Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier: kdV2jjvYW7kTRYQL0536Mm2FUeE7CXbzjaYMK+vaKY4=
Subject key identifier: 41:D4:98:B2:FC:39:4B:5C:E4:DC:DE:E8:30:00:DE:D2:1F:60:DA:23
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019D27A8A65808B7018D8DD8EAF7F5A6749D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number: 191D
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
2: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=)
3: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
4: 9QOoNpd76OPVl49TOCbIH5K-Xuc.roa (hash: iHslUv59RlEtWqhiDG50P5ptUXczZiGq5UnFqrvblIU=)
5: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: RZ0PFqGaxKwXNceKnfnXZpa96zOJtJYvU2/aVhY9uM0=)
6: Xlo2dAjL9Nrixz0iYa0SAY5SYBc.roa (hash: Bg+pB+Sxi3uvjFsg12Ez9WbynlaVnSIe2mie+DFh+2c=)
7: ih0mxzFH0MUiJNPNZCziaJJuGMU.roa (hash: Xd9Xc8lt28a42B6a+zDM/Y1fYiUSVn12an9g9QH+NKk=)
8: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
9: wUIQuE5RAl6yjUP9k5UHyxLRIPw.roa (hash: NCMtFKefqHShmwgJRWPFU+3g5xSc9WX2hSElA5v9Foo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a6:58:08:b7:01:8d:8d:d8:ea:f7:f5:a6:74:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=41d498b2fc394b5ce4dcdee83000ded21f60da23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:e4:91:51:68:14:2f:dd:58:f3:39:36:50:
72:b3:38:3c:7f:71:3a:dd:3c:27:82:ba:86:75:61:
fe:0e:83:c0:f0:4b:95:9a:83:96:17:3f:43:b2:8b:
40:a3:8f:b1:c9:40:ab:58:b6:11:77:93:9c:67:0a:
ae:c3:dd:6c:39:d1:15:48:f1:b7:61:9c:3c:25:b8:
5e:8d:19:fc:26:d5:0e:62:c7:24:5f:bd:68:cf:af:
0d:f0:76:be:f5:92:bf:86:5a:d6:2b:bb:6d:3b:99:
85:71:c0:6a:d0:ef:04:ca:0f:5f:8a:9c:3e:41:39:
d9:32:1f:5a:32:72:de:88:f8:75:fd:87:20:e6:c4:
e8:f9:88:3c:bf:38:75:56:a9:0d:4b:fd:ba:61:3c:
6b:84:26:6a:21:ab:0b:43:eb:86:1e:51:64:0a:d6:
91:ef:3f:98:c9:0b:93:d7:12:d4:db:29:92:5b:40:
80:8e:1b:02:b5:29:d6:97:38:72:b9:db:66:1e:29:
4a:05:9d:4b:c9:24:df:49:bb:64:b4:af:bc:62:be:
54:26:4a:57:5d:95:ea:2b:3a:4c:fe:b0:52:08:77:
96:36:bf:00:d6:c2:79:31:26:38:6b:0b:01:85:2c:
6c:e0:e1:58:2d:3f:0e:93:07:b6:ba:44:33:72:e3:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D4:98:B2:FC:39:4B:5C:E4:DC:DE:E8:30:00:DE:D2:1F:60:DA:23
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3c:df:11:8d:76:00:31:f2:a1:27:3d:1c:54:2c:e7:ba:1b:
c0:b1:0c:7a:77:fd:8a:87:c4:9b:c2:29:72:fa:20:7a:bf:0a:
ce:d8:8b:51:bd:e0:fe:c7:58:ab:2b:4d:de:4e:37:48:7c:98:
1d:a5:db:51:0f:cc:24:5b:68:a3:5b:ea:bf:82:79:6b:73:a7:
49:05:b4:a0:db:fb:70:4d:56:82:1a:ca:36:0e:67:66:8c:2e:
85:5c:dd:4c:12:4a:e4:84:43:58:da:a9:76:d5:21:56:86:24:
07:14:8b:64:66:d1:13:fa:f5:4a:87:df:6c:be:20:36:16:65:
f6:ad:48:a1:8d:9f:f5:73:77:c8:a3:1d:6e:ad:8a:62:a3:b9:
a5:88:ce:e3:da:35:c6:f7:99:69:66:96:30:05:7d:63:3f:81:
57:fc:cc:49:13:d4:0a:eb:f8:a8:b5:1f:fd:79:84:db:1f:ff:
f1:d4:ae:24:8e:0c:c1:2e:9b:e7:c6:68:87:97:7e:0e:97:ad:
56:75:9a:27:87:70:ba:07:4f:1f:69:5d:49:8e:38:b4:48:55:
20:d3:94:51:d8:f7:86:14:1d:9f:13:9b:5a:e8:13:df:62:ff:
6c:9b:64:46:5e:25:b4:5a:2b:c9:dd:c5:45:d5:8b:c5:66:be:
2b:b5:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:11 2026 by rpki-client