Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier: qlVDq/TCBohfELuhPxspltNPJ8TpGOSbmiEh1Ux4nug=
Subject key identifier: 29:A8:F8:3E:C2:93:57:71:85:5A:E8:E8:03:B4:33:E5:32:2D:27:0C
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial: 019D273ABF95578A9C6FA2D2E7D035F3BBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: dbil3Qdu22R7nVrfuKjFlyFFH3t16Fx87Z9GEUYySxw=)
2: o0zy2PIJKQJUCGXdBu2GTTLsK1w.roa (hash: JMAJ2diz0rDcpnOliCZ1PbTa/8anGPpInGm0KE37C9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bf:95:57:8a:9c:6f:a2:d2:e7:d0:35:f3:bb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=29a8f83ec2935771855ae8e803b433e5322d270c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:01:ce:76:b7:ec:0e:03:e9:25:21:d6:75:
a4:d3:97:b2:3a:71:4b:cf:9f:11:d4:49:87:ed:c2:
f2:49:51:2f:f0:39:04:27:ec:9f:af:64:03:79:da:
f4:a0:bf:19:39:99:6e:99:97:64:19:a3:69:cb:de:
be:3e:a6:7d:77:0a:46:8a:b1:5e:f1:f8:2f:a0:6f:
99:64:2c:12:dd:e2:dc:ac:df:29:7f:b8:04:70:c2:
72:85:cb:83:3b:17:31:e7:72:de:bf:1e:17:4c:e4:
c0:22:71:9b:77:9d:e3:dd:04:f7:26:0d:f1:2b:d3:
12:c1:49:f0:b3:1b:f3:a0:2f:3a:7a:77:2e:0a:e5:
04:ea:c3:43:23:bb:84:9a:c9:64:bd:e5:d7:be:15:
b4:f3:48:a6:56:66:e2:d0:6c:dc:bb:2a:a5:7a:34:
b3:38:92:36:34:00:d6:5c:e7:e4:37:d2:73:aa:d1:
d9:fa:39:24:cf:a5:01:cd:3d:35:7b:9e:fb:c3:91:
ba:65:49:64:ad:91:97:a0:5f:96:97:5e:b3:df:58:
34:98:29:4b:9d:30:21:82:9a:bd:1e:ea:38:db:1c:
06:97:ef:76:05:09:be:a7:9b:7e:e6:ee:6d:01:0d:
3a:64:ca:3d:2b:e1:6b:4c:f7:9f:6a:34:07:6e:1b:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A8:F8:3E:C2:93:57:71:85:5A:E8:E8:03:B4:33:E5:32:2D:27:0C
X509v3 Authority Key Identifier:
keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ff:3e:64:c1:72:26:88:f8:40:eb:de:bd:81:ee:7b:47:ed:
0d:bc:4f:c7:a4:bc:be:71:8c:b5:06:74:03:3a:e1:be:6f:37:
75:e1:c1:85:03:2f:82:ed:e4:16:56:9e:cd:f7:c5:f0:91:c9:
6e:7b:19:b0:59:59:52:ad:ad:dd:89:6f:1f:12:01:e7:ec:50:
6e:f4:7c:68:e0:ae:25:a6:d5:74:b6:19:84:43:5a:ad:0c:9b:
f5:15:49:2f:ed:e4:c5:86:00:d1:57:84:7b:f1:dd:f3:a9:01:
c9:a0:d1:32:ce:3d:9e:30:02:4d:a4:6e:56:18:05:c8:d6:23:
16:67:dc:51:a0:21:51:21:84:b3:9f:7a:e9:0a:c7:3c:30:d4:
60:f0:e4:72:9b:be:bc:48:fb:11:ea:17:e8:74:e9:d1:17:99:
c4:12:36:eb:ca:74:0c:09:9b:b1:5c:bd:c3:f1:ff:b6:7d:c5:
0c:4b:98:2b:c4:bc:e5:b3:04:5a:18:92:d7:10:c1:12:00:d5:
71:4d:c0:c2:1b:8e:1c:8f:59:19:90:d5:c9:8f:39:62:14:3d:
75:f7:dd:08:a0:b8:3a:3b:2e:32:2f:d9:51:26:1f:5c:f1:da:
86:75:54:47:02:89:74:ae:b2:37:05:e8:f9:a6:7a:0f:28:af:
dd:e2:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:55 2026 by rpki-client