Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier: nNNpbDKKl42QmxycnJM0C5/KUON16flH9zAUCtLKU8I=
Subject key identifier: EA:DB:2A:D5:02:2A:79:2A:3B:CB:65:5E:0F:0C:DC:96:B8:B1:51:61
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer: /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial: 019D265F3E76B0329866AD6A981A0092FD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number: 04A9
Signing time: Wed 25 Mar 2026 19:01:09 +0000
Manifest this update: Wed 25 Mar 2026 19:01:09 +0000
Manifest next update: Thu 26 Mar 2026 19:01:09 +0000
Files and hashes: 1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: IWYWk2LSlcZkiOe1RjkD9hBBlENqbN/EVEGddzRvIQs=)
2: WJTr2Tk1_nZlSZj0AI0um0QiPjI.roa (hash: mYhezBwJPYjVc5I7W3f+glCZHfaPOouHpLS/423/Sw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:3e:76:b0:32:98:66:ad:6a:98:1a:00:92:fd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Validity
Not Before: Mar 25 19:01:09 2026 GMT
Not After : Mar 26 19:01:09 2026 GMT
Subject: CN=eadb2ad5022a792a3bcb655e0f0cdc96b8b15161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:11:d8:ca:8a:af:4c:f2:2e:ce:21:1b:88:
62:45:1b:3c:d6:1e:e8:53:41:14:82:69:8c:00:60:
6d:e2:27:64:de:4b:94:7b:a3:1e:da:d6:15:a9:3e:
58:85:ef:bf:69:65:e0:47:ab:3d:db:31:e5:d3:4c:
3f:53:9e:73:50:e9:eb:a0:b0:80:8a:80:09:34:03:
78:24:0c:8a:81:82:a6:e3:25:59:e6:d4:54:7b:87:
33:7b:b4:8a:fb:66:f8:8d:73:d1:bb:fd:a3:0f:19:
89:61:1d:27:c4:a0:cb:3e:15:10:4b:b8:36:2b:d4:
dc:2f:9a:7d:e9:cc:55:b4:92:5f:2a:ed:25:ca:58:
8e:be:94:8d:d4:8a:e2:07:75:f8:c8:f2:35:c0:f1:
d9:ee:3a:e8:95:92:eb:90:8f:01:f4:89:05:9e:08:
3d:77:7d:93:64:75:57:1e:b5:82:4a:c6:af:35:03:
1a:f2:f0:b5:41:b7:45:ed:9a:dd:5b:b9:9a:73:1c:
f3:52:da:bc:24:f2:ec:cd:3e:fe:10:85:20:07:ba:
6c:cd:23:66:93:9d:3b:de:6d:dc:d0:b1:c1:68:56:
c2:db:05:0d:c0:2c:c6:3f:4e:86:e2:6d:fb:e4:2c:
47:f3:b5:f6:b5:b9:f4:b4:e6:c7:ed:37:66:4e:ff:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DB:2A:D5:02:2A:79:2A:3B:CB:65:5E:0F:0C:DC:96:B8:B1:51:61
X509v3 Authority Key Identifier:
keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:13:d5:10:19:9a:d5:a8:41:50:61:b7:85:04:1c:36:29:be:
21:11:e2:15:2e:87:d2:a1:01:98:27:56:a2:2e:74:01:5c:30:
c1:79:2e:64:e6:66:cd:dd:1b:1b:9c:a5:6f:7e:30:c1:7f:f7:
97:a0:02:d6:65:2e:e3:38:72:29:4d:75:4e:d7:76:ea:58:d9:
de:62:db:48:73:0e:55:32:dc:4a:80:86:ac:18:d7:98:7a:98:
27:70:05:ab:da:6d:35:15:85:bc:7f:18:ce:2e:d7:6c:8c:a8:
91:99:62:a5:e5:50:58:01:95:b8:25:86:55:9e:47:2b:b6:f8:
07:5e:36:1c:7b:c9:f1:fc:cb:a2:e3:e0:7d:c0:4f:02:7b:9e:
d3:fe:49:06:7e:5c:54:b4:90:86:a2:b1:d2:c6:44:61:f4:e3:
2a:b5:b5:d7:2b:0b:1f:43:85:ac:8f:ec:c6:58:6a:b2:b5:18:
ec:a9:05:03:a7:bc:3c:10:00:42:e7:4f:25:77:4e:cb:e1:78:
0e:e6:79:63:df:b1:2b:ec:3d:35:da:28:3f:b6:ec:5d:d2:87:
a6:0e:5c:48:49:8a:99:b8:da:b7:3f:c6:d9:43:a3:ca:81:bf:
aa:ab:53:20:06:10:5c:25:9d:fc:c0:d9:37:65:f0:01:70:31:
fc:e7:4c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:33:04 2026 by rpki-client