Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json)
Hash identifier: AVUog4roEF22vXCCMVrtjeKjbDtRM4pITTNUuVKlOs0=
Subject key identifier: 8A:DE:0A:C5:12:14:8C:50:B6:91:40:57:F7:5F:4C:97:33:EC:11:92
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial: 019D27A8C6FDCF65319D34B02956F3DE942B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
Manifest number: 10F2
Signing time: Thu 26 Mar 2026 01:01:05 +0000
Manifest this update: Thu 26 Mar 2026 01:01:05 +0000
Manifest next update: Fri 27 Mar 2026 01:01:05 +0000
Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: 7vuJHqYwGhozTv00Opo9YrPHKcUSabBV76lxjZRfgcs=)
2: H6y7FRGe2OSBbFIjaqZT3Ye0FjM.roa (hash: U6dbvSJYipDEAI96TSbJISnUyXjBkTAwoHhgv4g0uO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c6:fd:cf:65:31:9d:34:b0:29:56:f3:de:94:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Validity
Not Before: Mar 26 01:01:05 2026 GMT
Not After : Mar 27 01:01:05 2026 GMT
Subject: CN=8ade0ac512148c50b6914057f75f4c9733ec1192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:33:4c:75:f0:06:e2:bb:4e:30:39:e4:b6:
b4:46:6a:20:7a:44:86:75:b8:83:a1:eb:2a:d2:6c:
13:b6:e6:b4:b9:40:2c:5b:02:69:ac:c1:e1:51:52:
c4:be:a8:6e:48:f5:30:1a:ec:a0:8d:69:d7:2c:5e:
ad:47:23:25:be:db:b7:f9:75:ce:61:52:73:0b:08:
70:28:6e:fe:e4:13:11:39:03:64:c4:82:3b:3a:6e:
b1:c3:67:57:a4:d5:b0:67:64:3a:dc:34:bf:bd:e4:
d0:d1:05:72:28:09:69:6c:09:cc:f7:f9:e7:da:ed:
64:5a:54:b3:92:fd:cd:9d:c4:eb:39:f0:ad:e5:41:
8f:3b:6c:3a:f0:c6:cd:1f:6f:0c:ea:6b:6d:be:b3:
3f:53:16:36:2c:c3:3b:5b:0e:45:d9:a9:c0:ef:c1:
42:34:d5:f1:77:99:77:11:13:45:01:f3:20:29:ea:
72:f1:06:ce:8b:c3:3e:f8:41:24:7a:89:34:af:1a:
fc:e2:bd:56:fe:6f:1d:60:2e:89:b7:7b:38:9b:71:
17:78:eb:e4:27:67:24:d2:22:b8:bb:ae:46:33:b5:
84:fc:47:a9:e1:11:fa:33:ea:fc:3a:ec:e5:60:31:
1d:2a:ac:c7:96:b1:63:77:79:13:4d:6d:0a:48:17:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DE:0A:C5:12:14:8C:50:B6:91:40:57:F7:5F:4C:97:33:EC:11:92
X509v3 Authority Key Identifier:
keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1c:ac:3a:07:48:d9:74:c6:52:2c:2c:55:bc:f5:ac:91:11:
c5:8f:b5:60:f4:e1:3f:fd:68:06:82:83:70:5d:64:51:52:86:
23:e0:48:03:7a:05:8c:d6:ad:68:72:9d:50:6d:2b:39:63:59:
f5:1b:90:2b:9a:85:09:5f:52:46:ad:6e:cf:33:58:14:5f:c7:
9a:2d:b2:88:61:6e:73:0e:40:d3:23:0c:b9:94:c5:d7:ee:08:
8e:b6:1f:6e:6b:d0:47:d8:6d:a3:30:87:26:09:9e:28:1c:30:
8c:fb:8e:a5:ac:c6:79:be:20:bb:b3:60:f8:69:4b:e2:52:a7:
40:33:f9:fa:0e:b5:4b:b3:86:54:a1:89:cd:72:0e:77:64:25:
ee:85:89:05:2c:bd:94:78:fe:08:79:bb:86:a3:5d:01:5e:32:
c4:10:c7:3e:fd:d4:10:20:a0:7f:be:34:53:54:d4:b3:c1:aa:
a3:7a:b1:d7:6e:33:b7:01:d3:3a:d1:55:35:5a:c0:f7:57:ce:
60:6c:a9:3d:7a:8f:74:2d:85:c3:67:6a:c3:7d:64:f6:d0:39:
94:db:21:b7:a0:54:0b:aa:53:c3:98:dc:78:30:1c:2d:b5:4b:
f9:59:75:49:28:ed:b5:ba:a1:3c:a6:cd:12:7f:2b:35:47:43:
d0:cd:bd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:08 2026 by rpki-client