Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: tlQwJqTm2OLsDrqoBfMkvNFBhTNx/+jq9yS4NKiAKKw=
Subject key identifier: D2:A8:E1:4D:D5:4A:52:C5:20:37:64:10:4F:43:81:8B:34:EF:69:5F
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 019D27723BE6F0C2673B3445B7588EC538DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 07FE
Signing time: Thu 26 Mar 2026 00:01:30 +0000
Manifest this update: Thu 26 Mar 2026 00:01:30 +0000
Manifest next update: Fri 27 Mar 2026 00:01:30 +0000
Files and hashes: 1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: 0W/wg25rrCx2bRoaIxjc3p3fPIcJUGWMtlvZV6RMXco=)
2: tKfj59q_uSVeOVXFF8rwGwcX1DE.roa (hash: M8dRarfAWOblSl0tPp78zm1/aNBzJLXYpivkbEtUqgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3b:e6:f0:c2:67:3b:34:45:b7:58:8e:c5:38:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Mar 26 00:01:30 2026 GMT
Not After : Mar 27 00:01:30 2026 GMT
Subject: CN=d2a8e14dd54a52c5203764104f43818b34ef695f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:af:1e:4d:04:b7:86:b9:6f:57:05:d4:38:
64:1a:c2:50:cc:72:40:ac:52:ea:d8:ce:e3:cb:5b:
99:eb:71:1d:e4:9f:ad:2d:11:d0:8d:e8:bf:6e:e1:
eb:30:0a:a5:ff:36:fc:95:13:9b:e5:49:7d:fb:91:
63:94:14:8e:00:d4:07:ae:f3:e5:90:d6:0e:db:16:
6e:d8:60:24:47:aa:63:8b:a1:25:72:9b:e2:bc:95:
02:a6:95:52:95:51:ae:2e:07:90:2e:ac:72:19:f1:
71:0e:31:17:01:ce:b1:d0:5c:ec:f6:cb:33:da:d3:
9c:c9:65:69:6a:b7:4c:4e:ad:4d:81:75:fb:7d:2f:
35:4e:05:24:29:1e:67:85:6b:b8:cb:c3:2d:b7:17:
7f:0f:4f:4f:cf:cb:4a:01:8a:e1:46:5e:22:68:31:
3d:90:ca:e7:8b:b4:96:5a:2d:a4:00:c6:72:16:bb:
c0:fe:51:48:c3:08:ca:dc:04:0a:0c:6d:0e:40:5f:
1d:05:44:4d:78:cd:2b:29:28:09:7c:75:e8:19:08:
b8:17:ab:c9:40:1a:01:64:1a:59:ef:99:56:fe:5e:
2d:16:63:69:c7:5c:06:ba:32:16:62:a3:2b:ff:b7:
87:da:7f:1e:0c:fa:3e:ad:c0:03:2a:0b:ec:64:da:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A8:E1:4D:D5:4A:52:C5:20:37:64:10:4F:43:81:8B:34:EF:69:5F
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b8:66:c3:7c:b4:fd:19:37:c5:0d:d7:77:93:35:b8:83:3e:
5d:8c:0a:6d:43:cc:a7:33:6b:ae:08:34:0b:e6:f3:c4:bc:f9:
74:07:4b:bd:5b:66:05:e4:a7:27:6b:18:74:42:38:89:fe:86:
bf:d7:da:3f:13:1c:e7:da:10:36:a2:e7:18:76:30:05:92:0d:
6d:c6:ec:67:f8:8f:9d:05:dc:3f:d0:c1:ab:73:53:aa:d1:ba:
21:79:79:c4:a5:ca:82:5f:58:8d:ab:2a:1d:32:c2:93:1e:a0:
57:74:dc:18:f9:d2:d4:99:29:24:84:5e:a0:09:c1:fc:99:96:
b9:ec:31:8f:9d:a0:61:8e:e7:dc:3f:5a:7b:6b:0d:12:89:1f:
69:ea:63:81:97:01:fc:13:4a:7b:16:5a:05:59:d2:e7:2d:c8:
2c:24:6f:b1:07:53:77:ae:63:f9:d3:f3:d6:d0:1c:72:45:81:
13:1c:e8:05:77:4b:a2:96:0f:ae:b1:c2:3a:05:82:ab:30:bc:
7d:55:77:39:58:3b:e9:1d:63:1a:02:23:0f:ca:76:ec:b9:a6:
99:3e:79:3f:28:7f:d2:80:60:de:3e:a1:00:05:3b:16:0f:a4:
c6:5d:75:04:9e:cd:f7:cf:eb:57:88:01:2e:d0:c3:29:7f:ae:
5e:81:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:27 2026 by rpki-client