Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: 5e9cJts1QMylLtkhTV1hC/CJ53BI7Bxt0M11wCd4V1A=
Subject key identifier: C6:74:0B:90:9D:3A:90:22:F0:56:AC:63:2F:5B:F7:9F:96:DF:F3:2F
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 019D2695F3D7AE8A2BD14FD7707F6A16CCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 06DF
Signing time: Wed 25 Mar 2026 20:00:54 +0000
Manifest this update: Wed 25 Mar 2026 20:00:54 +0000
Manifest next update: Thu 26 Mar 2026 20:00:54 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: s6wumS8kGe2fvz90x44XmLeHmkrWoeQJi9CC0ctxXHA=)
2: RnVTKZtoHdvPsfS8AH4yl7Tn4u8.roa (hash: Pgpu3NuPaXsm7XOY/YOTMwi4KbLTR5P/cSiW4/B73kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f3:d7:ae:8a:2b:d1:4f:d7:70:7f:6a:16:cc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Mar 25 20:00:54 2026 GMT
Not After : Mar 26 20:00:54 2026 GMT
Subject: CN=c6740b909d3a9022f056ac632f5bf79f96dff32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a1:ea:a9:4f:fd:0b:35:78:57:f7:76:71:88:
6b:18:60:0c:fb:55:25:03:7b:1f:e2:9a:df:61:c8:
59:15:9b:f5:bc:e1:84:9e:b8:27:01:4b:da:5b:cb:
82:a2:06:b5:dd:1a:05:8d:b5:f7:6e:d5:8b:fc:e0:
e9:ce:01:cf:67:00:fa:57:8d:55:77:c6:7b:d1:cd:
2f:f7:3b:05:39:69:f2:b4:67:44:6f:99:ed:c1:2f:
18:b8:07:4c:c4:22:42:e2:1b:a0:c2:c9:ad:20:06:
65:a0:8e:d7:4b:10:b2:f3:4b:3e:a1:de:ef:1f:5f:
e7:f9:7f:fb:3a:c2:78:f3:26:12:de:1a:98:fd:b4:
82:26:ec:5b:7e:c3:d3:10:de:b5:ff:0d:b3:bf:50:
1c:c0:34:27:de:bd:47:df:4f:85:65:40:d0:25:5e:
ca:44:46:2f:42:2f:e8:43:07:8b:bd:3b:8f:90:02:
ed:60:a9:52:86:4a:47:08:3b:67:75:a0:a3:2f:d1:
57:5d:ba:d8:25:14:10:33:00:fe:e7:cf:30:fb:d5:
c9:33:a3:bf:40:e3:34:27:cc:0a:1e:02:98:da:71:
93:ef:9c:d4:6e:01:40:88:ae:ee:30:77:c8:79:28:
28:fe:c2:35:ab:c8:6a:5a:5e:49:44:f6:93:35:1b:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:74:0B:90:9D:3A:90:22:F0:56:AC:63:2F:5B:F7:9F:96:DF:F3:2F
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f6:65:21:fe:22:2e:ea:da:68:c7:64:b8:93:b0:11:4e:ce:
44:78:25:15:67:e5:1e:6d:65:9d:ba:b7:37:48:07:8a:59:26:
2e:fe:be:da:24:a9:b8:00:69:7c:32:f2:d2:cb:3e:77:9c:40:
60:ae:fd:d3:ae:a9:f7:76:4c:a8:d1:bc:73:1d:7f:65:a2:2c:
96:1e:cb:5a:bd:95:27:f5:76:d5:16:79:ab:4c:71:cf:09:4c:
0d:1d:3b:1f:b4:20:c7:d1:de:cd:4a:3a:8b:0a:68:09:28:83:
ce:0e:03:b2:73:87:ae:ef:f8:bb:16:3b:4a:93:33:fc:1a:47:
01:64:ea:be:27:bd:3e:bf:1e:a4:10:63:18:96:5d:b4:5b:5e:
f9:df:0b:60:1e:78:59:ec:0a:c6:2b:db:83:39:21:75:a9:7e:
76:0a:0a:91:39:4d:9c:a5:94:05:3d:a2:e7:21:c4:88:96:96:
4c:1a:fb:6d:d1:4c:70:2c:02:cb:af:66:c5:80:eb:92:57:25:
5e:1d:b3:55:07:12:7a:5a:2d:9b:a8:7c:42:8d:02:d0:eb:a6:
06:ce:ef:c2:77:51:02:2c:c8:d3:98:86:b0:18:1a:93:78:3d:
2c:c1:88:f8:cf:38:05:7d:e3:6b:ae:9d:ad:61:32:a5:03:e6:
68:bc:de:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:01 2026 by rpki-client