Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier: 8sbMZEJJqa9hMSkRYvChh9qlW7mXJPR8ETqylEZ1UVw=
Subject key identifier: EC:B5:5F:AE:C8:EF:4C:EC:E1:FC:9D:39:A1:77:45:23:D4:AE:AB:31
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 019D27DFD840A2CDD0AE2AB5A13D7E0DC267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number: 1368
Signing time: Thu 26 Mar 2026 02:01:14 +0000
Manifest this update: Thu 26 Mar 2026 02:01:14 +0000
Manifest next update: Fri 27 Mar 2026 02:01:14 +0000
Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: QIeGJwRM0zxouQSnqiFmOTfWiuHPIOWW6hTX+buiQzk=)
2: OFBo8WU6Gs7COuii4ORJNULUJs0.roa (hash: oPB/MfmYFXGfvZ50KFNdFr2Mb2PYVu+UQptAAX9J79Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d8:40:a2:cd:d0:ae:2a:b5:a1:3d:7e:0d:c2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Mar 26 02:01:14 2026 GMT
Not After : Mar 27 02:01:14 2026 GMT
Subject: CN=ecb55faec8ef4cece1fc9d39a1774523d4aeab31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:a6:bd:7a:5f:a5:9e:9f:31:28:4f:1f:7d:
c0:19:ec:d1:a7:e0:65:45:17:6d:07:44:88:28:df:
43:4f:99:b4:0e:ae:22:be:d2:67:07:07:4a:d9:da:
7b:0a:a0:71:95:1e:3c:4f:a8:3f:03:cb:92:66:fb:
7c:5f:db:5c:52:23:5a:f3:15:f2:7e:35:9a:23:80:
00:42:b0:33:15:a2:35:e2:1e:55:64:cc:8d:1a:22:
cc:e0:b9:3d:1a:db:1f:9c:89:44:46:68:88:55:f3:
66:76:11:92:4e:bd:a8:7e:e4:f8:77:a0:ae:89:c2:
8f:4d:7a:66:18:73:2c:cd:4e:90:e3:20:56:ff:42:
3e:c7:33:89:11:3b:6c:38:ff:84:36:ea:5f:6a:9b:
d4:89:98:dc:77:fe:6a:8f:f6:57:8d:68:23:00:e8:
2d:54:a1:a4:1e:19:b8:2c:c3:ac:ac:e4:31:74:b8:
f1:67:67:ad:1e:df:a2:f8:eb:a3:2b:88:a3:ae:30:
f2:e7:6f:49:89:77:8b:78:1c:74:3c:7e:5a:20:a7:
57:b0:ef:3a:21:4f:21:40:a7:57:03:e0:ca:ff:b3:
79:08:a0:b0:d5:fa:2f:55:38:a6:7a:29:c3:f8:2a:
37:8d:9b:20:50:8d:8c:63:25:f6:24:7d:01:5a:41:
b0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B5:5F:AE:C8:EF:4C:EC:E1:FC:9D:39:A1:77:45:23:D4:AE:AB:31
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:16:bd:89:c7:21:6b:48:77:25:2a:ce:f1:30:8a:92:93:1e:
08:80:4d:83:ae:13:fe:2e:14:5a:8b:10:90:9c:d5:f6:0e:2f:
e7:20:00:c6:d0:f8:66:97:95:1c:a9:97:22:dc:4b:09:59:f7:
ba:34:ed:4f:f8:21:be:a3:3d:dd:d7:35:19:5a:6e:1f:91:9d:
2f:8d:e7:d2:45:25:34:61:91:c5:34:e0:2f:f6:e4:62:53:92:
07:e3:72:27:a9:61:69:c6:54:25:28:20:85:42:8d:58:1e:dc:
9d:70:a0:5f:ba:d1:f4:65:f7:60:0d:fc:7e:23:61:64:cb:61:
14:53:fc:39:98:b1:aa:b2:3f:1c:e1:a3:11:32:aa:df:8f:97:
dd:11:1a:9c:87:b9:c0:f7:97:f6:22:77:7a:ea:48:bb:be:db:
2a:82:f2:43:9f:3f:7c:3d:9f:4e:60:1a:81:79:43:fc:16:87:
b3:c2:8b:a5:14:89:34:c2:af:55:af:73:11:17:16:67:13:8d:
08:3c:5a:d9:51:bf:be:c7:d2:70:d6:87:5e:29:88:cb:24:06:
d0:4d:75:bc:00:5f:6f:14:65:7a:fa:ed:17:1b:2d:e4:bf:9e:
7e:94:59:85:f6:e0:96:98:3d:f3:7f:e8:be:b3:f8:a0:4d:44:
5b:2c:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:53 2026 by rpki-client