Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File: 9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier: irEg1mzW+YHzt3tHConCyMCNgT/XaDcRXa+VsGhBevs=
Subject key identifier: 62:9B:1E:D8:55:B2:71:9E:95:9E:02:0F:F9:E4:DD:94:1F:22:01:77
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial: 019D2771DF905F53A3195767000E0064884F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:07 +0000
Manifest this update: Thu 26 Mar 2026 00:01:07 +0000
Manifest next update: Fri 27 Mar 2026 00:01:07 +0000
Files and hashes: 1: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: t5/6bzPXrxqtRC7Acf0fp2hTLQSvp/9+MNvEJqfa5iw=)
2: JuwdF3pXKULgX8rdBkYwVawnKUg.roa (hash: J6niK53xMmSAm4XjHsm9sqSbekhWgzfMokxnfXFEmFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:df:90:5f:53:a3:19:57:67:00:0e:00:64:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Validity
Not Before: Mar 26 00:01:07 2026 GMT
Not After : Mar 27 00:01:07 2026 GMT
Subject: CN=629b1ed855b2719e959e020ff9e4dd941f220177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:d0:24:72:08:4e:7a:67:08:99:62:da:e0:
bb:77:62:3e:74:4b:81:ec:19:bf:e5:7b:e1:16:e9:
4d:4a:1f:e2:35:1d:8b:26:53:5a:7c:9d:e2:42:03:
09:ad:f8:ea:2e:5c:b4:8d:94:d6:6b:13:d4:b9:72:
9f:b8:95:b2:fa:76:81:1b:d5:ed:7f:9e:27:4b:61:
4c:a7:b6:cd:a3:19:58:d0:ae:3c:6d:a6:81:26:52:
10:2d:49:4a:89:ff:ee:c8:e3:21:4c:2d:03:bb:30:
d9:a3:e6:99:ce:57:4e:9b:c4:1c:c3:84:0b:e7:fb:
2b:35:37:a8:da:c5:5a:91:61:bb:fc:b7:27:38:71:
66:72:d4:1e:cb:cd:14:cb:a0:54:3d:87:7d:b4:6c:
e1:14:ae:53:d5:e9:b5:1a:4c:2a:23:c4:66:09:07:
ad:c7:46:ab:01:35:c8:15:2a:00:b0:07:6a:16:03:
05:07:a9:e9:41:a9:6e:d7:fe:96:bb:68:56:06:f3:
9c:7e:1b:cf:21:45:d7:82:d8:2a:c0:92:36:ba:9c:
62:15:82:24:86:83:58:ed:ea:70:48:e4:99:bb:38:
c8:50:27:e5:c5:bc:8a:3c:a0:16:0a:38:c5:5c:72:
04:08:e4:1e:b1:f5:4c:c4:a0:14:fe:13:09:68:e1:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9B:1E:D8:55:B2:71:9E:95:9E:02:0F:F9:E4:DD:94:1F:22:01:77
X509v3 Authority Key Identifier:
keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:10:46:20:83:e1:cc:fe:dd:35:93:c5:0a:17:98:ea:b3:b7:
46:29:ac:09:ff:3e:e9:8a:b8:f2:9c:1d:92:a0:9a:41:23:86:
11:dd:8a:55:3d:be:61:ca:17:77:8c:8b:a5:ee:73:b5:95:39:
10:98:56:7d:37:df:14:f9:84:55:57:5a:de:b7:39:4c:30:52:
45:04:6a:8e:a2:a0:d7:54:f2:9a:00:a1:4c:a3:7a:12:63:b7:
36:f4:34:09:97:42:97:d1:4d:64:3a:f4:e1:8a:6a:d4:6e:1c:
f4:0a:1d:b5:25:84:06:c7:df:e2:de:69:27:87:d8:0c:19:e7:
48:c7:28:cd:82:2b:2d:51:f9:be:c1:66:02:72:d9:7e:a4:78:
6c:e4:59:5a:67:d7:69:de:20:15:db:bd:4e:dc:e1:e9:bd:84:
37:fe:be:29:db:f9:12:59:ed:20:ea:e0:1a:81:0f:2d:4f:ce:
a9:ae:7e:6f:b0:6d:f9:18:3e:52:f9:92:bc:58:da:e3:b7:62:
ea:2b:6e:bf:84:6c:68:a7:9c:e4:45:5b:c1:4c:59:21:af:7c:
78:2c:95:76:ca:1f:88:dc:11:72:6f:4c:52:b9:30:84:34:18:
0f:65:c7:2e:72:a4:19:79:da:83:e4:57:24:df:3c:5d:05:91:
dd:05:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:07 2026 by rpki-client