Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier: qcs0iPA+Lyfq0lWxrwqNUDASpWk05kgtEJkEqHLBEWc=
Subject key identifier: 3C:66:96:68:87:19:AF:2D:70:8D:A8:F2:10:1B:22:BD:E7:A5:04:FD
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 019D270471F590015ED3BE3343A09C23E3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number: 06A5
Signing time: Wed 25 Mar 2026 22:01:35 +0000
Manifest this update: Wed 25 Mar 2026 22:01:35 +0000
Manifest next update: Thu 26 Mar 2026 22:01:35 +0000
Files and hashes: 1: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: Xt9J/VE3D4OiR2ujtemtI10hb2JpLlh8A21vmVZeXu8=)
2: QswWzxGJPrCuags3T3sVZhymc5Q.roa (hash: /433oyyX1AGDgQHu0Vt/5hnmhr/+/BlPoLd3zml5Aq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:71:f5:90:01:5e:d3:be:33:43:a0:9c:23:e3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Mar 25 22:01:35 2026 GMT
Not After : Mar 26 22:01:35 2026 GMT
Subject: CN=3c6696688719af2d708da8f2101b22bde7a504fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:59:a4:63:cf:ca:56:91:b9:da:cc:7a:ee:
5d:cb:62:34:55:9c:c8:eb:f2:6e:34:0e:ba:7c:6d:
55:88:3b:b8:49:f5:b0:39:11:15:3f:eb:3e:ad:36:
38:b1:95:4a:d2:7a:f6:03:92:54:fd:54:e7:ae:86:
5a:f3:6f:7a:57:07:b0:a6:77:f1:33:75:26:9b:8e:
8b:51:c8:8f:ab:45:6f:93:63:42:05:de:ef:bc:20:
9d:f9:32:9a:b0:17:8a:8b:15:07:9a:1b:9a:d3:19:
45:ad:b4:8b:90:b6:5a:14:b7:4b:a6:b1:7b:cf:69:
9a:a5:66:5e:71:39:50:fc:5b:db:ce:9a:a3:92:f6:
70:39:92:03:c1:f8:6e:6a:43:04:76:e7:a4:a0:74:
2c:06:a5:83:31:a9:c0:4f:b0:83:0b:fc:17:88:f3:
36:77:3e:a3:4f:5e:47:3b:7c:38:cc:21:28:ca:70:
dc:b3:51:40:5f:4f:4c:af:e6:3d:c2:4b:66:c6:1f:
ec:51:11:c3:2b:e3:f4:74:f4:05:5c:c2:8c:25:fc:
7e:c4:45:98:0f:d0:9e:0c:0b:ce:92:f1:f8:e7:cd:
f8:53:fb:1b:1f:7e:79:39:ed:6b:26:78:03:c7:87:
8d:24:ec:f2:c9:f8:0e:eb:77:a1:76:28:11:4e:12:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:66:96:68:87:19:AF:2D:70:8D:A8:F2:10:1B:22:BD:E7:A5:04:FD
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c3:f6:6e:9d:93:52:c1:44:4e:36:5e:09:9f:a1:97:10:e5:
41:88:26:de:d7:bf:d3:ad:fb:c5:a2:15:02:d2:9f:cc:34:07:
e5:80:e4:5d:6a:ca:4e:b5:9e:85:3e:ed:99:d2:1d:ff:74:34:
cf:e7:5e:07:0e:fd:af:13:a0:23:41:f9:82:a7:a0:5e:dd:45:
ab:7a:58:64:fc:5c:7e:29:1e:6b:bf:4d:a1:9f:ea:b3:43:25:
58:29:f4:bd:d6:84:de:22:fb:99:0f:be:fd:3c:d9:16:f7:ed:
46:a2:25:01:cc:5b:7b:b9:23:bf:16:8e:9f:95:82:f6:27:21:
37:42:3d:f0:19:44:02:2d:d8:69:44:b2:ab:a8:77:ce:2a:69:
90:02:dc:2d:12:22:9f:b8:f8:cf:da:a8:ad:81:99:d3:cd:9b:
9b:26:15:6d:e7:e6:de:20:e2:51:fe:1d:63:be:7c:ac:b8:66:
4d:f5:3e:2a:f3:e0:6a:c8:56:83:24:df:7d:56:da:84:f3:37:
88:57:b2:71:11:33:e4:25:e5:85:c6:13:34:e6:c2:a0:6a:c8:
e0:36:cd:49:53:c7:84:81:3e:54:d2:54:53:53:5b:56:94:4f:
da:d8:ac:e1:f9:1f:c7:a8:26:c7:7d:41:b0:46:cc:a8:0a:ce:
d7:41:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:35 2026 by rpki-client