Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: lb2ffuDwtaxwapCnNhzD++lYOu/JO23oZQod9l/hgoo=
Subject key identifier: 24:8D:8D:E3:96:B5:57:E2:AE:DE:6D:46:A4:4D:26:E9:F7:EF:03:B3
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 019D2996F8DE38D68227CD6745D2DDB2848A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 0593
Signing time: Thu 26 Mar 2026 10:00:53 +0000
Manifest this update: Thu 26 Mar 2026 10:00:53 +0000
Manifest next update: Fri 27 Mar 2026 10:00:53 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: JYMvvAWzTZ3fBp8/b7UDbWqr4jVDds+TBQkBchwYmHo=)
2: q_PyfNokBeIwV9ZVtxUDykAzbyo.roa (hash: nCsivWX18Ek0Fvcd2OhF9dAgd1gXwooWGtpWmt/HjOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f8:de:38:d6:82:27:cd:67:45:d2:dd:b2:84:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Mar 26 10:00:53 2026 GMT
Not After : Mar 27 10:00:53 2026 GMT
Subject: CN=248d8de396b557e2aede6d46a44d26e9f7ef03b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:5e:c3:51:00:2a:c9:fa:36:b8:b6:73:64:
97:6d:39:52:04:a8:23:c0:91:a9:2c:5c:19:5b:d9:
a5:d4:02:52:49:5a:2d:f7:9b:a8:ee:1f:20:d8:bf:
a6:20:8f:b2:a6:22:40:7c:ef:db:51:7f:d6:60:2d:
74:db:8f:de:8e:7b:6b:50:0a:5c:d0:62:a7:9c:b6:
90:42:54:cc:99:a0:76:58:e3:75:ad:43:8e:39:94:
82:45:c2:96:ff:bb:68:21:8d:5a:4f:0b:03:fb:f6:
29:03:25:57:16:ba:64:9b:30:97:7f:b4:bd:3b:29:
c9:1c:23:ce:d3:5e:53:25:96:fc:ff:94:2e:4a:a0:
47:18:b9:80:3e:51:93:89:10:40:4c:01:32:dc:36:
78:df:9d:f0:42:23:31:40:66:0d:58:19:0d:af:f1:
0b:61:07:bb:44:aa:cf:73:9d:c5:d9:f6:68:e0:65:
a1:c2:92:c2:a1:b9:55:28:da:ee:70:92:52:d4:7c:
7e:b0:c2:77:75:dd:96:fd:21:ec:21:e9:04:ce:60:
14:1b:1b:f4:e0:6b:33:33:2b:0b:81:8e:0f:ee:f0:
c9:12:dc:d3:f4:54:42:dc:3f:fc:aa:71:48:c6:b6:
3b:5e:19:84:ae:ef:bf:b0:92:27:93:85:89:19:58:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8D:8D:E3:96:B5:57:E2:AE:DE:6D:46:A4:4D:26:E9:F7:EF:03:B3
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c5:12:27:85:ae:7d:16:ef:3a:b4:04:a2:98:a9:80:38:d0:
5e:a4:b7:f6:13:c7:8f:fa:63:55:06:9f:89:48:4c:97:81:3c:
fe:5b:b4:77:5e:23:3f:b8:02:1a:21:26:fc:75:bd:72:8d:e3:
b8:ac:5d:e4:72:3f:19:29:1f:9a:d2:da:83:28:4e:a8:7c:87:
ff:30:de:aa:f7:03:54:72:c3:96:f9:c0:09:e8:8f:b1:25:19:
ed:ae:41:7e:f9:0e:ca:22:c5:0e:2f:cc:9b:fc:5d:d7:47:43:
fd:95:18:0d:1a:65:6e:80:0f:f8:d6:66:79:05:7c:60:d5:25:
d0:ba:1d:a3:c3:80:99:9a:2e:be:17:87:ed:76:38:e7:c1:5a:
8d:e7:28:b9:04:c6:90:3f:36:b0:3f:15:7d:3e:ee:cd:2c:6c:
d8:f7:24:1a:57:08:24:78:c6:2d:15:58:a3:2a:88:95:73:f6:
44:42:fe:8e:03:b8:e5:ea:39:c7:1a:a4:53:2a:55:26:2a:ce:
e8:af:66:aa:99:d6:7b:c1:81:38:cb:56:fe:a7:cc:2e:fc:a3:
7e:1e:cb:d4:80:a3:9c:f2:a4:3a:2b:ea:58:16:7a:17:18:8c:
19:bf:91:66:06:18:5e:e8:48:1d:e4:33:d6:22:d4:33:74:e5:
66:76:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:31 2026 by rpki-client