Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: h1E/eSdCppepXEgjd0Cprh7/ndV4spWjPER+5r/yFvs=
Subject key identifier: 90:FA:71:3E:6C:77:14:82:C7:5F:38:96:7C:CE:0D:18:F6:85:99:31
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 019D284DE33332E69764F1B13618F87DA471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: 02D1
Signing time: Thu 26 Mar 2026 04:01:26 +0000
Manifest this update: Thu 26 Mar 2026 04:01:26 +0000
Manifest next update: Fri 27 Mar 2026 04:01:26 +0000
Files and hashes: 1: _nHQVX4gUfRcsyUXq5yHaGKdYhU.roa (hash: R3LVcKNvDMfvVqa7EK825MNQi2hSPcfWJhILpOzo+sU=)
2: bZGmBUJyBwx1sWA4_0env9myjwE.roa (hash: 4tsqiBWMFE9lEeiy6ibqGVOqXOKllflXzZwV282QLH8=)
3: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: Up+N+zafKd24K07ilsZV/31ule4UAVAnzoBDlk4Tp7c=)
4: yWPZuql0MvhSm3JMA1hMhAx0qW8.roa (hash: 2i2jlPPD7IE9jQ4n5YA8j4oeQ4N7jBY19i7lQ4cGyLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e3:33:32:e6:97:64:f1:b1:36:18:f8:7d:a4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Mar 26 04:01:26 2026 GMT
Not After : Mar 27 04:01:26 2026 GMT
Subject: CN=90fa713e6c771482c75f38967cce0d18f6859931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:07:3e:84:00:78:4d:04:1b:cb:24:99:8a:
6b:c4:f7:79:2d:26:a7:bf:00:01:db:cb:d9:55:92:
ab:9e:6c:df:9e:dd:d2:1c:c8:d6:2a:4b:31:a6:6a:
f4:fb:90:20:ce:7c:f7:38:e4:53:c4:3c:9a:90:a5:
31:9c:f0:33:87:3c:bb:9f:f5:3f:04:c5:44:fa:19:
66:99:4b:e8:91:d0:2d:ac:68:b4:70:a7:c2:88:70:
92:89:7d:2a:34:db:0f:4e:bd:ad:49:3c:52:f2:69:
1b:2d:f5:57:a7:8d:c2:d6:4b:54:96:97:b0:62:0e:
1c:c6:19:88:18:25:ac:1f:60:8c:e6:55:84:e5:6b:
ab:c2:a1:d7:cc:68:4f:1c:a0:6f:98:8b:b5:d7:de:
28:aa:f0:ee:2c:d7:5e:0b:68:43:23:ee:94:b4:57:
5e:a6:86:14:13:58:40:2f:fc:a9:48:2d:d7:43:2f:
c2:42:4d:b5:a3:20:cc:6c:4d:2f:c0:1c:08:7e:14:
08:3e:13:1f:93:e8:81:86:55:57:52:31:86:f1:59:
4c:c4:48:aa:59:f3:ce:98:81:e3:bf:c0:f0:59:05:
61:ea:82:1a:f2:4f:bc:69:36:d2:50:34:a1:80:2f:
aa:56:d2:ad:63:ee:46:b3:7c:2e:46:2d:42:36:5c:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FA:71:3E:6C:77:14:82:C7:5F:38:96:7C:CE:0D:18:F6:85:99:31
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f7:b4:c1:8d:a2:06:25:49:16:4d:97:59:e4:db:a3:5b:9e:
eb:1e:a5:94:84:09:0f:5e:52:3b:93:62:0a:9a:99:02:54:af:
5c:73:56:68:15:8b:7a:c7:95:b5:5d:04:98:44:a4:a9:63:9f:
28:67:f8:42:57:4f:4b:90:2d:69:84:ae:10:c3:13:f8:60:15:
e1:d1:00:dd:28:a3:85:d5:27:cd:da:fe:89:24:e7:f6:95:8c:
3f:9f:4e:91:f6:59:85:f1:94:b5:fe:f3:49:dc:26:de:30:8d:
a8:d7:c7:e8:9e:77:40:a2:91:30:c6:ec:ee:0f:f5:c7:a2:86:
3e:46:80:05:b6:e4:69:55:d0:9c:f4:9d:52:05:74:7b:b4:2a:
5d:ea:a1:07:96:a5:73:c4:2c:33:0d:4d:44:4b:11:c6:75:ef:
99:5b:ad:11:e4:ee:c0:10:1a:36:b5:aa:e5:c1:fd:74:dd:77:
1e:f7:48:71:51:2a:32:c4:9a:6b:87:10:5e:6c:e0:3e:4f:d8:
23:57:0c:5b:28:6f:56:92:28:6e:6d:94:ec:c0:1b:86:40:99:
29:d6:90:29:9d:4a:c5:33:13:03:2d:bb:54:39:5e:06:f1:55:
48:cb:22:d3:71:a4:25:9f:51:13:8e:b7:63:d8:3c:76:36:11:
48:3f:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:53 2026 by rpki-client