Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
File: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json)
Hash identifier: dM6OolEq5WCR1bg1CjZV4iubi7/Y22A/f5IB9mYnUEY=
Subject key identifier: B2:2D:43:41:9D:16:96:25:F9:30:AA:D7:73:12:61:74:F0:11:3B:E0
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial: 019D31BE2CFE2B39C588175828275B8D947E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
Manifest number: 1889
Signing time: Sat 28 Mar 2026 00:00:40 +0000
Manifest this update: Sat 28 Mar 2026 00:00:40 +0000
Manifest next update: Sun 29 Mar 2026 00:00:40 +0000
Files and hashes: 1: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: PXZ2KKOviqv4pDTvEM5T7Dgi2eEzpl/WR6EuJw8YAP8=)
2: PTV1hUcFPrtTj8H3jV-0PBWi2aA.roa (hash: LVcltXxTmaC1wumCr9KKXzHWOb4BW8vwqUzLL/KaVfw=)
3: TCIlW-BlRgj9qm8sFvnqA1D_U0w.roa (hash: 3xQeUcgzW7NvDJ0rSLhKBh5bLuiyyVyOLX9rka6WNDc=)
4: pt0vpyYLtzmKEkPORjUEbfLrK04.roa (hash: aNfm1fqgMjkcUsOwar3uLSqc/xreSHXCvlrwdm4pI3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:2c:fe:2b:39:c5:88:17:58:28:27:5b:8d:94:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Validity
Not Before: Mar 28 00:00:40 2026 GMT
Not After : Mar 29 00:00:40 2026 GMT
Subject: CN=b22d43419d169625f930aad773126174f0113be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:f8:82:d3:c8:5e:2a:f0:78:e8:83:ed:cd:
6c:c1:99:63:d6:37:32:09:29:66:41:5f:7a:40:d2:
b9:bc:f8:da:6f:63:f5:4b:a2:3a:d5:7c:8f:1a:c4:
7f:81:41:ac:52:23:af:32:95:25:5a:71:bc:00:02:
e9:b8:02:69:6c:3d:4f:78:59:9f:b2:2d:92:9a:09:
a6:e2:53:cf:6c:9e:13:ea:74:0c:2d:84:41:84:e0:
e7:b6:31:97:28:b5:52:52:be:8e:99:d2:65:d2:16:
a0:1a:12:ce:c7:d9:92:79:88:e6:4a:cf:b2:5e:20:
72:33:4e:8e:15:77:cd:4e:5f:2d:36:99:c6:08:5d:
ba:07:a8:a1:cb:13:25:04:6a:27:cb:1b:41:00:25:
79:cd:13:41:b1:11:8f:f3:be:5c:5a:07:d6:3a:a4:
40:ce:ca:22:51:7c:b0:a5:aa:f8:44:d2:fd:dc:1d:
96:db:24:b4:5b:b6:eb:97:cc:4a:99:4b:06:96:87:
10:e3:aa:10:46:29:3f:be:65:a2:3b:bb:c4:d8:e5:
13:d4:c6:53:18:00:8c:eb:20:19:d6:a9:44:8f:74:
63:67:5b:4c:2d:d2:a8:5d:b2:ba:e6:b4:36:1d:e7:
ec:a7:67:92:53:b1:6d:b9:45:20:15:ab:6d:c7:08:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:43:41:9D:16:96:25:F9:30:AA:D7:73:12:61:74:F0:11:3B:E0
X509v3 Authority Key Identifier:
keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4c:03:ca:1d:58:28:c1:8e:0c:8d:6b:41:5a:6f:9f:55:84:
96:90:d7:08:33:d2:b2:4c:cc:6b:60:98:76:78:57:dd:96:17:
cb:f4:23:fc:5d:5f:bd:2d:bf:5b:e2:8b:5f:5d:5b:77:72:fe:
96:70:e2:b9:24:66:98:58:fb:14:6f:d1:d0:96:55:00:c9:b5:
1c:93:ab:f6:32:76:6b:93:23:c5:0e:f0:5b:e1:43:2e:65:39:
6f:fc:c6:d3:a8:df:4f:d2:ec:80:82:f6:00:e8:9d:f0:2f:68:
07:7b:77:29:a4:d6:5d:b0:d8:5a:77:62:22:5b:41:7f:8d:13:
e0:27:70:a6:e0:02:f9:f9:4d:60:22:2e:d5:cf:34:98:cd:b7:
f4:6e:26:fa:3f:e5:ee:25:15:c0:57:b7:2a:66:f3:1f:08:dc:
4c:86:39:0c:e3:bd:cd:26:14:08:65:c3:38:13:70:3a:cc:59:
e5:82:d5:75:19:ca:fa:99:95:57:92:c1:2b:e5:77:04:39:19:
dc:69:82:63:f9:6a:8d:65:da:aa:2c:73:ae:23:fb:5c:f4:00:
42:26:ff:79:4c:a8:fa:52:3f:dc:85:73:70:bb:ba:8e:82:77:
27:b3:4a:ec:df:1f:22:e8:d7:a7:09:a3:9d:fe:51:52:0e:f8:
80:15:b9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:40 2026 by rpki-client