Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
File: IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json)
Hash identifier: 8fGaU2wL1ynUtmbad9n7xWeEQxhTjNW5tu4JPdinmIc=
Subject key identifier: 7E:D7:81:3B:47:C3:4B:15:F6:39:DB:02:3A:65:F6:20:F0:40:CE:F3
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Certificate issuer: /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial: 019D27720E28312864A1F893399CC31A8942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
Manifest number: 0F03
Signing time: Thu 26 Mar 2026 00:01:19 +0000
Manifest this update: Thu 26 Mar 2026 00:01:19 +0000
Manifest next update: Fri 27 Mar 2026 00:01:19 +0000
Files and hashes: 1: 9gPhrTVXXrWCqCjsm71By0RzzoI.roa (hash: 7vmmrUGhqUOQFhjNyWVb6vw1/SSr/8CDWs1hZa2ebfU=)
2: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: DjTEIf/lqmrbz7hzjIg0WOXoIwC3W5j4pseb6kPJQvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:0e:28:31:28:64:a1:f8:93:39:9c:c3:1a:89:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Validity
Not Before: Mar 26 00:01:19 2026 GMT
Not After : Mar 27 00:01:19 2026 GMT
Subject: CN=7ed7813b47c34b15f639db023a65f620f040cef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:38:d9:f2:5a:c9:26:57:d8:60:01:49:cb:
27:d0:46:79:f7:7e:79:8a:89:4e:8b:55:bc:2b:aa:
17:27:cd:0e:b1:16:44:52:76:41:32:71:90:31:8b:
f0:70:76:f1:da:04:a8:5b:12:ad:31:89:23:2a:3e:
6c:39:7d:01:1e:e5:fa:a1:64:6c:2c:2e:34:17:8e:
66:02:19:70:fb:9e:40:ca:84:79:1b:ca:13:7b:7e:
6d:31:ff:fe:d0:55:22:b7:df:e0:34:11:e9:aa:8a:
76:ec:a4:40:57:d1:d3:ae:c5:13:16:4d:00:e3:3b:
b8:05:99:91:0f:70:c2:30:c4:0a:d7:5b:3b:d6:dc:
91:54:eb:74:c7:e3:7d:93:05:f7:be:3e:78:b7:14:
ab:7a:89:fc:19:dc:bc:a8:1b:29:55:09:f1:4d:35:
a2:6f:31:88:c0:28:a7:3e:5e:8d:67:70:6a:f4:0b:
06:92:2f:c4:7c:81:5e:87:34:ef:3f:1a:68:61:25:
cf:4a:d0:bb:a8:0d:59:f1:c4:96:b2:1a:43:71:05:
b8:26:6d:a3:a8:1f:23:53:6e:fb:9e:af:b0:6e:04:
9b:c5:59:28:0b:66:f9:5a:7d:6a:82:49:ca:7d:3a:
18:b3:75:0c:32:db:66:8d:30:b4:ca:7d:12:9c:0d:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D7:81:3B:47:C3:4B:15:F6:39:DB:02:3A:65:F6:20:F0:40:CE:F3
X509v3 Authority Key Identifier:
keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d7:64:23:89:b8:36:57:d8:a9:45:89:31:a2:cc:81:a2:7a:
6d:4c:a6:25:63:fc:7c:15:a8:e7:4f:1f:93:0e:6e:88:f7:1e:
70:7a:4b:db:36:c1:be:cc:f1:fd:8d:19:9c:0a:35:02:43:98:
42:81:47:23:5b:26:77:fd:cd:f5:87:47:c7:21:9c:9d:36:1d:
48:40:a7:f0:ac:fd:c5:02:54:75:f0:fd:d2:b3:3c:b1:18:39:
dd:f3:fd:0d:8c:24:42:c7:ba:1e:4f:9c:39:aa:6b:ff:fe:fc:
fb:d1:27:de:9f:43:cd:2f:2d:31:26:cf:c3:a8:3f:47:1b:42:
c3:ed:85:54:2a:62:23:ea:3c:8e:69:98:7d:81:a9:ba:92:13:
4e:83:37:b9:18:9a:84:53:a6:52:b4:a5:a3:4a:a8:f6:e4:c7:
40:4f:60:3e:34:85:db:11:cf:2b:ed:9d:ed:88:73:86:c8:6d:
ae:e6:59:20:3b:56:6b:38:d7:93:c8:01:bc:1c:57:ad:74:4a:
a6:2a:88:b1:d8:c5:55:35:39:70:0a:4e:eb:d1:c1:ea:1e:2e:
e8:d5:f3:d7:2c:9a:99:ba:ca:f7:d0:54:60:3d:92:b9:d8:25:
86:04:04:40:ce:f3:19:4a:d0:19:3b:ff:68:ef:a3:a7:ef:ac:
b7:a8:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:38 2026 by rpki-client