Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: But84GWUR3itsTAlm8PQe0urL0Reu6SuDnjVP+h63yo=
Subject key identifier: 66:89:1D:49:DF:20:0C:DF:C0:0D:FF:5F:FA:33:F7:56:31:83:87:68
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 019D2816EC85259E1BEB63CC070F08EB1699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:24 +0000
Manifest this update: Thu 26 Mar 2026 03:01:24 +0000
Manifest next update: Fri 27 Mar 2026 03:01:24 +0000
Files and hashes: 1: 4seyTDBe9bL2x8Z_6sMBSrOYvgM.roa (hash: Ld+vj6OA1gKqESzL9huJc2LDFrgP5kvfK/8UeR3bm/4=)
2: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: CN9mDiP/cfuW3YscZimorwS69K6Q84P8z5926dDxUyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ec:85:25:9e:1b:eb:63:cc:07:0f:08:eb:16:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Mar 26 03:01:24 2026 GMT
Not After : Mar 27 03:01:24 2026 GMT
Subject: CN=66891d49df200cdfc00dff5ffa33f75631838768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:70:b6:24:85:30:11:61:c7:79:d5:05:10:
89:28:f2:d3:e4:52:a5:b0:39:26:f5:d8:b8:94:a2:
85:fc:06:32:35:07:81:de:b0:af:43:98:6d:19:6d:
f9:51:d9:2a:89:cf:ee:34:e1:b8:dd:4d:2c:cd:69:
0d:3f:4a:d8:de:23:cc:cb:ec:8d:68:fc:1f:52:30:
8e:be:3d:40:c8:e3:3f:51:50:c2:93:a0:7f:1a:aa:
ad:39:c6:03:7e:29:1c:50:90:6a:12:e6:2e:16:6d:
1f:37:a4:ef:6d:ae:97:b9:5c:30:f7:3a:0f:a3:b6:
9f:90:8f:81:bd:3a:c4:bf:04:98:ee:86:a6:8d:d7:
67:56:55:84:7c:0f:d9:42:c8:cb:16:3c:1b:ca:51:
ef:d0:9f:e9:1a:a3:5e:aa:d5:45:d2:dc:d1:b9:c5:
01:50:1d:3c:e6:4c:09:11:7a:7c:5c:6b:52:1d:a2:
f6:5e:26:db:9b:0d:bc:64:c0:02:46:fc:de:50:ea:
a7:2d:4b:27:5b:24:3d:de:58:31:e7:8b:b0:00:a7:
7d:3e:93:ee:30:f8:62:88:86:14:93:57:22:ec:72:
39:8a:eb:25:c6:c3:62:94:18:49:00:2c:3f:4b:f0:
79:96:15:da:fa:9c:f6:9a:c8:36:b5:9e:c2:41:a8:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:89:1D:49:DF:20:0C:DF:C0:0D:FF:5F:FA:33:F7:56:31:83:87:68
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:aa:e0:f2:bf:1e:36:35:b0:48:7b:da:6c:79:8f:81:df:bf:
97:96:0f:a1:21:9d:31:10:59:34:56:68:8f:a8:a4:4a:91:4f:
d5:31:32:c7:8c:4e:b9:e3:0d:89:ec:ce:70:3d:fc:9a:be:4c:
b6:3f:c5:f4:78:6a:8b:ed:60:10:8f:b8:49:a2:29:f6:bd:3f:
10:4d:7a:05:20:77:fd:bf:b7:cd:d9:4d:6f:8c:dc:10:03:c1:
d2:4d:87:66:38:3e:c8:9f:cf:75:fe:78:c3:b4:95:1a:2b:6a:
28:0b:bf:7f:f6:13:e6:da:e8:80:41:49:3f:82:16:6d:fb:bc:
4e:36:68:91:b3:7f:bb:57:00:ce:f2:f3:d9:31:37:53:45:ce:
07:3a:ba:cc:de:4c:9e:8d:7e:f6:e9:e0:39:2c:93:cd:a8:4f:
3f:34:86:dd:92:18:64:00:7b:eb:23:78:f6:d3:62:2e:0e:29:
d4:fc:04:0c:cc:4c:1a:30:f4:15:40:e2:f0:85:d6:15:2e:00:
f2:10:ab:c6:a7:c1:92:23:45:a1:ee:b9:e3:25:65:b4:10:d6:
69:e0:1e:ad:5c:b1:7f:1a:6a:b9:33:13:d9:89:51:9d:e5:50:
4f:cb:7c:08:7b:c4:bd:08:3a:ed:15:49:12:b2:b6:b9:be:f8:
c7:66:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:08 2026 by rpki-client