Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
File: 9hUWPY_cRSP7uCJN89wgese94ck.mft (raw, json)
Hash identifier: ZOMyuq72TtiHRkhlMfntUB4q7Uc4xTH3X/am5kitvkI=
Subject key identifier: 70:91:B0:2F:5E:69:61:BA:5A:83:1E:A5:43:73:79:36:E4:18:21:05
Authority key identifier: F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
Certificate issuer: /CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Certificate serial: 019D2695FE102C82A919C7B2B3AC4DEA1004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
Manifest number: 019A
Signing time: Wed 25 Mar 2026 20:00:57 +0000
Manifest this update: Wed 25 Mar 2026 20:00:57 +0000
Manifest next update: Thu 26 Mar 2026 20:00:57 +0000
Files and hashes: 1: 9hUWPY_cRSP7uCJN89wgese94ck.crl (hash: 8384A7S1Il/fYsA8eNRmlkf75IlfY0R0R4tjfozeMqE=)
2: ZW4Y1TGuNOmvztoKC-GttBiocmk.roa (hash: Pc22uXR6lgCrGRVc00EDjUUEOpeb78zqYMkdzAmaFbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:fe:10:2c:82:a9:19:c7:b2:b3:ac:4d:ea:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Validity
Not Before: Mar 25 20:00:57 2026 GMT
Not After : Mar 26 20:00:57 2026 GMT
Subject: CN=7091b02f5e6961ba5a831ea543737936e4182105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:13:45:ef:15:08:ed:72:26:1e:43:95:66:
bc:3c:8b:3a:d2:ca:b1:6f:4b:e7:c8:98:40:db:ed:
b2:bf:5b:8b:a8:c7:e7:81:d0:45:e3:c1:60:d5:8d:
15:3f:9f:1b:77:d9:1e:44:59:74:0c:5e:c1:1b:46:
df:27:89:69:fe:db:a2:4a:a0:43:a1:e7:42:c2:03:
d9:11:42:0e:34:fb:f5:ee:c6:d9:a8:b6:06:c8:c6:
11:fa:50:ce:9d:a5:56:52:b8:00:91:9a:b3:f2:80:
79:c9:df:0b:05:3e:cf:d8:32:d5:bb:c9:de:61:61:
b1:96:56:47:0d:04:6c:3c:4f:4a:39:8f:a4:72:41:
08:0a:b7:96:f7:4f:eb:93:2c:48:80:a9:7d:40:b9:
b8:1c:d5:e4:80:98:44:f6:a7:dc:b6:d4:3b:e2:03:
e8:a0:8f:8c:e3:14:19:8e:65:f1:b6:fc:f9:20:86:
2a:a1:bb:1c:35:99:67:ef:d2:f9:64:58:74:c4:71:
65:19:ff:9d:63:80:d1:02:ed:37:7a:81:20:bf:0d:
76:43:16:28:0e:6f:df:03:d5:72:de:86:30:62:36:
41:f4:70:f9:4b:fc:05:f8:2a:a1:e4:ba:af:4e:da:
3c:25:05:52:4f:0b:03:ad:4a:93:00:70:78:36:12:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:B0:2F:5E:69:61:BA:5A:83:1E:A5:43:73:79:36:E4:18:21:05
X509v3 Authority Key Identifier:
keyid:F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b0:a8:45:90:f6:57:6c:e4:92:a1:82:eb:8c:13:b4:b0:3d:
e0:66:37:e4:e9:c2:98:60:19:0e:ef:e8:38:5e:b1:f1:b0:54:
0a:fe:fb:73:27:51:a7:85:8c:f0:32:60:4b:40:9e:4a:97:a3:
ce:a1:4b:38:c5:ce:1a:2a:5e:c9:61:f0:22:5b:4f:c2:d7:79:
8e:25:1c:59:4a:86:4c:a0:9c:53:06:be:7e:67:cc:69:51:10:
e9:79:0f:c6:d1:65:f7:d2:70:52:28:0e:eb:ea:82:43:a6:a2:
30:89:bd:cf:ee:5f:fd:47:e5:7e:b0:09:a8:93:26:8a:b1:14:
27:da:64:bb:54:85:0f:9f:f2:78:f1:5f:2b:2f:4c:e8:83:8f:
2a:12:95:32:1e:4f:64:54:71:06:3c:97:94:90:41:b9:dd:92:
f7:97:80:c4:a1:3e:32:32:ad:12:71:37:34:8d:5a:5d:12:84:
05:71:c0:3c:6a:5f:50:c9:b2:48:2a:75:8d:ee:18:50:8a:84:
fc:5e:b7:e7:f1:d9:53:79:ae:d5:1c:e7:12:a8:f9:f6:94:a4:
1a:68:d4:6e:b3:9e:c2:07:38:dd:5b:54:d8:4c:b2:2d:97:12:
a8:60:1a:85:08:96:43:8d:49:9b:49:1c:dc:6d:fc:8a:5a:05:
d2:a5:e3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:39 2026 by rpki-client