Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: 0Z+HP8xGIW4xyTDjEvjTgW0aG2kgjb2iQChuvcV4pKs=
Subject key identifier: 76:DC:19:E3:2A:EA:F0:E1:48:B0:AC:DF:13:68:EE:23:B2:EF:E3:16
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 019D28846258827CEC4A47FF5DE6B73C037C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:00:57 +0000
Manifest this update: Thu 26 Mar 2026 05:00:57 +0000
Manifest next update: Fri 27 Mar 2026 05:00:57 +0000
Files and hashes: 1: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: Rs/CV80/I9noAJJHXdaUm0FGtatNNWJ+3QU/hWHpwY0=)
2: ZEzLOpu5XtR6NBna_6IDb8EqXXs.roa (hash: 3osUcSjQKH0ELMcPBLnQ81viVvl9FJ67k0/UaKaDqp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:62:58:82:7c:ec:4a:47:ff:5d:e6:b7:3c:03:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Mar 26 05:00:57 2026 GMT
Not After : Mar 27 05:00:57 2026 GMT
Subject: CN=76dc19e32aeaf0e148b0acdf1368ee23b2efe316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:e6:ea:46:ed:c7:bb:1d:32:91:4b:de:b0:
df:6b:24:0d:0b:73:20:d2:ea:1e:81:01:cb:65:13:
12:a1:30:9d:55:85:8f:5d:87:74:c2:00:5e:60:78:
15:5f:7d:a8:b1:68:3f:a1:92:af:4f:5c:03:44:c6:
c2:1b:02:17:51:64:d5:2f:30:9c:7a:2a:31:93:d9:
79:9a:24:41:33:48:70:6d:18:c4:38:58:07:fb:6e:
85:2c:ec:ee:48:cc:fc:3c:8c:2c:27:61:df:ad:92:
b7:27:2b:bf:90:15:1a:03:f6:c1:8b:f6:29:c4:b9:
c2:4e:06:e7:bd:b0:66:64:43:2c:c5:03:07:19:03:
76:2c:de:30:05:0e:41:be:73:1f:d8:a9:da:18:fa:
9f:d1:ff:a1:ad:52:88:d3:6f:e7:85:0b:e0:f1:cf:
7c:c9:38:d3:c6:ac:96:99:2a:b2:ce:38:69:91:c5:
4c:15:f0:ca:c0:33:08:d1:f2:29:68:fc:85:dd:d5:
3f:ce:26:15:e7:d4:bd:b1:13:5e:cb:97:6b:d3:7c:
66:ef:0c:46:ca:98:c9:b0:6c:22:f0:f7:0b:95:80:
a1:66:95:2e:22:a1:15:3f:e9:a3:93:e7:89:3e:53:
91:15:d2:8d:37:09:5e:9b:0f:fa:81:2d:31:96:fa:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DC:19:E3:2A:EA:F0:E1:48:B0:AC:DF:13:68:EE:23:B2:EF:E3:16
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1e:0b:a4:2e:ec:b6:35:7a:3f:4d:f1:d1:19:d2:ec:40:6e:
22:40:e8:dd:17:80:d3:af:25:80:37:57:3f:75:00:fc:d6:95:
b4:4e:8e:25:f6:e6:99:15:00:ca:1c:da:0c:10:f3:49:2e:80:
e8:b7:23:a6:dd:a7:7a:9e:06:e7:16:e6:74:b1:a6:f0:3e:ab:
a6:55:cd:22:91:1a:41:ae:b7:02:c4:ec:b9:b7:f5:cb:0f:d2:
45:0d:9b:10:ec:89:c4:87:a2:2c:b8:99:3c:be:1c:89:fc:e9:
f6:49:20:d3:6c:ff:90:33:81:7a:63:9b:e5:f4:2f:40:86:39:
dd:0d:94:e9:d7:3f:24:4f:de:c3:ff:3e:85:b8:a0:c2:3a:a6:
3e:ea:b6:df:a2:d2:fd:70:63:b3:cb:b0:e4:68:37:95:a3:c0:
77:8d:cd:a0:e5:99:be:85:17:04:42:5f:df:c1:6f:9a:2c:00:
9e:71:2a:b5:a4:98:fa:28:ec:04:43:39:24:30:0f:ae:82:d0:
b0:31:f0:6a:73:85:77:0f:d7:9b:a2:3c:97:1d:15:a7:45:6a:
a3:f9:00:79:17:ae:ae:55:49:19:77:a2:3c:ec:4f:6e:78:40:
ef:65:21:b7:1c:5b:11:02:cb:8b:25:87:13:36:d1:61:b3:1f:
7e:16:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:51 2026 by rpki-client