Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: 2Rn8d4od9VdpN+wLYoalv9AjB4JxaSr+H67VsGF/fsU=
Subject key identifier: 53:0D:FE:05:7D:6B:8A:B8:C3:B0:FB:9B:F9:61:77:09:50:BF:2A:E1
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 019D25F1664F1FFFA86A30A93F8E88D08562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:01:10 +0000
Manifest this update: Wed 25 Mar 2026 17:01:10 +0000
Manifest next update: Thu 26 Mar 2026 17:01:10 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: KHSXwoeAWV4+/agHQ+k38yXPkdiLVRjvt7omOz1uasA=)
2: pY5anUcF6nGQjRStvwUsfXfpPT4.roa (hash: ikRAmfOVAxrB8DLsnpaLa+mv7owmfzH47WnehifEhhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:66:4f:1f:ff:a8:6a:30:a9:3f:8e:88:d0:85:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Mar 25 17:01:10 2026 GMT
Not After : Mar 26 17:01:10 2026 GMT
Subject: CN=530dfe057d6b8ab8c3b0fb9bf961770950bf2ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:a4:e7:1f:42:ed:e7:d9:d7:6d:a4:1d:d0:
50:30:d6:f8:30:90:0b:3a:79:1e:5f:b6:8b:2c:6b:
ac:e1:69:0e:21:b5:d7:2d:03:de:24:4c:2a:d0:c5:
8d:de:aa:82:a0:3c:61:8f:a5:5e:ba:55:b1:cc:9c:
fb:0a:b3:fc:88:01:c4:33:3d:18:28:0f:47:5b:2f:
f2:e8:05:42:42:5c:63:b1:d0:8b:5f:2b:14:f1:e0:
fa:28:7f:49:d1:5e:6d:c0:17:a9:ac:0b:5e:d4:b3:
e2:62:29:51:23:e2:1a:f3:7e:56:b6:da:59:c7:68:
1e:e3:90:84:36:4e:0d:8c:09:5b:4f:cd:76:8e:9c:
3c:17:8f:0d:f4:7f:6d:a4:e6:69:49:3c:63:ef:67:
61:43:66:08:1c:49:e5:2e:dd:46:71:d2:a1:ae:8f:
a2:b2:c3:b9:b5:6f:96:6c:ab:78:34:2e:65:86:4b:
ad:fe:e0:94:33:34:89:5f:09:82:2d:71:92:75:8a:
d5:09:da:01:9d:32:08:24:d3:a6:14:56:95:2a:62:
cc:5a:3b:7c:58:1b:59:a0:7a:db:94:91:07:35:d1:
14:6c:a1:3d:eb:4a:61:03:b1:25:c3:9a:45:44:46:
42:e7:3d:73:a7:41:69:13:a7:e1:02:f7:85:78:a6:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0D:FE:05:7D:6B:8A:B8:C3:B0:FB:9B:F9:61:77:09:50:BF:2A:E1
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b6:42:1b:7a:d1:05:20:2f:4d:d0:97:20:e2:01:0c:b1:27:
9f:a3:46:6f:a2:b8:ff:17:07:fc:15:b2:dd:34:99:79:7b:47:
a2:0c:a1:7d:85:09:6d:3f:e4:d4:62:ba:9f:3f:c9:86:c1:21:
58:28:f3:25:1b:4f:93:e8:ac:f4:8c:15:03:6b:97:66:72:3c:
21:9a:b9:3a:66:96:2b:af:8e:ae:a1:4a:31:8b:9c:aa:78:4c:
a2:7f:70:ac:9b:da:6b:0e:42:cb:46:c2:94:da:5d:cf:e3:ae:
7c:e0:52:66:72:f8:22:19:79:fa:8a:e2:34:9c:b9:f7:7b:5d:
d7:18:e2:d1:cb:89:5b:30:a6:78:28:00:d2:fd:8a:54:4e:67:
8a:b4:46:c6:73:5d:42:d7:e1:79:84:b6:58:94:4d:a2:a3:e1:
d2:58:21:1b:82:d2:ef:65:59:ab:73:31:fe:2d:70:48:55:5e:
5d:10:51:81:eb:87:01:f8:d2:88:24:f2:59:d7:18:16:43:9e:
0f:04:5f:74:b1:c2:d1:01:1c:a7:50:dc:08:8e:cd:31:9b:86:
52:79:44:04:cf:f2:7a:8d:44:e7:12:bd:d3:11:68:a4:0b:a2:
23:56:75:3e:03:0e:fd:4d:c1:64:1f:d1:0a:8e:c4:ef:f3:7a:
bd:0f:71:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:55 2026 by rpki-client