14112761e7097f3608ff35ac5747219e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:24:9d:b6:b1:61:b0:a7:4b:36:04:e8:8f:
14:7c:69:ff:0e:16:c3:61:51:b5:60:58:dc:18:65:
45:1d:8e:66:7b:09:d1:73:fc:c4:8f:da:95:c7:ae:
14:04:50:cc:b2:38:39:ff:79:aa:c6:b0:46:2d:56:
e1:39:2d:31:2a:ac:64:d0:f6:33:7b:63:18:cb:52:
e4:83:47:e6:85:5f:b4:d1:32:81:35:e9:e2:50:1b:
26:26:0c:49:43:42:aa:96:ff:75:5d:68:b4:7b:b4:
b2:4f:f8:2d:ed:b1:5f:0b:fa:44:a2:32:4f:f1:9a:
3f:25:67:60:30:c4:e6:34:b8:f0:7b:0c:d5:89:8f:
3c:13:c5:f0:88:bf:ee:a7:b5:3a:08:93:91:7e:3e:
d6:3c:fd:45:e8:31:70:bc:1b:58:0f:a3:3f:a5:fa:
76:74:df:21:a6:f4:7e:97:e6:e5:2e:54:23:d0:c8:
75:67:e1:55:6d:3c:0a:e1:36:02:b9:3f:f3:e2:b5:
29:26:b8:b3:0d:97:ba:e7:29:f8:ea:a5:2a:24:fe:
f9:38:79:ab:bd:59:51:22:a5:16:2b:38:43:c6:ad:
bb:3a:9c:a3:de:2f:1c:e5:f5:74:9a:08:c6:db:45:
87:06:6d:3f:7b:da:29:9b:85:cc:29:04:87:e6:41:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:ED:14:11:27:61:E7:09:7F:36:08:FF:35:AC:57:47:21:9E:91
X509v3 Authority Key Identifier:
keyid:7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0a:46:35:e2:6e:d5:28:bd:ca:51:7c:0f:ae:6e:eb:f6:20:
db:f1:3e:a2:ba:48:2a:1a:ab:97:b4:31:94:0e:6e:ae:43:71:
dc:dc:6d:ce:f5:1e:14:f7:75:cd:6d:54:85:38:a5:2b:47:b1:
7e:c0:3b:56:cb:20:c2:78:1f:8a:01:72:76:a1:aa:4c:ce:25:
b3:3d:42:75:3a:9a:81:c1:be:bb:94:ea:ca:b2:6a:22:91:63:
f4:af:20:d0:a6:e7:ae:0f:6e:4a:c0:52:be:ab:24:35:98:0f:
b7:11:96:5d:e2:99:f8:e7:2c:e9:38:77:c3:05:ae:9b:29:72:
7b:69:04:0a:4a:1c:d9:6e:a4:62:cc:7e:22:e0:79:1f:41:78:
0e:aa:06:c5:06:93:88:28:fc:32:0c:a6:48:76:64:64:7c:44:
f6:1d:15:9b:2b:2a:5c:28:47:76:5d:11:67:b6:7f:d6:b3:34:
8c:0e:94:77:2e:ad:37:4b:f6:a0:40:c1:9d:7e:64:1d:ee:9e:
de:29:c3:66:cf:91:bf:b7:38:3f:44:6c:71:58:f0:d8:be:72:
7c:cf:bc:9c:bb:65:fc:33:56:0d:51:52:68:98:85:4f:c8:4c:
cc:aa:7f:36:40:b3:ed:c5:cb:77:aa:7c:6c:4b:e7:16:da:ce:
c4:7d:03:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:31 2026 by rpki-client