Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: 1lEc2uqc+OtNE8QKkswlyu1+0tcUYfNZnAPPYpQGbjw=
Subject key identifier: E8:96:61:DD:63:E7:2B:5D:93:1D:D9:5F:5C:AE:22:E2:94:81:F7:68
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019D26CD25E3D14FC17F9E48B24388516A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 082A
Signing time: Wed 25 Mar 2026 21:01:11 +0000
Manifest this update: Wed 25 Mar 2026 21:01:11 +0000
Manifest next update: Thu 26 Mar 2026 21:01:11 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2geswA6ENW-xIrWxFpiZS2QEtSg.roa (hash: Wximrdr2iWFM1jcG/8HAiLIPhr2g4tLO5QAJ9/FpqDs=)
3: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
4: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
5: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
6: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: jn/toGSYUZOji4wui/iBmbISNGHxY9FnZNFDi9COry4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:25:e3:d1:4f:c1:7f:9e:48:b2:43:88:51:6a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Mar 25 21:01:11 2026 GMT
Not After : Mar 26 21:01:11 2026 GMT
Subject: CN=e89661dd63e72b5d931dd95f5cae22e29481f768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:06:c8:f6:fa:70:9f:b9:4d:8e:84:a2:fb:
07:23:e1:3e:a4:e5:bb:d4:14:0c:2c:a8:e2:ab:f3:
db:4d:be:2f:43:fa:9f:93:88:3f:cd:3a:17:c0:df:
0b:65:35:e7:d6:01:85:54:93:dc:d3:70:f4:6e:65:
e9:fb:96:80:06:e3:09:aa:27:fa:42:5f:5b:f4:3d:
73:49:4b:dd:db:90:ee:0f:6e:fb:30:d1:f6:07:31:
e5:68:e3:46:76:aa:f3:53:8f:29:a6:bc:f6:e4:95:
74:fc:40:5c:94:fd:70:97:fd:54:f1:24:bf:e1:7f:
8b:31:da:f5:cf:5a:ce:81:43:c8:03:d5:ba:10:9a:
cc:35:42:1f:7f:72:ee:a8:10:d6:82:51:9f:d2:ba:
27:77:41:7b:1e:b9:c5:38:4b:40:68:bc:42:d4:87:
95:ae:11:f4:67:56:7b:57:7e:72:ad:16:4b:ff:cb:
81:47:0f:38:9e:9b:3e:0e:e4:11:26:c2:d6:f8:05:
79:8b:57:e7:70:f4:5a:95:fa:81:90:d5:8b:ea:d8:
50:f4:d5:55:6e:7f:1a:78:22:90:be:6a:b7:b0:96:
4e:63:5e:ef:57:38:23:6d:21:d9:2d:d9:6f:35:03:
ee:95:c5:37:55:fc:cc:54:a6:7b:a7:bd:06:1a:5c:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:61:DD:63:E7:2B:5D:93:1D:D9:5F:5C:AE:22:E2:94:81:F7:68
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3b:c4:52:22:49:e8:1d:2f:cc:f3:bb:6b:3b:13:e4:08:21:
75:d4:53:c4:3e:ca:3c:66:21:24:9e:9f:83:7f:06:7c:4a:99:
04:3d:27:ff:e4:16:41:f1:cd:4b:10:77:2f:bd:92:ac:38:60:
88:2e:55:d2:78:47:89:ab:63:85:c5:c7:36:57:92:f5:a9:8d:
3f:09:be:b2:67:b7:94:dd:fc:9c:6e:ae:1d:25:92:e5:24:9a:
a7:70:7c:4e:d8:48:89:4e:b7:03:7a:2d:35:7a:3c:d2:36:96:
d7:5e:56:94:19:a2:78:11:a1:12:fd:b0:43:1d:06:67:9b:ae:
d9:bf:27:4f:81:cb:a3:8b:23:0b:ea:5c:59:c1:d4:65:a9:3d:
9e:8c:1a:a5:42:5c:f1:27:ee:a5:a1:69:1a:5c:e0:d6:b7:66:
15:26:04:ed:9b:5b:a2:a9:3d:19:19:c3:d8:65:7f:ff:42:4b:
a2:a0:57:eb:74:57:64:91:1c:1f:bb:65:ee:d7:3e:92:06:8a:
70:b8:58:17:43:e2:98:8c:55:fd:2a:6e:57:9c:45:a9:95:82:
ad:2e:91:1a:f4:a5:ba:1b:c5:48:44:8c:37:d0:63:60:cb:b1:
6e:37:47:5b:83:55:70:88:03:26:eb:42:ce:6e:80:69:55:e5:
2a:98:cd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:32 2026 by rpki-client