Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File: m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier: WWpIxTQLmBP3Qz+YyGwI/dk5djnqqUZiq5g/y26iSIk=
Subject key identifier: EA:10:1B:28:7F:D9:4D:06:B4:D0:9D:7A:38:68:D0:C6:4D:AB:BD:FC
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer: /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial: 019D28BB383205EACEC9498EEAD41BE428FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number: 1072
Signing time: Thu 26 Mar 2026 06:00:51 +0000
Manifest this update: Thu 26 Mar 2026 06:00:51 +0000
Manifest next update: Fri 27 Mar 2026 06:00:51 +0000
Files and hashes: 1: QP9Oe3_zJ6yuF3kAViKnMINjXbE.roa (hash: kIkr4A1mpUTupFUwElbDch1PJM/dciLvNLfYLTlKNU4=)
2: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: aQtKr0pQs21jTIergvZn4hwCRNF0Nc7eoVhEe5Xgrj8=)
3: ymQkqx6vad1BOcZP1A2ksCcXq8M.roa (hash: Mkk7iKFq74kIN4TjOOrbxIdyK2vnb7PkhTT7pKGa0yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:38:32:05:ea:ce:c9:49:8e:ea:d4:1b:e4:28:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Validity
Not Before: Mar 26 06:00:51 2026 GMT
Not After : Mar 27 06:00:51 2026 GMT
Subject: CN=ea101b287fd94d06b4d09d7a3868d0c64dabbdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:66:b7:c4:9c:95:bf:72:83:12:f1:39:1a:de:
96:fa:7d:92:db:13:06:56:46:ea:18:6e:16:fc:9a:
52:c3:85:c5:b7:23:97:2c:fa:ec:7b:09:d2:87:99:
c1:1e:39:7b:11:10:7e:94:54:33:4e:54:50:fc:b2:
f9:06:bf:8d:f4:4c:f0:63:9a:44:1f:ff:30:3e:b6:
e3:a8:fa:b9:20:5f:7c:2a:e9:94:f4:44:f4:6f:d5:
4e:eb:95:96:c5:df:3b:52:6e:b3:be:40:48:ad:71:
7b:12:a6:52:ef:f5:5f:ae:a6:06:11:ca:43:71:8a:
2b:5b:4a:77:fb:19:22:5a:75:b4:1b:63:43:03:81:
f8:2b:38:66:03:8f:91:7b:c6:b5:31:3b:58:7c:15:
d6:62:99:81:0b:b6:c9:b5:3e:8f:30:c1:39:85:23:
bd:51:1b:b1:b6:46:6b:11:a7:ba:cf:fd:f5:e0:29:
f6:95:cd:2f:a4:b0:fb:0a:63:28:7d:bf:7c:77:e6:
3e:2a:33:ff:8f:91:b6:ca:d9:a4:6d:57:6d:80:57:
33:87:08:cc:68:5f:d5:98:91:60:29:eb:fb:df:a3:
81:47:f0:85:2b:bf:8e:88:37:52:75:50:51:b5:98:
d8:8e:5a:af:89:2c:b8:10:ad:70:1d:9f:90:e8:7d:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:10:1B:28:7F:D9:4D:06:B4:D0:9D:7A:38:68:D0:C6:4D:AB:BD:FC
X509v3 Authority Key Identifier:
keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e0:87:82:5b:8f:c2:40:06:8d:bf:d6:32:89:cb:b7:17:56:
e3:89:65:e9:69:7c:81:26:84:0f:b1:5e:7e:2d:34:2a:d3:23:
45:d2:99:c5:5b:47:5a:37:70:36:ab:dd:a0:24:65:5c:75:9f:
74:1b:d3:3e:44:bc:67:26:37:40:0c:38:24:5b:ce:30:9b:a4:
4c:bf:d9:74:0c:56:77:7b:d6:22:47:a5:b8:e8:eb:00:67:f0:
05:b9:d6:aa:a4:e6:5a:3e:fe:52:c2:90:92:02:41:ee:fe:f8:
9d:91:d7:61:06:9b:f7:95:c6:fb:80:14:84:87:af:03:33:de:
ed:9c:c3:54:d1:ff:20:0c:31:69:ca:be:d2:ff:dc:8d:ec:38:
b6:e0:e8:7c:06:1c:c8:d6:7a:e9:6d:3c:c7:f8:51:17:ce:ec:
96:2d:82:18:11:4e:1e:c9:a0:22:d5:dd:d4:3c:9a:53:9a:1a:
dd:4d:b8:08:4b:de:bd:8c:98:d8:e0:21:0a:0f:f1:25:ee:d5:
7c:06:b0:52:99:ab:d9:3f:34:02:0f:50:b3:77:2b:b6:4f:5b:
3e:3d:a8:e5:3b:fd:6d:51:df:d7:87:e8:eb:ac:ca:f7:43:49:
70:7e:5c:67:26:49:5d:16:47:d6:56:11:1f:f5:99:13:a8:33:
7d:14:8f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:07 2026 by rpki-client