Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier: ADRr5lJcFL4rNIAAWhexl9BOE8A3crWIp6sMCLwWQJc=
Subject key identifier: 26:D2:0C:98:EE:E8:6D:94:7C:47:02:AD:CF:07:D1:21:63:3F:12:D8
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 019D2772ADF92F75B0F41FA1DB6EA4612ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number: 0A76
Signing time: Thu 26 Mar 2026 00:02:00 +0000
Manifest this update: Thu 26 Mar 2026 00:02:00 +0000
Manifest next update: Fri 27 Mar 2026 00:02:00 +0000
Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: EN1K7qYDwcRRy3VshLPZDi1s0me6ZDruWnZ5fAHXGLc=)
2: DASQ8NU1yHanG6tnp7TCLgdJSB8.roa (hash: W/n6G98Zq5gjZZSilKHseC4jqvetgfkl6TxxF14gb54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ad:f9:2f:75:b0:f4:1f:a1:db:6e:a4:61:2a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Mar 26 00:02:00 2026 GMT
Not After : Mar 27 00:02:00 2026 GMT
Subject: CN=26d20c98eee86d947c4702adcf07d121633f12d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:45:3d:da:57:22:19:e5:54:5b:e3:a3:55:
59:17:3b:8e:ba:ee:b5:35:9a:35:c0:ce:dd:f9:11:
f3:34:bd:46:9a:7b:58:c1:c9:3f:f0:bb:43:d9:5a:
e1:a9:62:1b:97:8b:43:2c:18:e3:1a:7b:ef:c7:b5:
53:97:3e:77:6b:93:1b:04:38:17:4d:e4:20:c9:0d:
45:0e:5b:6b:73:55:10:44:83:67:a5:9f:27:d0:38:
c4:54:5e:68:ad:6e:15:8f:dc:80:35:c2:cd:d4:2c:
7e:a7:52:b3:1b:3f:09:df:ae:21:48:5f:8f:a2:cf:
dc:d4:44:51:a3:da:b4:4e:36:ec:74:59:4f:5f:03:
ca:ff:ed:2c:5a:8f:a2:da:e6:cc:71:53:2c:61:a4:
c4:4d:ad:39:6a:4d:28:bc:41:84:f6:5a:11:07:17:
58:25:5b:c2:f9:a1:71:33:4d:e1:f0:1c:46:7a:6b:
4d:95:c6:a2:58:4c:a5:e7:0d:72:d9:3b:53:23:64:
f8:6d:1b:af:a2:9b:ff:02:77:87:b2:d3:1c:13:0f:
74:a9:f9:37:2e:b8:b7:45:7e:d2:6d:7a:ae:17:c9:
cd:79:55:c1:c1:87:4c:ce:93:c6:c1:50:5a:8b:52:
a6:d9:cb:3e:fb:32:c0:79:41:01:5a:8c:62:e7:8f:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D2:0C:98:EE:E8:6D:94:7C:47:02:AD:CF:07:D1:21:63:3F:12:D8
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:bb:1b:48:34:42:df:c4:fb:8d:52:37:35:52:49:fd:83:a8:
17:f0:ea:cf:44:b1:8b:07:7a:4e:df:07:b8:1e:31:59:5b:0f:
33:28:57:93:28:d8:45:c6:af:cb:1b:6f:61:da:69:0b:0d:40:
71:ff:1a:52:b8:44:74:32:8f:30:84:00:7c:a5:f4:25:77:45:
ab:11:de:d2:16:ff:e0:1f:e3:7f:fd:9b:5d:25:48:3c:85:7b:
2f:20:13:c5:b6:37:cf:93:6e:0a:9c:79:11:74:12:5c:17:3e:
e9:af:c3:4f:1a:f4:b1:fa:ff:a3:4a:1d:b0:f2:0e:6d:c8:f1:
4e:47:ef:55:73:89:f0:ca:96:07:d7:84:be:f2:27:9f:c7:ca:
f1:d7:ea:c4:7d:0b:da:e6:58:86:ef:f2:07:11:45:56:26:1a:
86:70:90:38:cd:ae:ae:77:4f:54:49:6e:a4:a4:c4:4c:13:d8:
56:12:33:57:70:b6:74:0b:d5:29:33:dc:ea:33:29:b6:b4:b8:
1d:f2:97:24:4b:41:db:7d:de:51:ca:fc:2f:a3:47:cd:ef:ec:
e3:a4:1c:f6:b6:32:28:2d:36:34:8e:8b:4d:88:69:84:2b:6e:
97:71:55:a9:2a:06:9c:5a:bc:ce:08:e8:98:70:57:13:69:ff:
b9:ed:61:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:10 2026 by rpki-client