Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
File: 9r15bwtjNc_hKKXPm5fudoCC7Y0.mft (raw, json)
Hash identifier: po8/TMJ/QyLxfoOHAyNMcLC9R3mPT1HyCkXusy9o8EA=
Subject key identifier: E8:BE:F5:05:CB:0C:53:4C:10:6E:C6:37:58:DC:2B:DB:11:96:D2:53
Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
Certificate issuer: /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Certificate serial: 019D2A045F9CDDE36EB9F894DCFDA6E66B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
Manifest number: 0380
Signing time: Thu 26 Mar 2026 12:00:22 +0000
Manifest this update: Thu 26 Mar 2026 12:00:22 +0000
Manifest next update: Fri 27 Mar 2026 12:00:22 +0000
Files and hashes: 1: 9r15bwtjNc_hKKXPm5fudoCC7Y0.crl (hash: 0rgg3d2DAyAV0VPDbfGK0kEVdfIv1nmN1NZT5a+3OT8=)
2: lGujuiPQvSmFHQAKi24Db9fPtPs.roa (hash: yXgFWbLf2xOQ/uIv3drvR9A3/BacWeZUxwc8Zd5w1cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:5f:9c:dd:e3:6e:b9:f8:94:dc:fd:a6:e6:6b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Validity
Not Before: Mar 26 12:00:22 2026 GMT
Not After : Mar 27 12:00:22 2026 GMT
Subject: CN=e8bef505cb0c534c106ec63758dc2bdb1196d253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a0:29:40:a0:a2:fe:1e:f5:16:48:2a:ce:a4:
5d:a5:f8:07:8f:9e:c2:16:bd:be:46:c0:ca:04:2e:
da:67:ee:64:b2:76:a4:9d:74:21:18:a5:e6:9c:c9:
ec:65:0f:e2:8c:9e:2d:52:1a:57:87:a4:49:eb:f8:
e5:00:e4:13:b3:fa:7e:34:40:28:3f:0a:37:9e:67:
5a:d7:95:b6:0c:4d:ee:63:57:60:49:26:34:40:da:
16:7b:1c:fb:6f:63:4f:7d:8f:e6:97:bd:0d:dc:58:
28:77:7c:92:54:6f:dd:b6:c7:c4:74:2a:49:51:ad:
dd:77:23:f9:a2:88:06:18:dc:78:17:e2:14:da:bc:
dd:9a:c0:37:66:ab:09:1e:7f:af:13:a8:61:ce:b1:
db:2f:f9:c2:ee:b0:e8:3a:c6:12:6c:3b:4c:d7:9b:
97:a7:0a:53:92:1c:84:4c:b7:ad:d1:c9:ac:82:e2:
c1:80:89:5a:8d:bb:80:09:cc:7c:c0:c8:bc:20:da:
84:f1:de:0b:d8:10:c8:4e:5c:66:40:cc:80:b3:7f:
ed:0b:89:b4:16:03:09:c9:3a:db:c2:87:97:db:16:
ed:69:06:15:d4:90:96:ae:5d:7d:f1:9b:bb:b2:55:
a0:53:22:3f:bd:6a:cd:09:c9:24:99:b5:24:f1:95:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BE:F5:05:CB:0C:53:4C:10:6E:C6:37:58:DC:2B:DB:11:96:D2:53
X509v3 Authority Key Identifier:
keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c3:b0:aa:9d:a3:c3:bf:a5:5c:e4:a2:a2:8f:89:7b:4f:1e:
a7:d4:4e:26:57:eb:c5:dd:11:34:b9:86:a2:09:b6:ab:25:29:
d9:72:91:c6:44:88:85:76:53:b1:02:ca:b0:7e:54:2e:2b:99:
43:7f:51:dd:4d:53:1b:5a:fd:e7:c7:17:8f:16:87:18:f6:f5:
8d:48:59:b5:83:6c:2e:0f:12:3f:68:b8:14:40:d6:ef:eb:9d:
cd:07:75:63:48:c8:e6:e6:cd:08:7c:f9:32:a1:3a:2a:ec:ab:
d0:70:9c:b7:ed:cc:fd:a4:6f:c0:42:dc:3c:7b:de:c6:a1:ee:
0e:38:16:24:f9:3a:31:9a:e5:08:60:b4:84:bf:ab:52:f1:54:
92:43:f5:03:f9:91:ff:a2:c2:ab:3b:46:6f:ff:39:61:b9:49:
32:10:16:75:3d:91:88:bf:d9:f1:75:c4:88:79:d2:54:a2:8d:
e9:50:f5:96:a0:42:00:23:e5:f8:0c:e5:08:10:e1:23:08:62:
b5:f9:50:99:3e:45:fd:bd:95:83:e9:c9:f5:51:f7:c7:4a:05:
ef:9c:3d:fc:95:a7:7e:e0:ea:93:a8:10:04:ba:fd:91:77:7d:
fe:55:63:fd:75:4a:4e:18:31:20:a4:2f:ce:31:99:cf:7a:8f:
18:df:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:53 2026 by rpki-client