Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: fQmR6W9t9Me4CHamwRWTb7qx4WXo5kWpGq4um7GQwlI=
Subject key identifier: 93:A4:6D:19:9D:9D:4D:A3:72:85:68:56:41:D0:29:F6:0F:A8:DB:C6
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 019D29CDBAF4BD30B9C39C2A9E6AF9A98C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:00:41 +0000
Manifest this update: Thu 26 Mar 2026 11:00:41 +0000
Manifest next update: Fri 27 Mar 2026 11:00:41 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: OD5/v/eVCYFLpxp6M6Xwnjgoem2QTCFH2FWtsB2VtSM=)
2: mGKvGN6mzAi9Xi9OgEnQnIpovsQ.roa (hash: AZAga0gvOyoyk29F5YS9oe0dyqX933PqnZoBR7aFkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:ba:f4:bd:30:b9:c3:9c:2a:9e:6a:f9:a9:8c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Mar 26 11:00:41 2026 GMT
Not After : Mar 27 11:00:41 2026 GMT
Subject: CN=93a46d199d9d4da37285685641d029f60fa8dbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:ad:c5:92:fa:a8:7c:0f:f9:42:9f:47:ba:
12:60:48:61:aa:05:07:f5:cb:25:0f:72:6d:5d:1d:
f1:54:da:d0:78:86:5a:b5:ac:8d:98:82:10:15:87:
fb:ba:6a:db:97:ec:d4:9f:87:dd:6b:8a:79:8b:7f:
00:3f:63:a7:32:5f:a4:ac:cb:09:32:66:73:ef:be:
2a:38:06:37:9b:53:dd:21:db:3c:c3:70:16:1a:09:
b4:ed:3c:5f:4d:2b:17:7a:c5:ca:d3:c3:75:06:e0:
9b:c9:e3:53:98:30:59:65:91:17:0e:12:43:b1:c5:
63:f9:28:96:de:98:fe:de:e0:bd:dc:a1:9f:1e:60:
ca:03:99:ad:07:49:56:c2:fe:4e:1b:b8:30:38:31:
0e:c8:38:37:d4:92:d9:c0:30:fd:17:20:cc:4f:f3:
61:c8:51:64:ba:72:ce:44:27:5b:30:2d:b4:96:1a:
18:d8:43:2e:3d:fa:89:2f:a4:05:8b:62:9e:a9:c3:
4e:0a:1c:47:cf:8c:86:9c:74:30:57:85:14:de:79:
8e:86:a8:9c:d5:00:ee:d7:e1:85:0a:8a:22:cb:fe:
2f:7e:17:14:81:4f:f2:9a:0d:9b:56:09:71:18:46:
af:df:6e:0c:ff:67:93:25:95:7c:21:28:d7:ac:9d:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A4:6D:19:9D:9D:4D:A3:72:85:68:56:41:D0:29:F6:0F:A8:DB:C6
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:76:35:fd:ee:ab:e3:cf:58:48:2f:4a:8d:93:ee:95:40:bc:
fc:e5:57:34:b4:1d:4d:60:12:7b:94:8a:df:06:d9:0f:be:3e:
23:f1:35:27:6e:4b:7c:65:ef:be:82:85:65:c0:78:7f:7f:99:
13:51:f8:b4:e8:62:a1:11:70:c5:28:d7:21:5f:79:05:cf:16:
04:93:fe:7a:fd:8c:2d:50:1f:fc:00:95:0a:3f:0c:42:7f:f6:
2b:8e:4c:4d:d1:2e:76:24:54:73:37:cf:b3:28:62:74:cb:69:
df:9c:1f:d8:af:4a:7f:49:15:80:a0:79:60:62:b3:57:5c:4c:
c9:71:75:39:81:a7:04:7d:c7:b2:5f:80:10:91:16:e7:ca:39:
fe:e6:72:64:20:3a:e8:72:65:d6:90:08:22:25:14:de:fb:98:
98:20:17:3d:b4:28:75:cf:8b:3f:51:dd:2d:d4:f5:05:24:e4:
ec:48:72:f3:a6:18:0c:84:7a:b3:81:6b:e6:74:4e:59:ac:c6:
62:94:38:13:0e:6c:3a:bf:83:30:9e:e9:71:c6:1f:10:31:d2:
fd:09:a2:7a:e0:cb:a1:5d:83:9f:d1:a0:43:31:ff:37:50:2f:
03:b3:7d:92:47:f6:55:97:ee:a6:0a:57:ef:16:f4:ac:f9:92:
a6:14:c9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:20 2026 by rpki-client