Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: uZ+AvMwkpZKa2/UEdRgNTe4kIfopI2P0OCr0trtuDbQ=
Subject key identifier: EE:79:26:D3:A9:6C:9F:38:BE:E2:91:53:07:C8:55:18:C3:5C:46:BF
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 019D2703E2D80B9DD7BD32A323974E0E50E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0E4F
Signing time: Wed 25 Mar 2026 22:00:59 +0000
Manifest this update: Wed 25 Mar 2026 22:00:59 +0000
Manifest next update: Thu 26 Mar 2026 22:00:59 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: uCOc5V0R8rax3Zfn8uYPNqjtivrPotWL8OMc/tsnhVE=)
2: I3Cwe_JfIHDw-5FguYkJbkBPot8.roa (hash: NhXNbLKSK6Zii6NTvjleq3atjNt9Qq9hOl62FzoteKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e2:d8:0b:9d:d7:bd:32:a3:23:97:4e:0e:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Mar 25 22:00:59 2026 GMT
Not After : Mar 26 22:00:59 2026 GMT
Subject: CN=ee7926d3a96c9f38bee2915307c85518c35c46bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:2c:90:0b:c7:d8:38:e8:b0:c0:85:5a:00:
16:b9:6c:35:5b:be:17:13:f4:55:19:db:c3:d5:60:
40:02:cf:9c:94:4b:f7:55:e1:4c:f8:7a:83:b7:66:
d4:8d:79:7c:01:2c:c0:a0:b7:25:a7:86:fc:13:72:
b4:c9:3b:73:e7:86:cd:05:29:db:11:83:91:ea:f0:
9b:44:2f:db:9a:ec:2b:25:9a:ce:5b:f0:8a:aa:dc:
d4:2b:c9:4d:38:05:6a:88:0b:55:23:a7:d0:fc:e5:
7d:b8:fd:99:ec:08:a9:aa:f4:1c:f6:ec:9a:b3:f7:
17:d9:6a:44:1f:59:b4:2d:32:6b:d9:26:c1:a9:7b:
91:a8:fe:93:6e:12:98:b2:c0:30:85:8a:54:7c:78:
35:18:53:51:9a:b4:a8:f2:c3:05:46:13:31:99:ed:
e0:29:5e:75:eb:3a:0f:83:3b:15:5d:9c:1b:08:72:
2e:fe:00:44:87:49:89:ae:f1:7d:09:fb:cc:fc:08:
ab:66:55:47:01:4e:2f:7a:48:2a:68:0c:f7:f1:5b:
f6:28:cb:a4:92:ae:d2:f8:17:d8:cf:05:d9:02:b8:
2d:10:ba:2f:2b:44:d5:9f:2b:2f:1b:97:3f:df:86:
4c:f0:06:da:28:d1:02:e1:c7:d2:0c:83:05:3e:a8:
78:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:26:D3:A9:6C:9F:38:BE:E2:91:53:07:C8:55:18:C3:5C:46:BF
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:98:03:af:c8:c7:61:9c:65:ad:2e:62:99:fa:11:a1:38:
7c:93:08:7e:09:61:1b:7b:65:67:9f:74:c6:72:c0:ef:19:6c:
84:67:2d:da:37:65:31:88:19:83:e7:3d:6e:95:65:c9:93:de:
bc:25:87:e5:ad:92:0a:ba:dc:c3:e7:bc:a6:c7:4a:56:21:49:
32:7d:57:48:99:1d:2e:8f:cd:b8:dd:ee:8b:84:ac:74:4d:81:
8e:40:9e:aa:f8:3a:d8:0a:79:52:c7:4e:c1:28:1a:da:4d:b6:
3d:93:8d:b7:30:aa:4f:1d:86:8b:d4:19:a8:44:76:7b:59:32:
24:bd:c2:c0:b4:92:a6:07:ba:63:27:d2:ba:23:2c:03:53:d1:
01:40:e4:e7:3e:53:3e:60:28:b1:cb:0f:95:ff:3d:03:cd:12:
9e:38:19:22:26:9b:66:3e:7e:8d:bd:b4:45:cc:d2:a0:ff:fc:
24:97:15:75:db:e6:63:29:33:28:f6:ca:15:ad:bd:00:46:86:
2d:b7:cd:f3:cd:e0:76:65:5e:0f:2c:7a:51:bc:3c:54:7a:a2:
86:22:b5:a5:1a:34:1b:4f:a9:5b:63:66:16:42:e6:90:e6:db:
92:73:7d:f4:87:ea:03:64:3a:04:07:6c:87:c0:a1:e6:4e:cd:
3c:96:19:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:54 2026 by rpki-client