Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: hptm2jUcu+cJ2B3ofcpHNTKRfFHFXNX9v//Pmj0+iSU=
Subject key identifier: AB:C2:1F:4B:60:03:98:EB:96:B1:6F:52:08:D0:F8:26:68:5B:3D:07
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 019D2A052595E6C59F4985C04462450D9AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 0D75
Signing time: Thu 26 Mar 2026 12:01:13 +0000
Manifest this update: Thu 26 Mar 2026 12:01:13 +0000
Manifest next update: Fri 27 Mar 2026 12:01:13 +0000
Files and hashes: 1: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: 3Cxu2rezBODdcxhQI5juWK2yJM1SGHREkxvJsEwHQdA=)
2: m2ZF-74RUnpYCSRQzi58JGlu94U.roa (hash: rCyhTyXzRp0exhx6DF5SAa1YSYaN0bDG8IRLr2ntpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:25:95:e6:c5:9f:49:85:c0:44:62:45:0d:9a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Mar 26 12:01:13 2026 GMT
Not After : Mar 27 12:01:13 2026 GMT
Subject: CN=abc21f4b600398eb96b16f5208d0f826685b3d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:9d:28:5d:82:64:3f:1b:3f:79:dc:57:c7:
67:19:97:e0:f0:f1:97:30:c4:5c:b6:7d:30:3c:ee:
4c:50:a4:ff:22:47:21:2f:aa:e3:a3:b4:67:c9:3a:
a0:03:fd:66:1e:e2:54:72:a4:89:e0:9d:02:d9:4c:
3d:16:fa:e2:31:15:b5:b7:9e:10:df:90:fa:92:f2:
22:fd:98:35:ed:42:66:4e:a7:98:0f:9e:d5:8a:4b:
fa:4c:7b:a0:9a:e0:8a:c8:70:8f:cd:ef:d8:0c:8c:
f5:b2:e3:fe:39:de:db:eb:2c:0e:06:e7:ca:af:87:
fc:7f:0e:82:0a:cc:a3:b3:f6:81:82:d7:ba:d3:fb:
4b:51:fa:d7:ca:72:4f:4d:1e:21:e5:e3:e0:a9:1f:
16:ca:42:04:93:41:07:50:32:9b:17:11:c9:33:1e:
0e:11:d1:e1:01:73:13:56:3c:ef:5e:67:38:a3:7a:
3a:8d:31:b1:19:56:4f:68:dc:d0:8c:88:96:a4:6c:
b3:c4:f9:f8:8c:bb:4d:04:0f:32:67:9d:ec:ba:68:
25:a5:12:7b:8d:7b:40:d6:f7:9a:5a:a7:bc:56:bc:
ae:c1:16:70:53:e4:9d:6d:3a:7a:cc:f7:ec:d0:98:
da:56:f5:6a:5f:03:a1:c5:f0:ab:93:3b:d6:81:cd:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:1F:4B:60:03:98:EB:96:B1:6F:52:08:D0:F8:26:68:5B:3D:07
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d1:ba:5c:c1:b9:25:50:a9:1a:81:48:f7:e1:29:fd:1a:8f:
99:42:16:3f:84:18:7c:bf:4f:74:0a:20:e6:23:ce:0b:18:fc:
6f:9c:cb:06:fa:7c:d2:f8:0d:e3:40:05:90:c8:a0:c0:be:55:
7f:f2:a1:3c:9b:a5:ff:80:5a:3a:2f:e4:2f:47:66:51:47:25:
ca:7f:3c:c8:6e:f0:73:15:3e:23:11:f4:94:e0:39:5a:20:9d:
b4:ca:43:19:08:b2:9c:ed:78:0a:8d:66:95:98:e1:af:a7:36:
f1:b0:f5:61:d0:b6:db:e8:51:c7:b6:24:17:f7:f1:d7:58:cd:
ce:c3:f1:c2:4f:5c:a7:65:7d:5f:84:b1:45:6e:20:63:36:f1:
0a:37:0d:04:77:bd:4a:49:71:26:e3:0d:a7:fb:99:70:8c:5d:
7d:96:0a:d7:7b:e7:ef:0f:91:f3:36:de:fe:16:da:ec:01:fc:
7b:e6:35:d0:17:a2:c2:16:f4:e9:16:a2:69:9c:62:94:c2:d3:
b3:fc:38:ac:b4:cc:13:b5:28:36:06:2d:15:8c:e5:5f:2c:3e:
73:52:5a:43:5d:07:78:1e:74:ab:63:2b:76:47:5d:6d:3f:af:
19:a6:54:ff:ff:07:55:5c:9d:19:fa:ec:1c:53:31:3c:ab:a1:
19:20:f8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:26 2026 by rpki-client