Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: aIqPnW7WvS1wxPT4/SmXRm0emhl1+/mRZDvfYUcToNU=
Subject key identifier: DD:3C:8A:36:F1:7D:DF:67:99:39:AB:29:CE:CB:04:06:9B:75:55:61
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 019D32635186B4313E39A80F8993223DFD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0D5D
Signing time: Sat 28 Mar 2026 03:01:02 +0000
Manifest this update: Sat 28 Mar 2026 03:01:02 +0000
Manifest next update: Sun 29 Mar 2026 03:01:02 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: chgZBDXmg+U+G9Pl6NHo+GBEGeum9sjEr2uVssWrH/A=)
2: xhDUoIsJaJCqOA6VTkyeMee_Z9s.roa (hash: bDCv1HCZJO4EbMKAw0lf46zS80bqNn1qKkmrw6hFSH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:51:86:b4:31:3e:39:a8:0f:89:93:22:3d:fd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Mar 28 03:01:02 2026 GMT
Not After : Mar 29 03:01:02 2026 GMT
Subject: CN=dd3c8a36f17ddf679939ab29cecb04069b755561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:72:8c:d0:ab:0b:6f:53:d8:28:27:92:71:
28:b5:0f:1c:a1:cf:2f:51:ca:97:ac:50:63:fc:9f:
1e:57:34:2d:0d:e6:83:2e:cd:e2:75:c3:31:e4:e3:
36:e9:e4:ce:a4:2e:18:dc:27:f2:62:c1:1b:f7:ba:
96:78:5c:3e:19:73:e5:50:35:84:22:dc:bc:56:5f:
70:62:65:ff:54:04:50:8b:09:9d:c4:12:9b:68:7c:
80:d3:c3:6b:3e:14:ed:dd:6c:e0:b2:fd:1e:a2:d3:
1d:aa:5a:8a:4d:c9:7d:3b:2c:74:1b:38:82:f0:0b:
6e:27:3e:3b:1d:ba:50:36:d1:6f:63:70:c2:19:76:
cd:e9:dd:b2:7d:84:e2:61:d7:19:25:10:9d:29:8d:
0f:de:77:1b:59:9a:91:da:e1:d4:9b:71:9f:2b:98:
61:c9:17:5f:b7:2c:86:b8:c7:38:0d:bd:91:44:03:
93:21:0b:79:51:91:35:c5:02:33:4a:c3:3b:e1:96:
a0:a2:39:b1:c2:41:b4:4a:27:b9:07:88:7b:d0:6f:
55:08:f2:3b:98:57:ae:52:c2:6f:20:9a:cc:33:45:
4b:51:1e:93:22:4a:4b:64:78:5f:6c:c8:af:13:4c:
15:f0:2a:e0:3b:12:4b:d9:a7:ab:20:ca:30:0f:01:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3C:8A:36:F1:7D:DF:67:99:39:AB:29:CE:CB:04:06:9B:75:55:61
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b0:b5:ff:ae:a9:8d:21:fc:a5:fc:51:6c:74:4d:cc:0d:2c:
f9:72:c0:a5:d0:85:22:90:bb:79:0c:4d:35:a8:21:ef:cc:28:
7e:c4:82:11:3c:8b:da:de:c9:16:19:70:23:23:7b:60:6d:e4:
71:82:12:33:92:f4:15:d6:9e:9d:af:f1:0f:7c:51:48:58:22:
07:41:8c:8b:fb:4f:db:be:71:8c:17:c9:c7:f6:06:a6:5b:46:
63:f1:ab:c5:52:0d:2f:c3:a1:2f:03:1e:a8:28:56:de:5e:15:
c3:02:a5:09:97:77:fb:d2:9a:75:2c:86:05:3b:6d:bc:0d:19:
bd:df:cb:c6:07:20:fe:45:1f:31:f9:21:76:a6:e9:67:5a:8c:
01:a1:a6:c9:3b:97:f1:ed:6d:9f:90:44:4d:54:41:1d:27:54:
53:ff:74:10:a5:fe:70:f1:2a:63:f4:67:bc:a4:d7:f1:1b:cd:
bd:ce:58:0c:44:d8:5c:9c:f0:a4:fb:b2:5c:7b:cf:ae:61:34:
84:ea:72:3e:e8:db:66:01:c7:81:74:34:26:1b:1c:37:8a:7f:
33:5a:a7:c3:ef:e9:03:0f:32:83:c7:16:83:8d:54:cb:91:be:
c2:94:1f:34:14:4d:cc:ea:d1:0e:58:ae:a7:25:ea:2d:09:db:
c1:45:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:39 2026 by rpki-client