Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: pPPpii/tk0PxK/tS1grtnCWmQDZ6krFYAdFCy3I+Yjk=
Subject key identifier: AA:B4:4D:66:79:AE:22:3C:7F:F4:B4:BF:9B:61:47:3D:5B:DC:93:63
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 019D265EFF5D730BB68CF831F3FC370ADBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 0F33
Signing time: Wed 25 Mar 2026 19:00:53 +0000
Manifest this update: Wed 25 Mar 2026 19:00:53 +0000
Manifest next update: Thu 26 Mar 2026 19:00:53 +0000
Files and hashes: 1: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: WOVxdxGB4DgowfuXZM5ISkEBsg6OvToSWDMyxuu35fI=)
2: o3IVsTtHp4LvNCkM3vhyjfWuFnU.roa (hash: lY2LMXKbJT6BlB/lSBYqcfLveqU3+U+eDmIrpngNEak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ff:5d:73:0b:b6:8c:f8:31:f3:fc:37:0a:db:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Mar 25 19:00:53 2026 GMT
Not After : Mar 26 19:00:53 2026 GMT
Subject: CN=aab44d6679ae223c7ff4b4bf9b61473d5bdc9363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:72:22:69:e5:ad:53:a7:5e:4e:6e:59:0a:
62:a9:4a:20:b7:13:bf:f9:a9:ae:8e:9b:87:ae:ba:
79:c4:5d:1c:7a:c9:85:90:79:1c:74:d7:8d:6e:3c:
3c:a3:00:47:38:9b:f0:26:57:fe:1a:b9:30:30:46:
f2:c6:55:45:ee:c2:c3:55:a3:60:70:ba:dd:11:0e:
f0:43:e4:a4:1e:dd:67:bf:6e:a1:49:d3:eb:d9:2b:
72:8c:15:3b:fc:d7:96:ff:da:e7:3d:ea:34:7e:5a:
76:b2:60:94:ee:5b:7f:ca:f8:1e:22:bc:7a:4a:ac:
1d:bc:9c:8b:b7:2b:dd:56:91:70:e9:10:d4:5c:33:
d3:ba:b1:06:ac:8e:0f:b0:e5:2f:0c:da:3a:c3:e9:
b5:89:c5:c6:ea:fa:8b:93:8b:7b:25:3b:bc:84:4f:
09:df:58:c0:13:58:45:e0:6e:1f:df:15:65:7f:35:
dd:ce:81:13:53:54:a9:dd:9e:96:99:97:21:37:d6:
76:d0:87:7c:10:b9:3d:41:a3:a1:a5:89:2f:43:d1:
64:19:e2:d3:e9:45:d4:c4:fb:6b:41:4f:a4:33:af:
e3:f4:10:62:33:17:74:ed:9a:97:19:ca:87:1f:a4:
a3:cd:a6:06:09:15:36:d9:db:46:a1:8b:75:0f:4d:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:4D:66:79:AE:22:3C:7F:F4:B4:BF:9B:61:47:3D:5B:DC:93:63
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c1:67:1b:3a:c4:3c:f3:47:7b:55:48:53:2c:a3:2c:cc:45:
33:cc:56:37:69:50:fe:57:a9:0b:31:f2:43:84:ef:22:36:23:
9e:6e:70:79:e0:2d:e6:bf:78:0a:c6:1e:a5:c9:f0:d0:3b:41:
bb:61:b9:54:69:8c:65:a5:e8:b8:d4:f9:72:48:d6:f1:f8:01:
40:6c:42:5d:33:35:b5:cc:3b:21:a4:37:76:90:00:9c:e0:62:
20:db:6b:8c:d9:b9:a5:3c:46:57:d6:35:70:f3:34:d6:c8:7b:
d0:de:6e:46:7a:7d:09:74:de:4d:72:59:db:52:22:af:31:3a:
ce:3c:75:85:ad:4f:d5:df:0f:63:51:3c:a8:15:e5:37:b1:7b:
bb:7d:8f:37:39:30:23:0a:ea:89:09:92:ea:61:11:9d:7a:81:
ad:05:0a:1b:e4:ba:41:cf:14:e7:e1:d7:f9:39:40:8d:9a:d3:
e6:b5:1f:88:09:f6:dd:ca:71:be:15:b8:a5:3f:2d:ff:33:1f:
fe:56:7d:f7:9a:65:af:78:3e:60:f8:e5:c5:a2:6d:4a:b3:2d:
5a:41:90:ae:f3:e9:bc:07:eb:f8:53:c5:7a:24:f7:18:57:76:
78:f0:72:73:51:7c:eb:56:d7:b7:e3:26:fb:56:0b:c3:e7:02:
15:0c:f6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:56 2026 by rpki-client