Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
File: 9RDHudzJJZg-WbWGzVmrVUviWYI.mft (raw, json)
Hash identifier: 1a0IAmRfUigL11e0mf699UrgMEOXy2vNlZaRkpsg15k=
Subject key identifier: AF:0E:C3:B3:40:DB:4B:A2:D5:84:1B:53:22:9E:96:DB:52:FC:F9:2A
Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
Certificate issuer: /CN=f510c7b9dcc925983e59b586cd59ab554be25982
Certificate serial: 019D2961A75BC83C979E13635D7D6876234A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
Manifest number: 0120
Signing time: Thu 26 Mar 2026 09:02:38 +0000
Manifest this update: Thu 26 Mar 2026 09:02:38 +0000
Manifest next update: Fri 27 Mar 2026 09:02:38 +0000
Files and hashes: 1: 9RDHudzJJZg-WbWGzVmrVUviWYI.crl (hash: +8sTOMS7iDg1ROmE1GJrY3uwvn+xSsLuB5CCGeELoug=)
2: wTA4ZoIz75kHn1WMirNEgMY65FE.roa (hash: ashXJm/A/tacrnrBady83etVIast6DpVJH2Dt/iNOM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:a7:5b:c8:3c:97:9e:13:63:5d:7d:68:76:23:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982
Validity
Not Before: Mar 26 09:02:38 2026 GMT
Not After : Mar 27 09:02:38 2026 GMT
Subject: CN=af0ec3b340db4ba2d5841b53229e96db52fcf92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:73:b9:da:1d:91:b8:50:c4:03:67:18:e7:
d3:3f:3e:36:94:c5:f4:e0:dd:6b:00:80:9c:d1:88:
84:1e:a1:03:6b:ed:15:a8:65:0d:a2:07:22:fa:29:
0f:e6:92:ef:2c:53:0f:99:5c:ac:ec:39:1a:27:65:
e0:e5:fa:2c:8d:c3:1d:7a:6d:e2:32:10:77:ed:1e:
0d:41:cc:55:c8:e9:7d:17:ad:8e:a7:ef:75:d8:fd:
f9:e0:de:33:06:d5:79:3d:a0:90:43:32:8d:a4:cd:
44:8d:b1:ce:8d:2c:7b:31:2e:d6:86:a8:f9:93:6e:
ca:7e:a1:2f:00:76:bf:da:fc:f6:ac:55:e6:9b:42:
6c:e2:0f:be:14:23:d0:5e:4e:d0:f0:7d:13:54:ce:
64:d2:e1:54:62:7d:99:1d:87:f0:b5:8b:af:49:81:
b8:26:1b:02:cb:9f:de:09:66:0e:c5:95:29:5f:ab:
09:3d:72:f4:43:0b:8d:b2:9b:33:3b:df:21:dc:47:
13:c1:39:64:9a:ec:c5:8e:01:a4:43:16:18:a1:72:
51:8e:a0:2f:19:fd:dd:6f:4d:9e:3e:ad:ca:ed:7e:
33:ef:9d:c9:7e:7b:f1:88:72:67:62:1e:45:6e:1b:
4a:54:0b:25:5c:9e:4f:b5:65:bf:d4:b1:de:3f:09:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0E:C3:B3:40:DB:4B:A2:D5:84:1B:53:22:9E:96:DB:52:FC:F9:2A
X509v3 Authority Key Identifier:
keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b8:89:fb:51:58:27:aa:3d:2c:bb:7e:99:6d:51:f7:93:5d:
3e:a0:57:a7:d5:3f:56:99:ab:5b:c4:59:2e:d6:af:c7:49:68:
05:65:2b:9d:1d:fc:29:f9:5e:4e:d6:46:6f:59:62:33:0a:30:
c0:44:80:01:e4:29:58:17:9b:3a:7f:36:bd:bb:bc:22:9d:3c:
91:c3:08:d1:65:0e:ad:48:7d:9c:f5:4e:7a:26:83:76:e9:af:
c4:66:fc:cd:49:ca:95:19:ef:0d:a8:e9:38:20:fd:b7:2d:f8:
84:bf:b7:90:b4:ad:4e:ab:bc:ef:36:d6:2e:79:2c:2a:dd:b7:
71:42:4d:65:bd:b3:14:b0:89:b6:f1:61:a2:cc:99:ab:8f:70:
4e:e3:e4:42:b8:44:05:ab:5c:df:94:7c:47:ac:11:35:aa:99:
5d:16:55:06:9f:1b:af:b3:3e:2c:58:79:20:7c:65:60:9a:ec:
b8:25:a2:5d:7a:f4:29:f5:75:36:67:f2:df:df:f8:4a:28:2d:
b4:9a:ee:d5:4f:c5:9e:a8:76:f3:10:23:2f:4c:13:4d:06:ed:
c1:44:db:fc:be:10:0e:b5:54:33:73:c5:b3:f5:c2:df:a5:44:
7f:50:c1:5c:0a:1a:2f:0e:d4:ce:d6:59:da:44:f7:76:c2:50:
06:bb:92:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:03 2026 by rpki-client