Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File: 9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier: wEsD+f8CDYac64PXOny8DgtP6dk2OdB+oXgspAGlo+g=
Subject key identifier: 1D:F2:0A:CD:01:BA:63:AB:4A:8D:A0:29:F4:F6:DF:8C:19:A2:DF:79
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer: /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial: 019D26CD999D5A6C0F34F56C12A77892B574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number: 09A6
Signing time: Wed 25 Mar 2026 21:01:41 +0000
Manifest this update: Wed 25 Mar 2026 21:01:41 +0000
Manifest next update: Thu 26 Mar 2026 21:01:41 +0000
Files and hashes: 1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: EhO5yDUk653afDuHrWWilfuQjRX3SV4vPavUgZrmX6U=)
2: DYss90R4HIuww1mW6-7xbEjXb4M.roa (hash: UMw2Vyr1TU50SIq5R3Ka5Y9X/0d1jW9A+sz46TwWuew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:99:9d:5a:6c:0f:34:f5:6c:12:a7:78:92:b5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Validity
Not Before: Mar 25 21:01:41 2026 GMT
Not After : Mar 26 21:01:41 2026 GMT
Subject: CN=1df20acd01ba63ab4a8da029f4f6df8c19a2df79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:cd:11:fa:88:57:58:8f:55:8c:c9:8f:3c:
47:0b:87:7d:22:0d:f8:a2:c1:fc:4b:d4:49:f9:88:
61:2d:d0:3b:b1:ad:f7:16:03:d5:72:98:f4:94:d6:
c6:d0:1a:95:fd:82:91:57:26:b0:87:bf:5a:98:53:
99:59:63:59:19:d1:c3:1d:2b:ce:8f:c6:97:10:db:
3c:70:98:e2:bd:f5:36:df:e5:1c:a0:6e:03:58:8f:
11:c3:d6:0f:cb:42:93:71:72:0d:79:14:fc:60:42:
ba:ad:85:40:d4:ed:1f:64:fe:b6:8e:d7:f4:13:eb:
a6:49:c3:52:4f:02:b2:6b:d2:d9:47:9f:6a:c5:50:
ff:68:2a:7f:70:cd:73:b2:c7:08:29:67:93:2f:02:
7c:8f:69:5e:eb:f4:0b:84:22:95:42:5c:a1:d2:ce:
74:06:61:5e:f9:87:f4:3a:1b:f5:07:f1:d2:3f:49:
97:2f:c5:d7:64:70:a0:d0:c4:d8:c5:1f:b8:13:62:
1b:da:08:fd:2d:d8:a4:21:64:4b:25:00:82:e6:e6:
55:e0:05:fb:40:c8:56:50:0e:8b:ba:7f:95:61:6c:
db:2d:c2:00:a5:fe:b2:fa:14:6d:fc:bc:64:f0:13:
21:22:2a:bd:ba:b6:48:af:4e:46:34:38:26:0c:91:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F2:0A:CD:01:BA:63:AB:4A:8D:A0:29:F4:F6:DF:8C:19:A2:DF:79
X509v3 Authority Key Identifier:
keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8b:29:6c:a2:79:50:f6:05:19:f4:94:6c:21:72:3e:e6:d3:
cf:57:a9:4b:ac:f2:88:7d:0f:41:52:c4:04:28:cc:4e:23:97:
7a:5e:27:9b:7c:fc:e2:6a:20:6f:f3:f6:20:74:e8:d7:6b:6f:
15:af:24:a2:86:02:6f:9c:4d:a8:b6:1f:9c:f8:21:51:a3:d1:
2b:5e:95:91:ef:12:83:a8:b0:2a:71:bb:8a:c1:0e:dc:88:b0:
11:14:49:0b:01:85:86:17:b2:20:64:9e:19:da:da:16:f6:d8:
c4:ff:ff:64:ef:bb:d4:f5:65:b7:bc:e8:a4:c1:5d:ac:68:9b:
5b:e4:32:16:1a:ac:22:21:ca:c5:e4:59:3c:7b:ed:1d:cd:5c:
d1:13:73:09:2a:1b:93:fb:35:3b:5f:51:51:02:40:bb:cf:dc:
1d:e6:09:27:0e:ac:87:47:41:c4:89:d7:4d:d7:73:25:55:d9:
58:db:1f:12:f0:bb:6e:90:87:f1:07:53:85:c4:ed:60:6e:2a:
a4:30:60:75:39:ba:c6:74:cb:ab:69:d2:e1:f8:d5:72:ae:bb:
f4:1f:5c:fa:d2:39:27:3a:f3:26:ef:5c:d3:df:60:4d:f4:72:
ee:f0:fe:8d:1e:e0:d0:c8:0e:dc:f5:17:37:0c:30:4a:33:1d:
ee:c9:21:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:18 2026 by rpki-client