Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: MQGJI5w+R3Whxcflyi1emPSK8EA+s9pjUAMsNO/D8sg=
Subject key identifier: 56:A7:52:CC:F6:96:42:6F:A5:FE:99:28:A2:DB:53:00:E4:DB:24:6B
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 019D28168589C5EC44F98FEC3D7DE0B563D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 15CB
Signing time: Thu 26 Mar 2026 03:00:57 +0000
Manifest this update: Thu 26 Mar 2026 03:00:57 +0000
Manifest next update: Fri 27 Mar 2026 03:00:57 +0000
Files and hashes: 1: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: CSlTUlk06YME2OflUJrNrxXmUotk5i30231QQSGmL/0=)
2: epgbRZ451e-4FNMtDUxjsoEsQts.roa (hash: 1bTVs1WZkQ0C5Jeug5kRDuRS7N5Tu6N+va1M7r7izGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:85:89:c5:ec:44:f9:8f:ec:3d:7d:e0:b5:63:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: Mar 26 03:00:57 2026 GMT
Not After : Mar 27 03:00:57 2026 GMT
Subject: CN=56a752ccf696426fa5fe9928a2db5300e4db246b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:69:72:15:7e:1c:31:f0:a5:37:ce:b1:db:
ab:a0:0b:81:1b:4c:ca:d9:e9:94:34:81:46:be:e1:
e2:11:b8:75:2f:95:a1:66:08:64:5a:0d:5e:e6:c8:
ae:e5:71:b6:fc:5a:17:e7:c6:6e:e5:94:48:59:8b:
da:d6:ca:bd:cb:16:8c:ce:ef:58:40:5c:13:7a:df:
38:5d:f2:16:5e:2c:88:e7:5c:85:2c:a7:1b:52:b4:
b3:e1:eb:80:6d:0d:ef:f2:5d:db:21:e2:72:62:aa:
46:e2:fd:74:06:ed:c0:38:70:a3:12:e1:0f:ad:01:
16:ca:e4:cf:f6:c4:28:ac:dc:20:0d:45:6d:94:82:
d2:87:7c:be:fd:23:74:d3:9b:18:b3:b1:d1:2d:0d:
a8:e0:4c:ad:d2:8e:8f:ef:a8:44:e3:57:68:5e:d8:
d7:78:2b:09:c4:ce:6d:18:af:82:28:38:06:0c:56:
75:ff:33:97:ae:7a:cf:66:de:22:50:db:43:72:5c:
bf:32:e9:a0:84:f8:71:2c:f2:7a:08:dc:39:7c:0a:
ac:a0:e6:18:ae:02:66:f7:e5:01:bc:a6:3d:4e:b7:
1e:2a:15:55:01:95:63:11:f2:a4:12:81:88:25:58:
5b:cb:0d:ae:a0:62:b2:82:71:d0:12:8a:b5:87:03:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A7:52:CC:F6:96:42:6F:A5:FE:99:28:A2:DB:53:00:E4:DB:24:6B
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:53:7d:04:f1:d1:df:86:d2:3b:54:fe:97:1b:76:61:8b:4e:
c5:7b:4a:34:19:f7:ec:4c:3b:10:f5:fe:da:04:8b:23:07:5c:
6e:a5:c1:85:3c:66:f2:d9:1c:01:60:37:a9:e1:1a:20:52:f1:
5e:e8:cb:0f:28:8b:74:1f:16:2d:78:27:82:03:f8:1d:8f:2d:
53:82:5f:f9:93:86:66:d4:4b:47:2c:ef:42:48:31:37:3e:f7:
6b:e4:0b:b4:2e:75:a8:0d:f7:96:cc:04:d5:61:c6:9e:83:5e:
e4:22:85:01:3b:e6:e7:06:5f:d1:b0:8b:b4:d7:d0:60:bb:97:
09:08:ba:d5:05:30:90:d2:7b:34:90:9a:60:53:b2:2d:3a:5c:
73:e1:db:9c:b0:e5:56:e7:0c:cb:12:d8:58:7b:9b:1b:e6:fc:
ac:c9:fd:7d:fa:c3:51:b5:a8:f4:b3:66:c8:78:95:3d:2b:45:
6c:87:0d:76:15:54:ab:a7:d6:34:71:73:28:3e:73:2e:ac:a9:
ce:e9:d8:56:cb:e0:51:15:62:18:d1:be:ec:c0:b3:98:c6:39:
98:6e:16:2b:2f:ed:0f:52:e7:f2:05:96:14:18:fa:90:e2:7d:
d8:8e:fe:77:d1:4b:fb:3d:f4:2d:38:1f:1a:1e:4a:cc:b5:ca:
54:d1:d3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:01 2026 by rpki-client