Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
File: 9A68dJdsw9CsbGRtUHcPjZoWqeo.mft (raw, json)
Hash identifier: ZdfnSJL1MbgVKOdEBz2h3DOEhqJFzyLAtfUB4Z8H9Og=
Subject key identifier: ED:61:22:88:BE:23:FB:EE:1D:0C:08:6A:53:5E:51:F4:92:43:78:BA
Authority key identifier: F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
Certificate issuer: /CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Certificate serial: 019CB135FA80C6844BC8082A57F300E56244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
Manifest number: 7D
Signing time: Tue 03 Mar 2026 01:00:30 +0000
Manifest this update: Tue 03 Mar 2026 01:00:30 +0000
Manifest next update: Wed 04 Mar 2026 01:00:30 +0000
Files and hashes: 1: 9A68dJdsw9CsbGRtUHcPjZoWqeo.crl (hash: bo9RQXlMHdHPbe4xCepcoFQiyy6ONKNx8c93uCp5pg0=)
2: tVu7BYqzK7HHJE7VWOqHniuV0eI.roa (hash: +vdMw+WbTVZEHF+kPAmVUh0yHJxwjTgxs7NEPk4U6mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:35:fa:80:c6:84:4b:c8:08:2a:57:f3:00:e5:62:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Validity
Not Before: Mar 3 01:00:30 2026 GMT
Not After : Mar 4 01:00:30 2026 GMT
Subject: CN=ed612288be23fbee1d0c086a535e51f4924378ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:21:87:c4:37:81:ae:de:24:78:2e:d9:8a:
3b:ef:1c:5a:e3:43:eb:cb:70:ac:f4:a1:f6:d6:6d:
18:75:d5:1a:f7:e7:2b:2c:5e:35:b4:a3:4e:f3:64:
d8:2e:e4:fc:1e:b9:fc:fa:25:f9:70:86:20:9d:07:
0a:75:dc:fc:bf:28:72:f0:ed:c9:ba:ea:a5:16:d6:
6d:b6:a4:d1:f0:bc:eb:c9:91:f8:5c:7c:ab:c6:39:
a7:b9:6e:a6:af:41:ab:12:a5:ea:da:09:14:53:d7:
af:46:b9:fc:4c:44:86:74:02:db:69:c1:65:0c:f9:
fe:a1:c4:ee:66:ba:28:68:c8:92:cd:53:bc:46:d7:
26:f9:b6:04:92:d7:89:e3:c7:4a:4c:7b:29:3b:79:
ee:45:ee:7e:e9:e3:12:2e:ef:bf:ac:aa:16:53:86:
88:dc:c2:1a:34:b2:9e:ac:37:28:74:83:31:e2:15:
e1:de:d9:be:a4:52:12:8d:23:0e:b3:dd:18:62:a5:
21:f4:57:23:bc:94:6d:06:27:e1:42:94:45:27:60:
11:8d:24:6b:46:a8:94:fe:1f:44:80:8e:15:c6:b1:
e9:e1:b8:9d:40:45:db:6f:a5:8f:d6:c8:f6:a2:84:
1d:3d:52:27:3c:d4:4a:44:32:4b:77:bb:af:5f:a3:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:61:22:88:BE:23:FB:EE:1D:0C:08:6A:53:5E:51:F4:92:43:78:BA
X509v3 Authority Key Identifier:
keyid:F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e4:58:d0:d2:a5:00:e3:b3:6b:c4:56:f5:3f:f3:6b:18:ac:
19:4c:09:96:06:c8:72:15:33:a6:bf:ea:2c:da:a6:30:76:fe:
48:f1:46:c6:48:76:a7:df:00:b7:8f:3f:fe:69:20:7d:e6:c4:
ec:b6:67:f5:1c:a2:8f:0e:4c:be:cd:70:fc:45:f5:e0:a8:fb:
c2:02:2b:58:59:ef:21:3b:1f:ae:ee:73:9f:b6:41:eb:80:87:
c8:2c:88:c0:1b:b9:e5:45:7c:64:c6:8e:93:55:ae:4a:31:fc:
df:4e:c6:cb:47:7c:da:bd:3e:d6:0b:a8:34:62:5f:82:1a:2c:
22:bb:50:5a:46:f2:2a:a3:d6:c5:08:12:93:b4:a1:e1:28:df:
f2:ac:04:96:2c:cf:6b:ae:c9:c7:13:ce:db:5f:e2:42:91:2b:
fc:4c:5f:e6:1c:26:e4:dc:d3:9f:6a:35:d1:ab:30:5c:5b:06:
40:d9:e9:17:51:af:56:49:65:a8:12:32:bc:2f:8c:e1:85:d2:
84:9d:77:95:8d:a0:aa:8f:d6:ca:8a:6f:83:f0:88:79:e0:48:
cf:be:4c:31:f7:db:51:c1:39:06:7e:45:fd:7b:8b:6c:ed:18:
de:ee:2c:1f:64:c9:14:c3:9c:e1:09:f1:e2:7e:7e:a2:82:0b:
77:c8:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 06:52:41 2026 by rpki-client