Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: JcdR/foYMnh6KV6Bh/pB2qoujAVyVy3PNIHX3mMNji4=
Subject key identifier: E9:CE:C1:20:3D:6D:AA:B7:33:D2:CA:E6:71:29:15:78:FA:54:FE:31
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 019D265FF64B30F5001F0FD80928062761A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 0C53
Signing time: Wed 25 Mar 2026 19:01:56 +0000
Manifest this update: Wed 25 Mar 2026 19:01:56 +0000
Manifest next update: Thu 26 Mar 2026 19:01:56 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: ZJAJA/bUZzFnnquEwtiiztzirDbxil4UU1N/2vNsTgY=)
2: IWvsOje1ZxTQJm3iMyMgDBCOgIE.roa (hash: kaYliqjJkqMdXwb3B1wUhcuY3L6iumjr0MlG0shhuGo=)
3: sP7IVsNCNnn_B2GtU6Sg79Zwhew.roa (hash: izWuWKp2wnvE2HYeue8Y8Mj2HM1TQYV8MhNOeFXRVUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f6:4b:30:f5:00:1f:0f:d8:09:28:06:27:61:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Mar 25 19:01:56 2026 GMT
Not After : Mar 26 19:01:56 2026 GMT
Subject: CN=e9cec1203d6daab733d2cae671291578fa54fe31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:b9:63:97:f1:fb:cb:8c:d6:72:2e:6d:72:
1e:b1:f8:2c:40:2f:68:59:d6:9b:c0:8f:b8:c7:04:
6c:8a:d8:e2:67:fd:8a:9d:ca:78:7a:3f:b3:f2:d0:
be:db:ec:f2:28:77:4d:5c:a0:b9:09:29:64:fb:7d:
f4:2b:91:cc:08:81:9a:42:1a:34:0f:11:4e:65:14:
1c:dc:29:38:1c:4b:b9:94:ca:84:b8:ce:59:1f:c3:
9a:25:5d:b9:55:76:99:ee:fc:41:58:3d:43:04:10:
a7:c3:84:f9:4c:22:1a:b3:4f:28:40:f4:b2:4d:ce:
73:9e:ed:66:fb:87:fa:ae:a8:7a:44:8f:76:b9:af:
2a:d0:b4:04:0e:27:c4:f0:4d:a9:0f:50:b8:aa:e0:
f5:e8:c8:ab:6c:81:90:2f:6b:b5:da:7a:6e:6e:fd:
c4:b8:37:f7:cf:04:ff:be:7f:cb:6c:cb:b4:88:85:
a5:a8:12:72:17:aa:fb:cf:91:78:fc:8d:95:74:0e:
5c:4d:7f:ff:73:ae:6a:e9:4a:2c:b8:6c:22:16:01:
9f:46:bb:4c:fd:cd:e7:ec:66:ec:9b:a6:9b:6e:70:
99:bb:bc:b2:77:b3:61:9e:c6:e4:dd:ee:b3:ff:4a:
1a:71:2a:b8:77:be:db:35:70:1e:ff:40:1e:2b:2b:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CE:C1:20:3D:6D:AA:B7:33:D2:CA:E6:71:29:15:78:FA:54:FE:31
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7e:87:a1:fe:8e:a8:56:eb:7d:54:66:b7:6a:0e:f3:ef:2b:
1c:8a:b2:0f:e5:43:9d:1e:b5:e3:27:b4:22:ca:db:16:9f:14:
61:60:1a:96:63:78:c1:8e:ea:04:41:ba:77:69:2c:a9:6d:8c:
62:e0:bd:e3:18:6e:06:09:c3:9e:55:f1:7d:1b:52:ce:da:c1:
56:49:35:d2:e9:87:3a:73:8b:6d:9c:5f:81:57:15:29:03:fc:
36:63:0e:08:d3:a7:6d:92:f3:51:80:ba:7a:22:a9:40:0e:02:
e3:fe:9b:f6:57:dd:05:96:e4:d5:ef:f0:92:23:75:55:76:b7:
1a:a5:d5:4e:6a:8d:9c:0f:30:10:70:6f:b0:a9:8b:61:a7:dd:
84:23:27:df:02:49:13:09:03:cd:3c:c3:18:2d:ad:91:12:95:
bf:10:7f:f9:6d:f6:e8:9a:d7:c6:5d:1e:64:52:fc:4f:1b:0a:
86:77:4f:23:84:ff:18:69:fa:06:9d:86:d9:f5:5e:24:7c:5e:
5f:27:45:08:ea:64:7a:fa:58:92:b7:e0:78:d4:f1:12:87:36:
b5:70:e3:10:ec:3b:f1:e8:04:49:bd:bb:f9:6e:77:29:07:7d:
e8:27:b6:f4:8e:2b:a8:85:ca:1b:e4:60:26:de:3d:69:ab:53:
2c:c6:7e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:04 2026 by rpki-client