Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: HMt0suvxmrPnTldCzRuaWmT0CtHesm83cqlRBblniTo=
Subject key identifier: 6D:B7:C9:D1:A1:C9:F4:1E:CA:AE:D6:E4:2F:AC:24:C4:98:5E:42:E8
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 019D26CCB65BB070E313F33730D9886401A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 0647
Signing time: Wed 25 Mar 2026 21:00:43 +0000
Manifest this update: Wed 25 Mar 2026 21:00:43 +0000
Manifest next update: Thu 26 Mar 2026 21:00:43 +0000
Files and hashes: 1: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: JcBPVpMQWNBsWTZkxD9Lpb5Da/gywH0fQ7ZTwOXN9jI=)
2: cyWhzyh3zLHJFuzJ5qvmESBkuxg.roa (hash: nSoHpM2xTBolqQJtZsO8W8SsMxuMlo/mxOm1BoRL8ec=)
3: zlPMF36fK507KHhaEr_DLJ54RXA.roa (hash: kLxUmeXAHI9feHJRDQlAlUFvp1o7+yM0NCeSQpcomMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b6:5b:b0:70:e3:13:f3:37:30:d9:88:64:01:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Mar 25 21:00:43 2026 GMT
Not After : Mar 26 21:00:43 2026 GMT
Subject: CN=6db7c9d1a1c9f41ecaaed6e42fac24c4985e42e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f4:09:e6:78:c4:86:b2:bb:7d:db:d2:5c:e7:
59:0c:df:60:a5:69:c4:6c:26:aa:0d:56:69:3f:f4:
cf:fa:56:ce:02:4c:84:8c:b0:b2:65:87:cc:9f:b6:
10:32:52:6e:99:90:7a:df:56:05:65:ca:5e:68:c9:
76:3b:cc:44:47:c3:bc:47:9e:ff:32:51:9d:06:55:
fd:22:51:5d:49:07:eb:4f:99:14:44:be:01:66:44:
6d:06:e9:4b:e6:8a:86:ce:0d:df:1e:64:db:2a:61:
7c:ce:3a:cc:da:24:e1:92:a3:1a:c3:51:33:79:9e:
ca:c9:1f:e4:1d:75:4b:af:e9:ab:5f:eb:44:71:8b:
ae:8e:42:7c:53:76:4a:b9:7e:41:65:f8:11:76:dd:
47:b8:2f:73:12:5f:a3:e3:4d:4c:3e:92:94:c0:77:
ac:1d:2f:ef:33:c1:13:61:3b:af:fa:d5:35:bc:9e:
2f:20:ee:57:77:ba:83:27:e6:e4:7d:12:d5:c8:4a:
35:87:0f:8f:67:46:ac:5a:d5:f8:02:d8:e8:09:03:
66:4a:f0:d5:71:af:60:c7:16:a5:cc:86:85:0f:f6:
da:4e:08:67:93:4c:55:da:a2:2d:17:a6:cb:bf:97:
4c:c4:85:8a:e9:2c:c5:81:b7:ea:09:42:9d:30:fd:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B7:C9:D1:A1:C9:F4:1E:CA:AE:D6:E4:2F:AC:24:C4:98:5E:42:E8
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:73:c0:b2:f9:13:fd:dc:01:cf:a5:b5:4a:f4:da:cf:54:a3:
48:e2:1a:89:da:86:a0:cd:74:49:42:65:59:a1:d9:ad:c5:d2:
12:2d:02:9c:c5:39:a9:e8:a7:9e:8f:b1:bf:45:2b:ac:30:e1:
69:6b:ad:2d:12:9c:a1:f2:ea:b0:53:ce:41:a0:05:22:41:98:
95:9f:25:32:4f:f9:71:b5:31:e9:3c:60:58:26:09:af:dd:0c:
7f:81:1d:73:42:9a:e4:8e:a9:e5:e1:4d:2a:db:40:49:4f:e3:
f8:aa:72:c6:60:4c:90:cc:81:12:3d:fd:92:e3:1c:9f:f1:89:
4d:d6:33:06:75:1f:3e:e7:08:ae:56:27:7d:71:b0:1a:3d:5d:
4a:93:15:fa:b1:bf:39:97:0f:b2:80:68:f8:89:09:29:38:e1:
f4:0c:1d:6a:71:e5:0d:7e:9c:85:e1:9d:02:34:44:87:1f:94:
65:b9:20:81:17:f9:81:97:e5:0d:71:b5:11:61:75:7f:9d:4b:
17:f4:9e:f4:95:90:56:78:75:29:9c:c5:4e:f3:de:06:bb:89:
bf:69:13:a6:0b:56:6b:23:ce:72:20:16:49:32:e0:ca:49:a2:
e4:bb:94:c9:71:e3:60:ec:61:ef:d0:66:d8:50:9b:d4:91:a1:
03:8e:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:29 2026 by rpki-client