Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier: GWnr0D8ekzdG2cNwNINjjZf018mxJdTThyL+Y7BH1Ic=
Subject key identifier: 15:7D:C2:B3:D8:4D:CC:B6:AF:F5:83:4E:F3:D3:1B:17:2E:D4:27:6D
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 019D27E006AF57BC73BFB3C2EF2445D83CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number: 04DD
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: sBAKfvAWsXIiFkJPu+x/3Gi9lR1aYNF/DRMkYNI1lno=)
2: A5r5Qaig76Fi-h_x1MJZp-FQeMg.roa (hash: BufIVjQJ6C3azRulNXmnwhmvj6IKqHgaJCn65BJ4x/c=)
3: v-Rbh3pxcVUKjfTtgX5z8ooyagk.roa (hash: uuCpdpCqPNt2JovXlEfYgnQ3c+mrQwXOG7tL6P9AQY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:06:af:57:bc:73:bf:b3:c2:ef:24:45:d8:3c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=157dc2b3d84dccb6aff5834ef3d31b172ed4276d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:79:6a:6e:b0:be:3e:bf:9d:89:f2:8f:10:31:
8f:bc:e1:f0:4b:4d:16:22:11:d5:2b:33:99:be:b3:
ba:db:27:2a:74:40:09:a3:a9:6e:a0:66:b6:3d:7f:
ed:2b:ad:5b:c3:60:47:16:c6:2a:37:a4:2b:42:f2:
73:11:ee:67:fe:8d:40:c6:71:9a:aa:51:a5:72:7b:
c4:10:08:63:cc:63:f6:ee:78:1b:77:01:33:07:1c:
1a:dd:cf:76:14:2f:61:c0:9d:86:cf:55:48:f2:f6:
31:2e:b9:1b:4e:c6:0e:50:22:d9:7f:6c:a8:3c:1e:
4d:35:aa:8b:11:83:1e:cf:e5:a9:7b:95:0b:96:c0:
59:d5:4f:28:8c:ee:ce:4f:e7:d6:45:91:eb:25:87:
8d:b4:5b:62:ac:af:73:c7:7f:58:c1:d4:03:70:41:
88:f7:56:1f:0c:8b:a4:7f:72:96:a2:8e:55:21:c2:
d4:c4:73:29:4c:b7:36:59:af:9d:74:9f:4d:6b:4e:
1d:94:d1:c2:47:e4:f1:07:56:1f:53:3a:f7:68:12:
7d:13:18:a9:91:5b:59:79:0a:0c:af:12:a7:84:89:
4b:c1:f4:76:62:b2:90:b1:8c:63:a4:f4:fd:98:98:
85:9c:55:e2:45:ff:be:84:1c:2e:d8:9a:a8:09:56:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7D:C2:B3:D8:4D:CC:B6:AF:F5:83:4E:F3:D3:1B:17:2E:D4:27:6D
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fd:e7:c3:65:12:97:79:1c:41:a5:94:d1:fe:5a:20:a8:7a:
aa:93:28:d8:e6:c3:2e:80:7c:45:bd:cc:d1:09:c6:1a:3d:c6:
29:ac:64:6f:37:ed:f1:90:15:0c:ee:21:f4:ca:41:90:a2:35:
bc:08:61:7e:15:5b:cb:e2:4c:1c:6d:e6:33:fe:4f:b1:38:69:
3b:e1:43:9e:e0:2c:e6:46:82:61:bd:a8:15:40:11:5b:32:8c:
cf:cc:37:32:52:bf:5e:c0:ff:48:ff:5d:80:70:13:04:6e:98:
91:21:e9:54:71:0d:f3:fd:42:3a:a9:26:e8:07:35:5c:13:2a:
63:d2:6d:ac:29:6a:85:b7:c8:e3:73:17:23:af:48:84:60:45:
bf:ef:bc:aa:da:c8:fb:ea:44:da:54:2e:d2:48:52:7f:80:c5:
7a:8f:df:28:d9:8f:6a:6b:ab:7c:65:31:9f:11:6e:95:c8:a2:
a1:8b:ad:4d:57:10:d5:81:2b:1e:1b:8c:a6:0f:c9:da:03:37:
a4:3c:62:b7:f6:a2:df:7f:bf:15:7d:63:7a:eb:09:ca:db:a4:
02:cd:51:4b:1f:0d:ab:61:1f:09:5d:6b:ce:0f:29:c3:21:82:
b2:fc:d8:c9:9a:5c:7c:35:a3:f7:da:01:be:58:cb:d3:ee:52:
8d:cd:f3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:11 2026 by rpki-client