Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
File: 9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json)
Hash identifier: 9fD4asr7JE46frT20w3d45dg+RHR6eGDhJBblMa+lkw=
Subject key identifier: 1D:F1:06:31:C0:40:D1:45:DB:B6:43:4B:AD:45:71:7C:60:0A:30:51
Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Certificate serial: 019D2583B9B2C22FB6A37092793BBFEB639F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
Manifest number: 01ED
Signing time: Wed 25 Mar 2026 15:01:22 +0000
Manifest this update: Wed 25 Mar 2026 15:01:22 +0000
Manifest next update: Thu 26 Mar 2026 15:01:22 +0000
Files and hashes: 1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: 1pnMQSXCen+2mcWhBS9kdiVyvYixaSe1nwLZQwatuwA=)
2: BzRL5dLKwivSlyjmJMancnc4uqU.roa (hash: UbHMELNkAAYWrKJkN37hNTOWEDyB+0NpPi1jJDfFK5I=)
3: PjTeJzbTRv2RxHKdetjA5AhU64o.roa (hash: 5sG8ZewUK8wMTwzvBdT3o63ELvX++X0paAzfcLtiipw=)
4: YZnN_D9K8I6oAKeftWU-F1SrfFA.roa (hash: M+Z8dP+XL6StWORqHxpKktlWJDS4C7Ey8tzneAbTFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:b9:b2:c2:2f:b6:a3:70:92:79:3b:bf:eb:63:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Validity
Not Before: Mar 25 15:01:22 2026 GMT
Not After : Mar 26 15:01:22 2026 GMT
Subject: CN=1df10631c040d145dbb6434bad45717c600a3051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:57:19:c5:c8:99:91:f6:8a:eb:b5:d7:e9:
d0:09:88:ab:9a:3e:3d:7e:b2:8f:3f:7b:cb:9c:1c:
22:d2:6e:72:ef:a5:f1:36:76:08:12:f7:c0:fa:06:
61:f1:2e:a7:5f:2a:5a:69:51:93:c3:84:37:61:8c:
d7:c7:7d:b5:b6:a5:98:d7:ed:ae:47:f9:35:58:d6:
fd:f6:1d:37:d0:94:91:ea:4b:cb:17:7b:a0:80:54:
bf:1b:07:87:07:2e:58:14:5b:1f:fa:bd:7c:85:55:
39:aa:45:97:0e:a7:37:d8:32:87:4c:6b:af:e3:3e:
96:8d:5b:1b:ed:00:55:37:1b:7b:10:ec:35:7d:53:
db:0d:29:1c:5d:41:e6:eb:ca:06:a0:3b:0b:03:bf:
72:58:e8:b0:e8:cc:d0:82:b5:1c:88:f0:23:ca:54:
42:86:18:c7:c8:62:e1:99:ae:fa:86:1b:00:e7:41:
bb:8d:d1:1b:42:2e:8d:65:d5:e9:9a:81:9a:5a:63:
ec:3f:d4:3f:fd:bf:6d:24:2d:1b:12:fa:49:84:48:
4c:1c:51:24:f3:f5:a5:1b:a7:75:1e:dc:af:64:21:
f7:9c:1c:5a:72:7d:b2:1b:88:c0:9d:67:d9:0a:a5:
5b:1d:e0:d2:90:36:d0:2b:24:89:38:2f:61:3d:5e:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F1:06:31:C0:40:D1:45:DB:B6:43:4B:AD:45:71:7C:60:0A:30:51
X509v3 Authority Key Identifier:
keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ee:a0:28:d9:bc:65:78:08:10:86:d7:96:b0:89:87:61:3b:
54:5a:a8:a7:8e:13:da:e7:f0:5c:fa:55:74:78:3d:90:a9:bd:
95:f3:de:a8:d3:31:48:06:d2:6f:ed:73:78:5f:be:68:7c:a2:
95:77:81:bc:8f:09:b5:0f:d2:bd:7e:8e:e9:f0:77:8f:e7:37:
8c:09:85:34:20:da:5a:56:fb:34:f8:27:24:13:a2:a9:1d:4c:
25:02:76:46:a4:c4:6f:67:b5:37:2c:a3:3c:9d:9f:ea:fd:d8:
b0:a7:d0:ea:c1:74:13:f7:38:d3:d7:a0:ea:0e:30:c1:49:07:
f1:da:20:61:07:21:67:3f:e0:09:c8:63:21:c3:3d:84:d4:c0:
ab:9e:a7:28:b9:84:76:24:df:f6:2e:72:5e:0d:a7:40:0f:54:
c0:19:de:17:c7:e6:02:81:ad:e0:dc:4b:d5:7b:56:47:4a:cf:
7d:e0:3f:5d:eb:f6:5d:50:04:4c:c3:63:5c:f8:e9:e0:c8:1a:
3d:ad:55:a5:52:f6:79:3b:54:3f:fb:aa:0f:42:0b:38:f8:b2:
57:91:05:12:76:62:a2:c7:9e:c0:f7:c1:8a:73:18:ee:90:e6:
7e:b5:07:ef:67:e7:6f:0c:ab:8e:07:00:46:cd:2e:a0:7e:3f:
16:28:84:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:24 2026 by rpki-client