Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
File: 9WR7mt8n-vd9-AgsVVG3N1asPe8.mft (raw, json)
Hash identifier: yIcKaHygSKRgWPPzNo22YqAUlaHz3jBgOB8SciPj69M=
Subject key identifier: BC:9A:B1:3C:CF:84:81:A1:F6:2A:5E:DD:EF:00:76:62:67:3E:23:F6
Authority key identifier: F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
Certificate issuer: /CN=f5647b9adf27faf77df8082c5551b73756ac3def
Certificate serial: 019D262849A252180DD9F1B73F75352ECA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
Manifest number: 11
Signing time: Wed 25 Mar 2026 18:01:07 +0000
Manifest this update: Wed 25 Mar 2026 18:01:07 +0000
Manifest next update: Thu 26 Mar 2026 18:01:07 +0000
Files and hashes: 1: 8L86gshlVnRWr5gdY2DjZCCezS4.asa (hash: YjYfeGlfl/t841MtUmbFSM8G4/SKtO5ZfDYqZpGqHMA=)
2: 9WR7mt8n-vd9-AgsVVG3N1asPe8.crl (hash: gwPRJ4HYhsjqdHeOGPoJBqQLIK0g4sI5XmjhJXJ9l/w=)
3: kcx511HkgH6_p24UHLo0MXG7V-A.roa (hash: dNUOg34buyXeNE8RHao0TAiuQSfhv2tTmHDrugM/EPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:49:a2:52:18:0d:d9:f1:b7:3f:75:35:2e:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5647b9adf27faf77df8082c5551b73756ac3def
Validity
Not Before: Mar 25 18:01:07 2026 GMT
Not After : Mar 26 18:01:07 2026 GMT
Subject: CN=bc9ab13ccf8481a1f62a5eddef007662673e23f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:4b:5a:03:35:5e:f1:72:a8:d7:8f:2b:c6:
bd:e9:5e:ce:aa:33:30:17:55:8f:b6:cc:f2:29:a5:
aa:15:94:7e:25:8d:2f:ca:8d:a5:80:4c:75:d1:c2:
85:01:f0:36:5f:b8:53:e1:1d:da:f8:82:a4:c8:cd:
73:5a:02:3d:ad:75:48:cf:cb:b7:f5:cb:7f:60:42:
4a:67:1f:70:b8:e6:a5:28:38:d8:eb:f2:1e:22:1a:
8b:34:8b:89:23:7d:e1:44:00:ba:dd:10:ae:05:f2:
1e:7d:aa:6b:42:8c:1a:3c:9e:90:b1:c4:77:e8:d5:
c1:e1:ec:ef:7c:30:f0:ed:b3:8d:11:09:42:48:5c:
1a:85:8d:e8:a1:dc:eb:27:38:e6:55:a3:b1:9c:53:
60:6c:07:93:3c:cd:37:50:b5:dc:79:63:22:f0:96:
3f:dd:79:be:04:fd:63:16:09:26:c2:c4:c0:15:c0:
82:e5:df:42:50:a6:33:e6:15:98:35:bb:4a:65:6f:
ee:81:90:9b:be:de:59:22:dc:7f:21:5f:14:64:66:
50:c0:de:7e:64:5b:a8:c9:e9:02:af:c2:0e:dc:5a:
c4:ee:4c:7c:bc:00:86:33:de:12:81:57:d2:8f:47:
6e:59:95:d3:5b:ea:1d:d9:96:5f:1d:41:10:c5:b0:
32:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:B1:3C:CF:84:81:A1:F6:2A:5E:DD:EF:00:76:62:67:3E:23:F6
X509v3 Authority Key Identifier:
keyid:F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:72:74:7e:be:23:f3:31:cd:4a:6b:ec:de:66:1f:2c:9b:fb:
44:11:12:b3:f7:e9:f7:de:34:01:a1:23:f6:5c:ef:43:b3:ad:
58:d3:58:55:c4:64:bb:42:01:d9:ae:39:ad:d9:04:80:87:4f:
1b:40:cf:a6:5d:31:9b:83:8f:7d:a9:cc:83:76:6f:23:9d:94:
2a:f3:c3:0e:47:8b:a4:77:e2:42:4f:71:86:97:45:c7:ee:02:
91:01:75:ac:26:58:6b:1d:a3:92:a1:56:bf:2e:7a:a0:8b:01:
8f:67:54:bc:42:4b:56:fa:4c:b3:5e:d7:1e:65:bf:09:80:a9:
96:8a:5e:8f:8b:44:d8:80:bd:38:8d:34:18:fc:59:3a:4f:d8:
f0:7f:db:94:af:e2:9f:04:24:d6:e1:6d:88:ff:31:5e:c3:3d:
7a:47:93:17:75:0a:04:3c:fb:72:7f:9c:24:b2:28:41:30:7f:
1d:22:76:ee:b5:99:0d:55:8d:41:63:41:d9:c9:d0:06:3f:00:
29:d9:4e:b3:ae:da:a2:a2:73:62:62:e0:96:90:75:a8:84:fd:
fc:67:63:2b:30:ed:4e:8a:8c:3c:2c:9f:64:af:e8:00:5f:36:
fa:8a:5a:fc:33:91:24:87:30:78:6e:46:64:9f:ee:de:27:c5:
f0:9e:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:23:09 2026 by rpki-client