Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: 25ERXPC0t/miolAaVEr2U/DDUHReYZEOSgvx3/e7Odo=
Subject key identifier: 75:0D:D7:A9:A3:7D:8C:DE:58:4E:B0:E9:7B:6B:55:23:28:DF:B7:95
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 019D2A3B8C095E9CF2E3320B75552E401E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 13:00:38 +0000
Manifest this update: Thu 26 Mar 2026 13:00:38 +0000
Manifest next update: Fri 27 Mar 2026 13:00:38 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: oXPZySyUNuSJe6tHonp3bAWGDU0vpTWe+Fib800mSNM=)
2: smlZ7JTHvm4P3nZNzZsryZ_yA5A.roa (hash: +VBNM06YqR+uhNJp3b1HBKPNStgs2sJGwRLlTNxj+ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:8c:09:5e:9c:f2:e3:32:0b:75:55:2e:40:1e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Mar 26 13:00:38 2026 GMT
Not After : Mar 27 13:00:38 2026 GMT
Subject: CN=750dd7a9a37d8cde584eb0e97b6b552328dfb795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:f8:a9:2e:9c:ec:c6:87:b4:82:e9:c1:49:
44:a9:88:ca:c0:9c:6b:75:51:22:e4:62:43:7e:52:
e9:e8:ac:59:84:63:7a:86:ce:6c:e5:78:9c:7e:4a:
5e:23:e5:53:50:17:be:04:5f:5d:cc:46:c3:33:c9:
25:c1:1a:2c:86:d0:f5:3a:1f:e7:95:71:ec:fa:10:
c8:15:f0:24:65:9d:05:84:44:55:cb:81:85:9f:eb:
00:ed:67:bf:6c:bf:70:d7:a0:11:d0:17:3a:65:58:
50:3d:19:2f:8c:65:51:4b:aa:d0:68:9f:f7:9b:2f:
97:8b:fa:3e:15:c6:78:69:dd:a8:a6:60:b0:f9:27:
68:59:f7:26:15:dd:a4:74:66:3b:25:31:26:55:3c:
e1:70:f9:16:5e:a4:4a:3f:fb:b9:8a:03:ab:f2:4f:
d9:d4:6b:37:e2:bd:23:d1:59:31:07:85:0a:59:73:
4d:57:44:97:4f:7a:a9:9b:79:41:4d:5b:15:05:de:
7a:ba:3d:09:82:e2:37:10:5c:d8:30:6f:b7:08:e9:
dc:20:49:8a:6d:28:f4:90:1e:7e:30:52:15:f3:25:
22:64:55:d6:fa:10:f6:7a:09:cb:46:ef:f5:30:4c:
12:f2:73:7f:7e:5c:93:6b:69:12:b8:01:44:ff:03:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0D:D7:A9:A3:7D:8C:DE:58:4E:B0:E9:7B:6B:55:23:28:DF:B7:95
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ed:8c:87:76:73:dc:ba:a0:e7:83:42:7c:05:ed:b8:26:4c:
ea:f8:af:4a:f7:41:48:91:7b:90:d0:ca:18:e6:0d:16:6d:fa:
8d:75:7f:4b:08:40:36:06:23:91:57:14:d0:51:20:32:bc:24:
b0:dd:70:ce:d2:d7:c1:b5:96:2a:71:57:ec:af:c5:37:97:86:
c9:e9:2b:5d:18:1a:5e:95:b9:c5:cd:13:9a:e8:19:1a:3d:4b:
17:02:80:e8:35:b6:24:81:9d:2a:cb:a8:8f:76:0f:0f:e2:36:
80:d9:f2:3c:0d:4e:41:f5:8a:55:a4:ba:36:08:7f:dd:45:9c:
e3:f1:6f:df:9d:14:bc:f0:86:bd:9a:20:90:ed:ad:f8:1a:5d:
18:d7:99:71:ad:8c:23:6c:50:1a:d8:ff:28:4f:38:e5:6f:61:
9a:d7:69:78:c5:c0:af:5d:9d:26:75:bb:cf:54:8f:22:89:87:
25:e6:67:05:af:88:63:36:a4:51:80:5c:eb:91:5e:fd:97:05:
40:f3:75:e6:cc:9b:91:5c:2a:f8:b6:f2:4b:0d:15:9a:e9:3a:
e4:bf:a0:47:14:30:63:71:89:83:3c:22:a6:8c:9d:ed:2d:13:
88:cc:10:b7:cf:cf:8b:af:8d:b5:34:1f:6e:2a:a5:af:4d:b2:
f0:6a:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:42:08 2026 by rpki-client