Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json)
Hash identifier: NELL7rB43jMjdk1O2cCK6ku6zXgHGnXjx5PN7GQp8fQ=
Subject key identifier: A6:5A:A9:CC:26:3B:F8:A9:A7:51:75:71:03:86:20:DB:33:7A:4D:CB
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial: 019D26CCCBCEBD6EC3041E02F195E01F40E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
Manifest number: 01C1
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: U2sCV5JrkzH/nXEiC29odoIYuyKTwnUw4XEw/l+QpZw=)
2: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (hash: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:cb:ce:bd:6e:c3:04:1e:02:f1:95:e0:1f:40:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=a65aa9cc263bf8a9a7517571038620db337a4dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:83:21:19:bd:df:25:cb:70:ed:ef:2a:4b:
1e:18:c8:d6:a7:0d:5a:8c:6a:6e:b9:7b:2e:7e:16:
93:99:9b:5e:de:b2:93:8c:ca:0d:5f:23:38:87:a6:
68:b2:6a:6e:a9:b6:62:fa:4d:3d:26:87:78:84:72:
ba:ff:21:34:a7:bb:b8:56:36:8c:6e:c4:b3:63:05:
35:c7:54:0d:64:3d:aa:e1:26:92:d0:04:3f:ae:de:
6b:3c:b3:e2:fd:2d:8e:42:06:90:dd:68:8c:5f:c3:
b5:82:03:45:a4:6d:63:ff:e1:5e:ed:db:73:b1:5e:
41:d7:36:ad:15:55:aa:60:94:89:b8:d0:aa:e3:e7:
60:92:29:25:c8:23:05:97:c2:62:c2:60:7d:47:6c:
b7:35:c6:5c:92:43:84:7f:9e:4e:c4:5c:e0:ea:7a:
d6:36:10:f2:23:4b:b8:85:2a:b6:f5:b7:8d:b3:2f:
2f:a2:a8:26:5d:61:ed:7f:d8:93:03:cd:01:e2:2f:
46:ef:3c:f7:52:14:65:b8:12:b4:3f:86:11:33:96:
4e:d4:5e:21:1d:9f:98:15:1b:7b:ee:59:b9:79:8b:
81:cf:72:fa:f3:6e:ff:6d:21:3c:e5:e1:57:40:9d:
b1:82:2c:65:da:c8:1b:75:ec:11:18:c7:62:42:37:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5A:A9:CC:26:3B:F8:A9:A7:51:75:71:03:86:20:DB:33:7A:4D:CB
X509v3 Authority Key Identifier:
keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:32:9d:c6:35:c1:0a:9f:2c:b8:1f:fb:8d:e9:3e:c3:50:83:
90:79:e1:e7:9b:13:b0:d2:fa:73:59:5c:4e:7a:c0:33:86:7b:
55:a2:6f:24:84:c6:9f:b9:67:f1:b4:86:fa:a0:f1:f0:3b:56:
a9:08:1c:44:70:3f:01:d1:e5:55:df:de:6f:ed:99:1b:4d:ec:
94:62:4f:cf:75:bf:6d:69:3d:4a:c7:81:99:6f:ad:5e:28:db:
1f:ce:e5:a0:28:69:c7:67:17:52:0c:72:1f:d0:10:b2:ee:54:
64:68:b0:ba:ef:a5:72:20:0f:f1:c1:bc:a8:3f:cf:8b:02:ca:
74:e4:8f:5f:10:f9:4a:dc:2c:b8:e3:f6:02:f8:fe:c0:fc:84:
ca:76:3a:e3:ec:0b:1d:32:2f:9a:3e:0f:89:96:53:7d:83:87:
34:20:bb:19:c6:40:1c:70:85:c7:5f:81:47:aa:40:9f:28:89:
cb:63:1c:b1:22:24:64:2b:8b:69:33:70:66:e3:27:bd:15:65:
78:fe:ce:22:15:58:df:7d:02:ee:d9:9c:dd:66:15:13:d5:35:
93:75:01:6c:c0:25:37:3f:3a:eb:db:5d:58:f2:d6:ef:38:d9:
3d:8c:fc:29:e5:63:89:32:a8:bb:4a:ef:72:16:92:85:62:3f:
f9:16:e9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:18 2026 by rpki-client