Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: +FO9SxXFivlyvaa+eiOGv07WB45a2F8eNaRCclmIkfM=
Subject key identifier: F9:F6:0C:25:A6:2C:8D:AD:5D:F6:BC:90:E8:85:9B:60:E6:0B:E3:8C
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019D25834C5AF68A498ECEC1EF670BE3AEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 1471
Signing time: Wed 25 Mar 2026 15:00:54 +0000
Manifest this update: Wed 25 Mar 2026 15:00:54 +0000
Manifest next update: Thu 26 Mar 2026 15:00:54 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: 970d8Gk5YZXJPZYeVnxEeaoPCF9IpyGnL4i/SIQD+FY=)
2: YlUOJaq43NpuLvhyIjdUpjtIh5k.roa (hash: CQMT/ddbiL7hLzG2QkDs7berkHQrguNEVB/e2zlXUlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:4c:5a:f6:8a:49:8e:ce:c1:ef:67:0b:e3:ae:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Mar 25 15:00:54 2026 GMT
Not After : Mar 26 15:00:54 2026 GMT
Subject: CN=f9f60c25a62c8dad5df6bc90e8859b60e60be38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:38:01:5f:13:55:83:0d:f4:33:be:b9:03:
5f:d1:3f:a2:b6:e4:77:35:e2:72:31:de:85:1b:91:
2d:1a:f9:a7:b9:61:7c:c4:3f:20:1f:76:76:09:ce:
02:5e:4c:f1:2c:33:f2:90:70:32:de:97:9c:31:28:
87:db:14:64:21:aa:31:da:27:c2:33:73:90:4e:f3:
93:4c:ca:34:2e:6a:fa:33:2e:a6:93:23:87:0d:fc:
24:e3:27:7e:6c:4a:bb:37:6d:50:5d:33:17:7a:c0:
3a:2e:0b:f7:14:07:ce:3c:e1:59:4f:e1:61:36:d4:
6c:3c:33:9f:d2:4f:42:3c:3c:ed:56:e9:0f:21:eb:
7d:98:41:74:16:e2:e5:e4:80:f3:bc:a0:8f:4f:ce:
06:f9:a2:a5:c0:6f:0c:e0:a3:9e:9c:87:fe:9c:9e:
f0:7e:b5:be:39:19:a1:23:bc:e9:36:4b:21:8f:6f:
88:a6:79:a1:49:60:e2:3d:8b:b6:07:8f:13:24:e2:
3a:1d:36:50:47:f1:e4:e7:29:90:e8:e0:64:da:ff:
e6:33:3b:10:a5:df:7f:8f:2b:b6:0c:26:c9:8f:81:
e2:b1:0c:9c:95:2e:29:40:99:24:19:17:3e:8c:c4:
2b:69:26:d2:8d:d9:bb:e1:c1:e7:0d:f5:33:0f:a1:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F6:0C:25:A6:2C:8D:AD:5D:F6:BC:90:E8:85:9B:60:E6:0B:E3:8C
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7f:24:9b:28:a2:52:5c:3d:cb:7b:94:52:bb:b1:52:61:55:
52:3d:ac:5f:45:4e:6b:58:c6:7f:d3:d9:4a:f8:c1:47:fb:5b:
a2:75:6b:d5:4f:47:c2:96:81:5e:04:21:9f:03:7f:c5:45:e1:
64:e6:0e:46:80:9b:09:d2:ce:62:fc:5a:af:bc:df:b7:b1:87:
74:10:41:98:8f:2d:c6:e6:af:33:8a:19:2d:92:ed:7c:0c:55:
fe:86:11:de:3d:ba:0a:62:f1:ce:56:be:56:0a:44:f5:51:19:
91:56:fb:80:37:a4:33:23:ae:02:77:51:72:ee:3a:7c:92:a3:
87:17:50:53:0e:9e:a8:c1:dd:00:16:be:8d:fd:99:84:09:57:
ee:0d:06:81:f3:c7:14:3a:b9:67:7c:99:37:03:9c:85:7d:79:
0a:58:fd:7b:fe:12:48:d1:9d:44:9c:94:cd:89:6e:ef:42:ff:
0d:c7:29:ff:7e:be:38:c1:4c:a7:b0:d5:03:93:2d:1f:80:3b:
fa:d8:a7:9c:05:b4:48:57:03:46:88:e3:89:bb:e3:4d:59:a9:
6c:59:cc:81:b5:3b:92:d4:0b:c8:c3:55:4a:da:5a:7f:a2:89:
97:69:56:32:33:33:bf:bb:a7:39:ab:82:e5:a4:92:f5:1c:f6:
c9:87:0e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:31 2026 by rpki-client