Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: iCrD8jPSz4HTog3vd7ZXYo6BXWlzecyluhtcSVpeD3g=
Subject key identifier: 4A:E9:3C:8E:5A:49:16:B2:95:64:80:71:F0:B3:60:2E:D7:B7:16:9F
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019D273B0FE5316A026653DAF98E05518CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0D01
Signing time: Wed 25 Mar 2026 23:01:15 +0000
Manifest this update: Wed 25 Mar 2026 23:01:15 +0000
Manifest next update: Thu 26 Mar 2026 23:01:15 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: V6ajOLnZ8iub6JbifUVE42OFrsOqn1OJr5lZnoZv9zM=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:0f:e5:31:6a:02:66:53:da:f9:8e:05:51:8c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Mar 25 23:01:15 2026 GMT
Not After : Mar 26 23:01:15 2026 GMT
Subject: CN=4ae93c8e5a4916b295648071f0b3602ed7b7169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:af:01:b8:b2:5e:f5:78:85:a5:2e:e5:23:
33:6a:ee:26:53:23:71:c9:62:e0:c3:c6:c5:8f:ab:
3f:5b:25:7a:68:d2:64:a9:96:ec:cf:79:9a:aa:95:
47:62:5d:68:99:06:d5:47:34:66:41:f7:6f:23:ab:
40:02:b1:4c:e8:2f:dc:43:c8:f0:f8:52:f0:2d:fc:
3d:13:75:4a:92:bd:ca:76:57:57:10:0e:c2:f8:1e:
19:f0:bb:41:00:23:18:fd:83:dd:45:5f:f4:63:d8:
f8:95:9c:d2:81:54:a5:87:9c:f5:58:d0:c5:19:45:
62:e3:b1:cf:e6:80:86:b4:42:a0:9a:65:d6:88:24:
10:01:d3:95:4e:b9:c0:c5:74:d9:98:3f:af:9f:23:
b7:fa:66:60:c7:fc:c2:1b:f0:80:e4:85:ae:35:fa:
a2:14:7b:cd:68:a0:3c:64:3e:f1:fd:c2:5d:d6:91:
e2:49:f6:ee:9b:24:22:75:d7:4e:1d:bf:98:20:84:
46:9f:73:dc:95:ee:60:32:63:2c:ca:1c:0e:46:ba:
16:e5:59:22:2c:46:93:ee:ff:c2:de:69:0f:00:83:
ce:e8:33:67:ef:e7:0b:29:82:cc:e0:a1:99:d0:f9:
ae:ff:24:2b:54:05:01:49:8c:b8:5e:c9:79:89:e3:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E9:3C:8E:5A:49:16:B2:95:64:80:71:F0:B3:60:2E:D7:B7:16:9F
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:72:99:ef:12:40:7b:10:6e:d8:3d:0f:01:9d:cb:c2:6c:20:
c0:8d:2b:6e:f4:4e:18:f9:39:c7:2e:88:d4:f7:8f:b1:21:3f:
4e:49:fa:c0:f0:4f:a6:7a:34:08:19:1a:c4:c2:c7:c1:6a:2a:
55:d3:2e:41:95:b5:04:6d:ca:88:91:80:de:90:c5:fe:c5:98:
8e:6e:cd:07:58:eb:a6:64:19:f3:ed:fc:9e:76:3b:15:34:d7:
95:99:ad:a4:cb:08:1c:af:ed:d4:a4:a5:62:1d:c1:c5:8c:ce:
0a:52:27:97:85:bd:ba:62:7a:6a:b0:1f:c5:d7:18:d4:ef:c8:
ce:d7:5b:36:39:a8:31:43:92:cc:6a:c2:ef:57:39:c0:22:b4:
32:c5:e1:2c:fb:26:c0:e9:d2:22:f2:51:a5:88:f7:9a:79:0e:
0b:f9:92:f1:4c:94:32:22:51:d9:b5:0b:cd:8e:03:17:c1:3c:
89:be:a0:db:7b:7a:ff:9f:f8:02:98:1b:64:37:99:46:aa:64:
2e:ea:bc:fe:36:35:19:b3:03:e3:8e:5e:46:f2:d1:89:1a:3a:
b0:3d:1e:cb:d2:ed:88:b4:57:7e:c3:19:df:44:b6:85:bd:09:
4c:86:82:2c:fa:5a:b3:a8:5b:f2:ed:43:e3:66:cd:f4:2c:42:
e5:7a:2f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:18 2026 by rpki-client