Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: VbCpY+SG6s5bD7WjDevsRX/zockVL1tHI5LF1ZcKB9M=
Subject key identifier: A9:53:A2:99:E5:DE:71:8A:DE:BB:6D:B8:01:82:9D:60:1B:B4:91:D5
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 019CAB6BCD43E388AD2A83BB1E212D20C13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0E0F
Signing time: Sun 01 Mar 2026 22:01:34 +0000
Manifest this update: Sun 01 Mar 2026 22:01:34 +0000
Manifest next update: Mon 02 Mar 2026 22:01:34 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: oI7PxZWf7BNxgzv1AJ40Bu5GKDMYZTzTanHaic9tS00=)
2: I3Cwe_JfIHDw-5FguYkJbkBPot8.roa (hash: NhXNbLKSK6Zii6NTvjleq3atjNt9Qq9hOl62FzoteKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:cd:43:e3:88:ad:2a:83:bb:1e:21:2d:20:c1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Mar 1 22:01:34 2026 GMT
Not After : Mar 2 22:01:34 2026 GMT
Subject: CN=a953a299e5de718adebb6db801829d601bb491d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:ad:eb:11:ed:da:1a:fe:77:88:3a:d7:19:
7f:eb:43:cb:18:28:ef:1f:01:04:00:c7:36:2b:bd:
6a:bb:79:c5:fd:b9:0a:e5:82:cf:9a:94:c7:55:c2:
26:53:cf:b5:ec:b9:d4:c2:53:7b:98:4e:aa:2b:ea:
6e:43:7e:aa:63:14:c2:bf:2f:36:d7:ea:cb:b6:fc:
f0:89:1a:b0:89:5a:da:0e:ca:8c:f3:66:89:3f:7f:
26:bc:70:a2:58:35:83:c8:c4:57:03:e3:c5:0f:ef:
8b:65:15:58:15:eb:3a:e6:03:97:b7:4e:84:df:28:
b6:f4:11:b8:94:94:21:33:bd:45:de:31:a1:95:40:
64:12:99:bb:95:fa:1f:95:97:bd:04:76:62:7e:6f:
bc:c2:ed:4c:5b:a0:4a:2b:af:bc:67:e6:3d:ab:65:
84:6d:a9:46:ab:c6:7f:fe:60:88:86:5f:c6:c9:32:
60:e5:b7:ed:49:e8:bf:80:c3:70:5f:22:13:00:f5:
46:3f:7a:0d:71:df:36:ab:47:f4:4c:e3:a8:aa:f0:
86:5e:ff:1a:17:cb:86:98:6e:81:8b:49:b7:95:ba:
6b:e2:bd:00:88:5d:ff:7f:19:35:83:5c:59:38:9e:
48:b7:79:b4:df:18:be:43:c5:93:85:11:f0:82:c2:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:53:A2:99:E5:DE:71:8A:DE:BB:6D:B8:01:82:9D:60:1B:B4:91:D5
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0c:11:0f:6e:8f:65:1a:f3:f5:b7:a9:00:9a:e3:12:37:72:
ee:98:af:11:38:44:e2:16:66:92:0c:98:5e:53:98:aa:da:3c:
92:45:56:9a:6b:90:c2:81:19:85:bb:51:45:7e:27:70:8e:95:
26:c0:be:db:90:87:96:26:a1:f1:23:da:60:e0:42:28:65:49:
d0:91:c8:ca:1d:a0:ab:27:88:bd:54:1e:2f:33:48:63:5c:66:
a3:7c:13:cc:75:e0:89:66:89:f7:1f:42:21:79:b1:d0:88:5f:
89:30:0c:8c:5d:f5:4b:6c:27:d5:c5:ab:95:1c:73:a8:04:60:
04:21:10:1b:41:3e:d5:f9:22:3d:9f:01:7e:50:1c:48:dd:c1:
98:af:b0:e2:14:cc:bf:45:a9:24:1c:4e:87:9f:d6:ae:81:fd:
97:68:58:47:c5:5a:27:e0:2a:7a:c3:cc:2a:bc:d1:d7:aa:e0:
62:c6:a6:e7:9e:9c:17:79:b1:d8:50:a1:e3:14:be:14:60:be:
d1:89:7d:f8:27:90:68:00:85:75:15:e3:12:5b:57:76:dc:ef:
e0:f1:10:f3:ef:26:34:cb:4b:a7:55:1c:0f:d2:a1:69:90:dc:
2b:9b:b9:66:f8:1d:75:3a:a7:25:b0:90:f5:2c:08:aa:8c:43:
20:71:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:17 2026 by rpki-client