Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
File: 9vSDrNiLUfXUf1d_EBtUV3heDts.mft (raw, json)
Hash identifier: zW9tij5/dFtNZ2lc5aTpH+swAQTSUDYWOvrB9ICUHDA=
Subject key identifier: 16:1A:6D:15:58:5C:2C:99:32:F3:57:F2:3B:E0:A5:1D:90:6D:D3:05
Authority key identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
Certificate issuer: /CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Certificate serial: 019D296181C371EF6D85E68C021AE35C1919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
Manifest number: C9
Signing time: Thu 26 Mar 2026 09:02:29 +0000
Manifest this update: Thu 26 Mar 2026 09:02:29 +0000
Manifest next update: Fri 27 Mar 2026 09:02:29 +0000
Files and hashes: 1: 9vSDrNiLUfXUf1d_EBtUV3heDts.crl (hash: S05KjKQb3WahMH37iS0W1dy8+bOY0dDflmYd1TWccmo=)
2: h9dclcnj73gGMmqKRNemWaDpAK4.roa (hash: mJuahx80L+X55SPmqYQeNyVRCkJnTbE2MlO0Pta3IEU=)
3: tTIiXNFmVwT5T0hHiGKIodMu4-0.roa (hash: 1Yst/9/lTuLJaVKmnwJPraD68CwcsXf9gsuFNgo7ggI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:81:c3:71:ef:6d:85:e6:8c:02:1a:e3:5c:19:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Validity
Not Before: Mar 26 09:02:29 2026 GMT
Not After : Mar 27 09:02:29 2026 GMT
Subject: CN=161a6d15585c2c9932f357f23be0a51d906dd305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:20:a8:b7:d0:68:43:58:08:e8:78:76:fd:
00:c5:f3:87:69:c4:01:c8:51:09:20:ec:b2:79:93:
e9:4d:a0:d0:19:bf:1d:bf:a6:3e:0c:98:2a:9d:37:
d9:98:13:fa:61:46:ad:38:30:17:42:9b:ce:28:4c:
ee:e6:79:e0:c7:0e:b5:12:3d:09:81:f4:de:0f:8a:
a4:18:f8:4a:f3:1f:dc:26:08:3c:37:31:e9:68:61:
4d:d6:03:79:1c:6c:41:e8:d3:6d:a5:8b:73:b0:bf:
03:6c:dd:06:f3:e6:4e:56:46:4e:a8:c7:95:86:f1:
1b:cd:7e:c8:2d:f8:8a:b0:fa:4d:66:a3:9f:c4:cd:
72:d6:dd:0a:73:9e:7d:e1:bc:32:83:41:3d:13:5d:
a7:15:0a:69:c0:81:64:92:c0:a7:a9:fe:7d:28:86:
0f:30:e3:04:6a:e6:14:b2:80:71:5e:24:d7:ed:04:
2c:b8:b4:22:9f:8a:b2:21:36:5e:46:a9:d5:4f:71:
51:63:33:dc:f2:0f:e8:83:41:5b:5a:9d:ae:3a:d3:
df:df:dd:dc:39:9b:92:f0:7d:a7:62:a4:1a:1f:9a:
93:22:78:23:41:61:55:a9:e0:4a:33:66:d8:51:d2:
a4:47:82:6f:d0:78:b2:df:af:91:83:c1:7e:15:23:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1A:6D:15:58:5C:2C:99:32:F3:57:F2:3B:E0:A5:1D:90:6D:D3:05
X509v3 Authority Key Identifier:
keyid:F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a8:be:a8:14:db:12:9f:52:d5:69:53:ba:c2:a0:1f:34:e2:
8d:21:93:e6:73:09:d4:44:83:5a:2e:e9:c4:b6:a2:35:0f:20:
e0:a5:8a:92:5a:07:c2:b7:c7:19:ef:e4:61:5c:dd:67:2e:ed:
4b:55:61:15:3c:2c:ea:36:5c:92:b9:e7:89:3e:e4:88:32:39:
64:35:5a:87:18:17:75:f2:26:b3:3c:08:66:01:b9:0d:03:29:
0d:e2:a9:38:ae:4c:93:ab:3f:d1:6d:fe:e4:b3:ff:a3:08:41:
fe:1e:e1:5b:95:e5:5f:bb:e6:81:ec:cb:f8:b3:e1:cd:c0:bc:
58:9f:cc:7d:0f:37:ac:5c:b2:4d:62:ff:51:01:d2:02:49:32:
30:d2:12:4e:2d:b0:62:ac:ee:e5:c0:44:56:5e:e3:12:bf:5b:
04:fa:cf:39:5e:5b:48:00:f2:ce:a8:8f:3e:26:7a:88:d6:8b:
1c:b4:77:15:20:30:65:b8:6c:d1:d7:c7:7c:12:b1:4f:b6:30:
b4:aa:03:88:ee:bd:32:54:a1:a0:fb:36:7f:6e:e1:52:78:7b:
e5:2a:99:3d:b2:6a:27:98:d3:2c:92:30:75:89:d9:0b:7d:69:
c1:28:d4:24:d5:59:41:80:fe:e1:2f:5c:25:ff:3d:9a:38:cc:
03:c5:87:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:03 2026 by rpki-client