Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: BMpXNC2jr34/CV1mwBA+BjScbrfalVP5OVN48tzo8IM=
Subject key identifier: 8A:15:E3:D7:BC:DB:DB:F0:F5:64:F3:67:32:85:C2:F4:51:11:C0:20
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 019D2960DC11E97093A3F4C11511232741BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0F95
Signing time: Thu 26 Mar 2026 09:01:46 +0000
Manifest this update: Thu 26 Mar 2026 09:01:46 +0000
Manifest next update: Fri 27 Mar 2026 09:01:46 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: Aa2TWDyRHYRVmMejxHMfm/Scg2P+PEkeamDr2ATEOt4=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:dc:11:e9:70:93:a3:f4:c1:15:11:23:27:41:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Mar 26 09:01:46 2026 GMT
Not After : Mar 27 09:01:46 2026 GMT
Subject: CN=8a15e3d7bcdbdbf0f564f3673285c2f45111c020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:23:b4:21:e1:69:ad:38:3f:c5:4f:91:3e:
d2:9b:d0:a6:80:f7:87:14:f5:5c:7c:9b:c0:97:75:
14:16:a7:fb:b5:91:8a:cc:68:92:2c:ad:e9:f3:a7:
72:ba:b0:34:51:3e:40:c2:61:c0:d3:41:a0:31:d2:
30:ac:73:60:5f:cd:26:7f:49:57:13:d9:ed:2f:6d:
29:a5:0f:4b:10:9d:7d:cc:01:1a:df:0a:19:4f:e4:
74:d4:af:c1:ec:a8:9a:20:fb:a3:17:9e:85:98:ef:
9d:23:51:2c:43:e6:a0:ac:02:4d:e3:a1:d9:2b:36:
bc:95:b5:34:10:f1:f4:e9:e7:5f:1b:a9:42:25:cd:
78:39:7c:a9:1b:60:29:75:dc:cd:fa:11:dc:af:f5:
83:61:bf:3c:4e:b4:4c:7c:f5:db:a3:ce:0b:7c:e3:
70:34:da:b2:85:e0:58:84:b2:34:33:80:2e:b8:39:
92:42:ef:12:17:b8:34:d0:6d:fd:17:c9:e4:8f:c0:
28:d9:cd:af:3d:cb:48:4f:5d:a8:3b:ea:2f:54:78:
9c:51:21:f1:eb:7c:06:8d:1b:58:6d:c7:04:33:ec:
95:a3:cd:11:9b:fb:0e:34:76:26:9f:3d:48:7d:7d:
82:67:4c:34:22:b1:4f:b2:39:a4:82:26:53:74:37:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:15:E3:D7:BC:DB:DB:F0:F5:64:F3:67:32:85:C2:F4:51:11:C0:20
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3f:0f:d8:ef:d8:66:85:2e:ca:8b:07:e9:1a:21:ec:c1:7c:
29:fd:cc:e2:eb:0e:23:10:b6:8f:44:b8:c1:81:6e:79:36:f5:
46:3a:ac:a6:da:94:c0:f8:cd:e7:4e:e1:ae:70:7c:c0:e3:3d:
81:be:da:c8:c6:1d:d3:44:88:e5:a8:74:3c:fb:9b:8e:b3:c8:
1a:87:d0:13:1e:4f:3a:ec:ba:de:06:93:ae:f9:11:04:88:7f:
8a:ff:e2:69:60:d8:06:31:d5:6b:5d:54:18:a2:4a:65:4e:19:
2a:96:98:63:a0:3e:81:eb:6c:54:9a:ff:ae:47:00:cd:6d:0b:
d6:e7:87:82:e3:46:5e:d3:4f:ad:6e:61:99:a7:ec:e3:34:d1:
e3:7f:b9:7a:f8:07:1b:7b:d2:67:00:b5:c9:a3:9e:5c:3e:e2:
22:04:f9:71:70:9a:de:4a:1f:dc:1a:ae:45:f2:de:bf:d7:47:
ea:f0:f8:17:e9:04:b1:d1:3e:17:ad:0b:9a:8c:9e:8a:8e:dd:
f7:05:41:cb:3d:44:bc:20:71:21:e1:f4:da:93:0a:1c:f6:24:
70:94:cf:11:2d:47:e8:ee:d1:f1:dc:9c:fc:41:e1:ff:9f:6a:
41:ce:e1:6c:af:e2:a1:7e:73:7b:fc:16:04:b4:79:4d:2c:a6:
e8:cf:08:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:11 2026 by rpki-client