Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier: YoOOP+6q2CCO0fgv4GkOhEymbisW9QiB8g4oC/kWqEg=
Subject key identifier: 48:22:DC:AE:37:52:CF:62:C6:19:8F:1D:C0:A9:CE:02:23:92:CA:20
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 019D2703B7109F6BB017EBE0A32D3183FF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number: 138D
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: 0mgkR8Oatppf6KwkGwCdocguoA0.roa (hash: xBRpWZu5TH9MlFJBVgXYiAXfSpweoxy68K+P+8afR20=)
2: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: fyZs95RGolXb/D1eQdxebxdZRwYWD+MK3952DRmgrW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b7:10:9f:6b:b0:17:eb:e0:a3:2d:31:83:ff:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=4822dcae3752cf62c6198f1dc0a9ce022392ca20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:09:ae:25:75:15:9d:0d:58:a7:18:67:f8:
b5:d3:81:b6:c0:b0:e7:fc:50:45:00:96:e3:0b:81:
de:fd:3e:32:8e:48:f7:db:98:2c:48:38:ed:c4:c3:
de:6f:40:35:7e:2c:cd:1a:b0:0a:d4:31:83:ed:4d:
43:00:4f:d0:c2:83:2f:67:0e:bb:30:20:0f:4d:62:
ce:3a:31:6e:ba:6c:b8:b9:75:61:79:d8:82:ee:92:
8d:94:48:86:8a:6d:78:b1:ce:a5:4c:4b:6e:a1:51:
d0:77:85:df:fa:3e:9e:88:50:0e:64:b0:61:9d:d8:
af:8f:bc:95:a4:d8:95:97:b7:d2:6f:b8:92:db:ab:
ef:5d:8d:a2:f8:76:7d:2b:af:32:0a:b4:9e:18:cf:
d7:e7:ea:8a:7e:a9:80:e3:cc:ef:71:09:ff:24:8c:
c1:9b:73:03:9a:31:cd:16:1e:d4:c4:98:95:1e:64:
3f:b0:0d:f3:85:c1:94:67:08:c8:cc:ea:42:68:5c:
d4:a7:b7:5d:4e:21:dc:32:39:9e:b5:2f:3f:2f:92:
87:e9:b9:b1:bd:0c:c7:99:09:a5:22:ce:6f:2f:62:
4a:69:f2:ff:75:99:2a:50:fc:d5:65:19:65:f2:04:
a5:8a:c1:fb:a8:3e:ce:e7:02:73:47:33:16:dc:ea:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:22:DC:AE:37:52:CF:62:C6:19:8F:1D:C0:A9:CE:02:23:92:CA:20
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:34:21:b8:90:74:bd:a5:42:5b:2e:79:0c:af:f1:5b:54:d8:
ae:ad:11:47:b8:2b:20:1a:46:8b:2e:78:8f:4f:ac:0b:9e:b4:
36:64:c2:3c:dc:20:5c:cd:5e:d0:97:13:83:04:9a:85:58:52:
6a:eb:50:00:22:3f:30:a1:c8:0e:a6:28:25:de:8e:eb:88:30:
60:ff:74:5a:9f:ff:dc:fd:c7:09:f0:fe:e8:4c:dd:84:23:9e:
fa:dc:c8:ce:eb:4d:37:24:9b:81:ba:99:7a:a2:31:ab:20:4a:
74:01:6d:f1:12:33:47:de:4b:22:bf:93:ce:23:eb:b5:5e:b5:
6e:ab:82:0e:d7:79:82:42:26:5f:21:63:68:f8:68:62:ee:00:
4e:7f:9b:5c:0b:31:71:1e:95:c6:ab:0b:1d:7f:6a:a8:67:73:
99:34:cc:a0:a8:4e:29:2b:76:8b:b5:c8:a9:09:a3:15:da:d9:
21:02:fe:c5:de:c9:ea:ab:8f:f7:46:22:20:7b:c8:2b:05:6a:
81:1a:f0:ad:32:a6:66:87:3b:94:57:24:99:ce:79:f9:32:ce:
ae:48:61:c1:63:8c:51:4a:16:b5:56:f8:13:21:a3:30:f5:70:
c7:ec:81:db:7c:5c:70:83:4e:b5:ce:fa:16:29:c1:32:e9:db:
ec:82:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:33 2026 by rpki-client