Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: WfKkWaHfzAtA2c1U7LlAgixDCQz4FuDuph4BTGheUnw=
Subject key identifier: 22:99:6E:DE:02:62:E2:AC:9B:4E:6A:DE:84:C4:07:BC:EB:49:07:C6
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 019D27724925D58E41374870CF67C9D45AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0F94
Signing time: Thu 26 Mar 2026 00:01:34 +0000
Manifest this update: Thu 26 Mar 2026 00:01:34 +0000
Manifest next update: Fri 27 Mar 2026 00:01:34 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: KhEM/HvzSxsG+BEdjMeUusrJ0FWwV8Td569hQZ4iI6Y=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:49:25:d5:8e:41:37:48:70:cf:67:c9:d4:5a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Mar 26 00:01:34 2026 GMT
Not After : Mar 27 00:01:34 2026 GMT
Subject: CN=22996ede0262e2ac9b4e6ade84c407bceb4907c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:f7:a5:1c:97:db:4b:95:1f:30:1f:df:b0:
3a:0a:38:95:29:65:c4:87:b3:c2:3e:fb:36:77:5a:
dd:36:62:db:42:7e:99:25:61:1b:22:1e:19:42:b3:
e4:22:92:28:93:ae:ee:0e:e8:91:1b:b6:5c:23:0f:
57:4d:57:1e:d0:b9:2d:cb:f8:3c:64:21:1b:fd:4b:
e4:15:1e:3b:66:f6:ed:eb:6a:7d:08:e8:28:33:cb:
df:f9:f8:2b:86:e8:ba:94:96:7c:f1:2c:7e:63:92:
c7:23:59:45:ec:f1:24:d5:4c:c2:26:95:f2:08:02:
81:bd:ee:c1:05:ee:c5:60:cc:50:8b:85:70:40:9f:
f6:e6:d5:17:c6:cb:1b:e8:ed:2d:24:bf:48:6a:b4:
fd:85:58:a4:2d:e8:c3:0c:ec:1e:b0:13:54:26:8c:
06:59:5b:f8:db:11:f4:89:36:f4:cc:3a:0b:a9:b7:
f2:7b:6e:a1:e5:42:56:b4:bd:4f:e2:76:6e:06:b0:
7e:fc:bb:ed:be:05:6b:63:f9:0d:ab:b8:a9:71:15:
3c:ec:60:ab:e0:4a:d3:27:0a:97:c6:70:97:9d:3a:
11:1d:7a:f6:36:e2:ca:9f:72:c8:1d:ae:3f:13:72:
74:ba:0e:b5:ae:c4:3a:e0:bf:c6:d3:11:d5:2c:d1:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:99:6E:DE:02:62:E2:AC:9B:4E:6A:DE:84:C4:07:BC:EB:49:07:C6
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6a:00:f9:5e:f5:02:02:19:a8:21:81:23:a7:27:72:1f:67:
0e:83:ea:37:0d:50:99:ba:9b:56:44:f0:f4:80:c0:f8:f8:00:
2e:fe:15:b7:1b:86:05:e6:00:25:14:d5:18:60:8d:a3:f7:d1:
76:b5:d5:4c:9c:cc:0a:54:f9:e5:63:3d:7e:04:dc:6f:b5:ea:
66:9e:a6:b6:e0:6e:8e:82:ef:73:a8:20:86:62:ff:ef:0f:5e:
59:68:27:0e:47:e7:91:ee:96:2e:56:ac:29:56:4f:f0:4a:66:
2e:d8:17:bd:cb:f0:d7:5d:2b:07:ba:c7:db:c1:0b:14:f8:42:
23:cb:89:bf:4c:7f:b2:6b:ad:f1:c0:5e:25:cc:70:35:34:ed:
0c:b5:f8:4f:0d:3b:f7:d5:bb:f2:de:16:34:9d:d4:74:dc:40:
60:84:d6:9d:68:eb:fb:45:47:c6:da:8d:de:8e:ea:c6:9a:35:
d9:f4:87:35:04:2b:e0:e9:64:02:48:18:59:3e:69:49:e1:f9:
a9:67:b9:42:4a:93:b4:1a:0e:db:72:2f:9f:fd:fc:85:c9:4a:
44:a7:eb:0d:31:fe:13:5b:c6:e7:f0:ae:83:e4:9c:07:b5:21:
54:49:8e:c5:93:55:aa:64:4e:08:60:e7:e4:96:51:61:86:6b:
bd:35:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:38 2026 by rpki-client