Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: fO98yQ4ZgUO+4Es03637dg8eyNYgn1C5z+pF+7YE45U=
Subject key identifier: 79:B4:DB:81:98:FE:DA:2C:9B:CE:46:8D:56:1B:79:23:B8:F1:3E:5C
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 019D26CD4BE53BCA3730BF2A2657AC0181A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 1177
Signing time: Wed 25 Mar 2026 21:01:21 +0000
Manifest this update: Wed 25 Mar 2026 21:01:21 +0000
Manifest next update: Thu 26 Mar 2026 21:01:21 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: owBF8HuCiDrxNKXmX7ggGLDLPe9ePhpXVoxqbflY4K0=)
2: lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa (hash: GeIEq9ieMXhGCkHBVtks0M5q4Jm8CcNNhR3YdczhVxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4b:e5:3b:ca:37:30:bf:2a:26:57:ac:01:81:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Mar 25 21:01:21 2026 GMT
Not After : Mar 26 21:01:21 2026 GMT
Subject: CN=79b4db8198feda2c9bce468d561b7923b8f13e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:e2:68:cc:05:c8:2d:c6:fd:28:fd:84:17:
98:d2:75:42:6e:4c:51:16:15:34:f0:9e:6f:bf:90:
ca:e7:41:61:7b:82:2f:d6:0f:7b:39:ec:95:31:28:
0f:d4:10:61:1c:08:aa:97:c0:52:cd:d3:cc:0e:ae:
b6:4e:f9:8c:93:68:54:f7:d4:8d:5e:73:4b:f6:73:
cb:fe:52:dd:8e:69:d9:9b:22:ed:04:b7:92:50:7e:
e9:9b:9e:bd:64:57:05:01:cd:89:5c:92:0f:07:08:
f6:a9:5b:f4:22:46:81:55:a1:82:52:4b:a0:0b:c0:
f9:58:1b:9d:04:2e:52:ca:4a:84:bd:8e:b7:08:57:
f5:30:ad:de:a0:f3:62:a8:ce:9c:7a:c9:cd:fd:1f:
05:7c:78:b8:c9:2e:3a:61:7b:0a:44:e4:21:66:31:
d1:43:cd:a9:7a:5e:89:06:70:db:c8:ca:b0:4e:d8:
ae:3f:26:f2:4a:e5:0b:c7:3f:27:a4:74:ae:34:1b:
df:04:98:c6:ff:d2:55:1f:49:e4:1f:bc:27:32:a7:
bf:aa:24:ec:32:64:f4:e7:06:c0:a8:74:ed:14:52:
a7:f1:4d:bf:82:4a:9b:72:0e:e2:b2:e2:df:08:b6:
b7:b7:78:fe:45:2c:c0:bb:cd:38:24:2c:27:c6:dd:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B4:DB:81:98:FE:DA:2C:9B:CE:46:8D:56:1B:79:23:B8:F1:3E:5C
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fd:0a:ab:cb:21:30:62:b4:69:d5:79:2a:38:fa:7c:81:21:
6d:8a:30:80:00:b6:93:45:5a:dd:ed:f2:85:a6:bb:00:df:b5:
fc:88:9f:1a:fe:e5:f6:1a:ce:4e:67:b4:bc:af:6a:ad:1c:b7:
d0:97:01:a0:7d:3b:d8:6c:5d:b7:1d:45:0a:e9:95:31:9a:03:
9e:11:62:b5:71:2a:cf:02:cb:5b:22:28:7b:44:fa:9e:04:2f:
d0:48:08:2b:a2:b1:a1:a2:59:dd:e1:dd:6b:6b:aa:fc:f1:5b:
96:77:ca:31:cd:d1:24:2a:27:d3:9c:14:bd:b9:ac:25:5d:fa:
68:23:d5:ad:9b:f6:83:99:60:a2:a3:e7:ba:b9:22:c4:d3:7c:
81:97:1c:48:1e:38:dc:8d:b4:d2:fd:92:7c:79:b8:e3:d9:0e:
33:6b:e7:73:a3:8e:68:e8:4c:d5:fc:f4:1b:9b:de:3f:76:a6:
97:67:77:d9:bb:26:da:79:f2:cf:84:01:ef:0f:d0:af:a3:bf:
18:d5:ad:ee:ad:68:3d:09:75:22:9d:4c:67:f6:d0:07:81:38:
62:6f:3a:4a:5a:a2:2c:1f:4e:c5:91:40:d2:12:d9:d2:99:f1:
6e:32:ed:31:1a:58:64:b7:75:3d:22:ff:76:37:ce:35:c1:17:
f3:83:dc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:51:12 2026 by rpki-client