Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
File: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json)
Hash identifier: v/sMSyQ31oO4Hzt46PfaU2EMjd2pItv9vT2YgbjlY/w=
Subject key identifier: EE:AC:B1:08:C8:C2:13:FC:0D:40:58:30:BF:A8:50:57:A1:A2:F5:DE
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Certificate issuer: /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial: 019D27727978EA80D3C0567CFF9483790613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
Manifest number: 0CD1
Signing time: Thu 26 Mar 2026 00:01:46 +0000
Manifest this update: Thu 26 Mar 2026 00:01:46 +0000
Manifest next update: Fri 27 Mar 2026 00:01:46 +0000
Files and hashes: 1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: I/JJRRZx+n6Bi5exi+T+BLAVVJpTL8vDuvpAuqINOMc=)
2: uvizS4ukuC_gEdKACqyA3QErVlg.roa (hash: 7ZQzxgJlvYq7/1nZi/aQGYcGnnJ6bHEVEWXvW9zSYP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:79:78:ea:80:d3:c0:56:7c:ff:94:83:79:06:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Validity
Not Before: Mar 26 00:01:46 2026 GMT
Not After : Mar 27 00:01:46 2026 GMT
Subject: CN=eeacb108c8c213fc0d405830bfa85057a1a2f5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:a9:cd:5c:bf:4b:09:e6:b2:85:68:bf:2a:
fe:45:0b:27:9d:be:f7:8f:ca:d7:00:b6:26:9b:17:
ab:3c:a6:63:56:3e:d4:18:84:9e:b1:e3:b0:af:6a:
72:d4:b5:ec:47:40:52:32:2a:69:d5:cf:0d:e0:b9:
09:69:ae:dc:bc:80:7b:c4:df:a7:86:66:0d:4e:37:
d6:df:dc:e1:a2:b8:ff:ea:18:e3:96:7b:1c:fc:8f:
01:37:e4:2d:29:f1:78:a0:3d:5d:98:39:4e:93:88:
4a:37:be:85:59:7a:e4:82:bb:46:2e:52:11:b6:48:
d8:68:f5:ea:29:97:9d:48:de:8c:1d:de:6a:bf:35:
40:88:d2:fa:e9:fd:2d:30:b7:b2:66:fe:5e:48:f9:
36:72:27:82:38:48:e7:28:55:80:d2:46:ae:f4:3b:
bd:68:68:4b:47:84:ca:7f:03:b4:59:c4:f9:1c:98:
99:c5:dd:e9:75:0f:01:9d:f7:97:db:f0:45:93:4f:
83:c9:67:a7:2b:28:ef:e3:24:fc:e4:75:a2:f3:2f:
e9:6f:b5:30:72:a1:48:af:f4:c3:b6:92:6b:3c:6a:
34:3b:52:2c:4a:7b:fb:a0:12:2b:0c:f8:05:b6:9d:
5f:cc:9a:56:fd:9a:52:68:52:c7:7a:14:65:00:f3:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AC:B1:08:C8:C2:13:FC:0D:40:58:30:BF:A8:50:57:A1:A2:F5:DE
X509v3 Authority Key Identifier:
keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b5:2e:bb:0c:32:b5:6c:8d:90:e7:52:f0:f7:9d:6d:d7:74:
04:49:0c:18:59:ab:36:03:b7:0b:a2:8c:09:ac:07:24:fd:df:
36:45:88:65:c5:c0:6a:92:ea:c0:b6:e4:06:6d:80:8e:2d:06:
03:e6:3e:29:8c:bd:10:c0:21:5b:23:9d:e8:04:5a:86:00:56:
9b:9e:2b:45:e2:53:69:cc:bb:70:03:09:47:c3:cc:1a:48:c0:
26:4b:96:86:69:5d:56:80:71:37:05:ac:f6:b1:9c:b6:a1:09:
66:90:4a:2a:6e:5a:9a:f2:1b:27:c6:60:a0:0a:35:94:52:9b:
1d:21:02:97:cb:f4:01:d7:1f:dd:ff:9b:ac:34:28:05:93:a5:
86:99:5b:63:ba:c1:74:ac:8a:80:1c:09:0a:69:5a:66:51:12:
ff:b7:6e:73:74:65:7a:53:31:ab:5f:97:f8:d1:34:b6:54:d5:
4a:16:4b:b2:f7:35:b8:33:83:93:a7:2a:50:a0:ce:87:cd:34:
05:c0:15:c2:cd:57:2c:fd:49:ce:5b:8f:8c:c7:51:b0:d7:d9:
68:67:09:60:7f:75:c2:08:4d:18:43:92:f2:ba:43:92:93:45:
72:33:15:d7:dc:df:fb:af:3b:55:dc:86:60:ba:e6:e8:14:96:
11:56:e3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:28:37 2026 by rpki-client