Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
File: 9U47eX9Lo36_cYmkwU8FINfPMNc.mft (raw, json)
Hash identifier: 2H7MBgtEdxf3jIcXQqkN4fh+6GmnbJp2/+EqCQ4YQ5E=
Subject key identifier: 75:D7:16:9E:5B:4F:8D:3C:D8:D5:A0:D6:C4:3C:E4:C2:E2:2B:F1:61
Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Certificate issuer: /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Certificate serial: 019D2B176C4EA2B55ACC607CCE4990011797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
Manifest number: 05A1
Signing time: Thu 26 Mar 2026 17:00:48 +0000
Manifest this update: Thu 26 Mar 2026 17:00:48 +0000
Manifest next update: Fri 27 Mar 2026 17:00:48 +0000
Files and hashes: 1: 9U47eX9Lo36_cYmkwU8FINfPMNc.crl (hash: woF+tXSCWGAX8GtIU06C1tkv73y4KP5biwI5+57axzM=)
2: ha9gNtI2Det0BHkc3WoBLr_4eN0.roa (hash: 3ZwCki1NyOWEqytxpVSycbqzMVm9+ptmvP6m+BbcDfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:6c:4e:a2:b5:5a:cc:60:7c:ce:49:90:01:17:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Validity
Not Before: Mar 26 17:00:48 2026 GMT
Not After : Mar 27 17:00:48 2026 GMT
Subject: CN=75d7169e5b4f8d3cd8d5a0d6c43ce4c2e22bf161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:de:5e:9f:9b:18:0a:2b:6c:3a:43:c4:46:
52:85:aa:46:dd:75:99:3a:18:00:a4:54:3f:5e:34:
e7:98:5c:d8:f8:4d:28:7f:67:ec:67:7f:87:75:29:
aa:95:26:95:e8:b7:7d:58:72:48:cd:f0:01:5b:87:
d5:50:6d:9d:ce:66:b6:32:b0:e0:38:bf:47:5e:5f:
21:e4:a7:ff:a3:17:de:c2:16:26:00:38:ef:ad:81:
0b:69:40:ff:ee:c1:b9:96:6a:4f:09:f3:45:b6:09:
f1:90:92:89:97:72:f9:c5:08:39:b1:cf:c4:cd:90:
d3:58:88:ee:93:bb:b3:02:b9:e3:36:3b:7b:1f:cb:
76:bc:e3:bc:42:80:47:9a:89:b6:a5:fe:6c:b5:a2:
02:46:9f:d9:31:39:25:26:1f:f4:89:65:ac:16:a9:
ed:8d:60:e6:96:cf:cf:6b:8f:97:8d:88:ad:80:2a:
81:7e:ec:7c:1c:1d:3b:67:03:81:b0:8b:ea:9d:55:
bb:1d:03:72:50:c5:30:7a:eb:18:e0:5d:bc:49:c5:
91:2e:40:24:2c:1e:26:12:e6:39:9d:81:55:08:bc:
85:88:ab:fd:c8:67:86:b6:2d:0a:d9:45:2f:10:ce:
b8:c1:55:89:fb:a7:50:77:99:27:0e:bf:60:c6:f8:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D7:16:9E:5B:4F:8D:3C:D8:D5:A0:D6:C4:3C:E4:C2:E2:2B:F1:61
X509v3 Authority Key Identifier:
keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cf:3e:25:0e:f5:f1:f7:78:f4:f8:6f:ed:14:13:9f:55:25:
d5:b1:fb:10:63:43:73:42:11:cd:d5:81:c2:6f:f9:4d:da:b3:
f5:c0:9c:65:d6:41:f2:ef:bf:4b:14:5f:a1:49:46:d5:64:88:
2f:23:d8:a4:95:0b:c7:89:87:c1:63:26:4b:03:62:ff:ed:db:
e0:4e:41:db:6a:36:d8:66:08:a6:c0:e9:81:37:3a:83:43:4f:
35:fa:fe:f4:c9:c3:d4:b9:13:60:3b:8a:50:60:62:74:2e:b4:
4d:ec:9d:a2:8b:bc:36:bb:a3:da:23:de:ca:06:00:d9:d4:08:
39:e3:fc:e5:4a:ac:60:db:97:81:ea:f9:7c:a8:11:ff:c0:34:
55:03:d0:b6:d8:39:a1:2b:05:81:df:b5:bd:78:19:08:f5:43:
a1:01:4c:42:f9:5b:95:d3:29:50:7b:5f:ea:89:2b:78:d2:52:
de:05:c7:d9:46:4b:92:05:60:31:e1:03:ab:aa:cd:5b:4a:4d:
8e:c8:36:16:be:7a:60:b0:64:a2:95:70:f8:b3:95:d7:c6:5b:
a6:32:c1:dd:27:c4:fb:df:6d:82:25:fa:3e:92:02:e4:ab:6f:
67:a2:55:94:e2:19:ce:f3:de:55:72:f5:c1:58:16:f8:a1:0d:
b2:4d:31:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:43 2026 by rpki-client