Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: A3MJI7ZEzM6G/JkzPadKn43vKfSKr3BMH5KtbsGnraA=
Subject key identifier: 9B:09:46:28:8B:BB:F4:7F:A9:D6:CC:FC:0E:9A:2A:64:98:7C:5C:CD
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 019D26CCB37B125986BB01140CCBC3A10EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 1736
Signing time: Wed 25 Mar 2026 21:00:42 +0000
Manifest this update: Wed 25 Mar 2026 21:00:42 +0000
Manifest next update: Thu 26 Mar 2026 21:00:42 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: 2RBZNrPqNpNTIqMFh5Bx1TTf1OgsFb7vxP+poX4oyLA=)
2: ZZanlFxScyN4CQoGhBTQl2sVxVg.roa (hash: A34wmEZaQFDCuGsNd+TzvMoOwERkMP/gXQVur9pCPCA=)
3: pRFsySqGl0tFAUw52aDZNnq-uD0.roa (hash: w8jNvizOVr/p52jNZpTu/WC6lPFW3XL5WSYxYnBEKj4=)
4: xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa (hash: dcuU5KhFuT+OtopOGBCq8QR05uFVdXywWZjFZcyGZgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b3:7b:12:59:86:bb:01:14:0c:cb:c3:a1:0e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Mar 25 21:00:42 2026 GMT
Not After : Mar 26 21:00:42 2026 GMT
Subject: CN=9b0946288bbbf47fa9d6ccfc0e9a2a64987c5ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:c1:1c:24:e4:3f:81:30:32:8f:f5:92:c6:
d2:98:53:7b:3b:35:62:33:c0:bf:e2:ec:a5:e0:d1:
42:2a:3f:77:05:3a:d1:f5:60:ba:ee:e5:b5:f8:51:
30:ae:15:34:36:9c:27:c5:b5:49:d5:76:73:c9:0d:
f6:23:80:20:26:2d:fe:0a:93:77:64:9a:84:cb:3f:
45:8e:b3:37:8d:76:be:4d:7f:c8:7e:a3:bd:9c:85:
0d:5a:84:5f:1f:3e:7d:80:df:c8:c0:17:fe:0a:77:
a3:29:b3:02:d8:2e:7c:df:60:a7:74:e7:94:e9:67:
e3:ef:24:85:b3:46:41:09:a7:9c:c9:2b:42:7c:35:
ab:4c:30:67:24:df:e2:30:b2:c9:0e:75:ef:46:3b:
48:b4:8f:3d:2c:56:dc:c4:37:7e:d9:7b:6a:4e:da:
aa:6a:66:35:e4:6c:bb:54:cd:e2:95:b2:89:28:ff:
4a:ba:4f:54:69:e8:33:c5:bd:f5:3f:93:57:0e:a0:
78:94:35:ec:a4:71:a9:9f:5a:58:04:ba:9f:42:2f:
c7:00:9c:4b:c7:05:f7:a4:d1:81:ce:c4:1f:a9:32:
ba:25:d3:13:d4:b9:ac:1e:45:03:47:dc:a3:8e:65:
6d:f5:8c:6d:87:cf:fe:9a:34:2d:ba:14:d9:57:a9:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:09:46:28:8B:BB:F4:7F:A9:D6:CC:FC:0E:9A:2A:64:98:7C:5C:CD
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3d:42:14:61:02:63:0c:fe:cc:db:94:d2:3d:3a:8c:ab:0f:
29:be:bf:38:8d:d0:26:b2:7c:d4:15:db:74:3b:30:09:c0:16:
2b:78:bd:d3:40:23:07:f9:ba:8b:a9:43:ad:75:c6:02:91:0d:
16:b2:31:0e:3f:b3:42:5e:8c:13:36:2a:54:2c:64:a8:00:1c:
83:08:44:9f:99:c0:32:0f:e0:99:7b:ff:b7:49:15:fe:72:ef:
83:4b:7a:49:ae:39:25:ac:5f:d6:ad:97:d7:cb:68:47:ff:2a:
ce:37:92:e3:fa:ba:b0:67:6d:74:d2:a5:f2:01:15:65:7b:da:
55:c9:d1:e8:ee:78:96:a9:67:f8:d4:20:fd:0d:10:2d:31:00:
dd:59:d6:7a:6e:6f:8b:23:56:35:97:d4:74:ec:cd:a0:1a:3e:
af:af:44:b1:e7:e0:77:f2:0e:d9:ef:55:08:64:b3:3b:7b:7b:
ba:30:c3:73:c7:39:18:65:79:6c:d4:f1:a8:28:90:1a:b2:6f:
c7:b0:d4:32:e6:32:cb:b6:42:0d:1b:a9:e8:99:ab:a1:ac:b8:
ef:01:e8:49:3f:53:1e:af:9c:77:dd:3f:7c:f4:df:a5:5f:c4:
55:0a:67:24:3a:e2:d5:2f:28:46:a7:c1:e0:43:99:fa:cb:1e:
7f:3a:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:23 2026 by rpki-client