Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
File: 9Y3yxGnJeIlfhFgCTFBugByPsho.mft (raw, json)
Hash identifier: 7AV3XLC2ozYyAeGRyqOMsD7baD+eMLmG2fsRKpu81zk=
Subject key identifier: 27:28:69:3B:89:CD:57:1B:37:2A:E1:59:F9:EF:1D:D6:E5:BF:31:6B
Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a
Certificate serial: 019D29294E0B78364D631086B935E8AB11E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
Manifest number: 160F
Signing time: Thu 26 Mar 2026 08:01:05 +0000
Manifest this update: Thu 26 Mar 2026 08:01:05 +0000
Manifest next update: Fri 27 Mar 2026 08:01:05 +0000
Files and hashes: 1: 9Y3yxGnJeIlfhFgCTFBugByPsho.crl (hash: v4Jht+m2fS+mWcjUaLZx5kSvCvlPGgt3k49uHSjjlN4=)
2: ipd84dEDEe7cj4KStBVIlQrMGyg.roa (hash: Sbm22JKwRV49kiJvKoySC0PxR1MmmHGGM53bqn3Gb1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:4e:0b:78:36:4d:63:10:86:b9:35:e8:ab:11:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a
Validity
Not Before: Mar 26 08:01:05 2026 GMT
Not After : Mar 27 08:01:05 2026 GMT
Subject: CN=2728693b89cd571b372ae159f9ef1dd6e5bf316b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:71:56:e1:38:6c:bd:ca:a9:49:50:da:f4:
94:84:f5:76:a6:d6:06:b8:5e:b2:74:3b:25:e8:d1:
34:61:cc:95:2a:1f:79:30:be:05:be:df:93:ce:c8:
8e:7c:2c:e8:ae:9e:bd:4f:73:c4:e4:a5:a5:36:7e:
88:0f:62:b1:dd:8e:cd:48:0b:6b:26:a8:d8:eb:97:
03:e5:e7:1c:55:45:02:d7:5a:f1:eb:29:c9:5d:03:
4a:38:3a:fb:1e:92:7f:02:1f:29:a8:50:11:9b:ec:
67:4d:29:8e:02:5c:ef:8d:90:e5:c9:b3:8a:41:5a:
e4:40:ef:ba:09:0c:c8:e4:4e:c9:5c:5c:f7:90:e7:
63:c6:99:51:2a:41:32:05:75:ac:cc:9a:ea:e6:3c:
bc:fd:30:dd:00:66:42:3b:b8:93:79:d6:a5:aa:3b:
b1:75:c6:d9:02:0a:38:2d:f9:db:61:1a:bd:8e:f3:
df:82:b0:e5:23:5e:aa:e1:84:36:c6:33:24:1f:d2:
64:b3:b2:e2:43:3c:97:4e:b3:16:1d:72:86:eb:8c:
05:74:29:65:67:99:06:6e:3e:62:74:72:c3:63:56:
3a:ea:a5:10:23:13:73:42:2c:d8:7c:62:00:75:e3:
bc:17:3c:1a:27:32:2d:7c:68:b0:dc:85:04:61:d4:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:28:69:3B:89:CD:57:1B:37:2A:E1:59:F9:EF:1D:D6:E5:BF:31:6B
X509v3 Authority Key Identifier:
keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9a:db:d3:4b:dc:35:f6:d1:3a:61:21:87:cd:ef:d2:3c:5a:
d0:d2:5a:29:cf:c0:23:1b:94:0c:9d:40:7b:b9:20:9f:04:18:
d2:93:f0:55:9a:62:99:db:c7:ca:8a:ec:18:2d:8e:aa:bb:9a:
ce:87:40:28:aa:f9:a3:14:fb:53:e2:a5:8b:12:55:07:de:e0:
a4:29:5f:12:f8:95:18:91:45:6d:a8:a6:8a:d7:4c:73:d1:51:
fd:c2:62:20:4a:9d:a6:12:8f:4a:45:d2:3c:f4:e8:30:54:d5:
7b:f5:10:15:ad:5d:de:1e:ce:ea:7e:91:ad:42:ef:84:08:5a:
59:bd:66:92:6c:bf:83:4c:06:4b:fa:b9:e7:d6:13:9a:7e:19:
43:eb:8f:f7:3e:8c:40:01:08:f1:d3:96:47:40:4d:05:89:a2:
bd:d3:df:81:87:19:dc:a6:1e:2d:cb:68:96:e7:36:a7:f5:a1:
89:10:44:46:fe:16:39:84:12:c1:8b:e5:57:ff:07:e6:23:98:
ae:d2:33:1c:09:a4:1c:16:4e:03:27:eb:a4:8c:06:74:0f:cc:
7b:6e:39:cf:da:69:d1:6f:32:89:66:21:f7:ff:88:ca:11:5c:
44:1f:55:50:7b:b4:e3:d6:82:9a:f2:b8:d3:d7:2c:64:6b:04:
8f:a6:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:13 2026 by rpki-client