Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
File: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json)
Hash identifier: OYYXFA49z0kDdFHdDRM6GzSr2uV9OMMGOyCjPBIWmBc=
Subject key identifier: B3:75:C8:56:37:E3:41:A4:13:05:76:B6:0B:08:CD:D9:4E:50:52:3C
Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
Certificate issuer: /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Certificate serial: 019CA90E86665FF5D3DEE705BBCE0C4C1F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
Manifest number: 0238
Signing time: Sun 01 Mar 2026 11:00:27 +0000
Manifest this update: Sun 01 Mar 2026 11:00:27 +0000
Manifest next update: Mon 02 Mar 2026 11:00:27 +0000
Files and hashes: 1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: v2WtY4gOxgHnczCeEcIKWENVXNjnzZG3HXSEdCfrRJE=)
2: wpr47QW5yPt3pCsYurF1J3o7Rg4.roa (hash: 0bSRAwMu0O91Emdt4EmzLACfG7UlbU7GDgVzgrcUSBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:86:66:5f:f5:d3:de:e7:05:bb:ce:0c:4c:1f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Validity
Not Before: Mar 1 11:00:27 2026 GMT
Not After : Mar 2 11:00:27 2026 GMT
Subject: CN=b375c85637e341a4130576b60b08cdd94e50523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:68:5b:10:87:9f:ba:69:d5:a2:b5:66:e1:
c8:ae:53:05:a4:f4:76:0e:a5:f5:b8:20:5d:2c:db:
87:45:bb:da:16:e6:f7:2f:62:cc:90:32:7d:77:ef:
c3:5d:1e:fc:86:61:b0:3b:9b:a1:e9:e3:fa:a6:2b:
d8:98:0d:2a:92:7f:ae:8b:34:81:e9:4a:2e:f9:f7:
c5:53:e2:44:62:da:56:fd:b4:75:71:fa:e7:fa:be:
b1:38:59:09:82:25:24:37:94:70:5f:be:4c:02:4d:
ec:39:e1:6a:45:56:90:7c:36:24:76:ea:4f:42:c8:
a3:80:1b:55:7a:57:af:64:c0:0d:e5:58:49:09:bf:
fb:c7:0c:a6:7b:37:50:41:1e:7b:33:33:9f:99:59:
ca:8b:27:20:79:57:1f:9c:14:f1:db:7f:98:d0:5c:
04:d9:dc:b6:fd:97:da:84:55:ce:9a:11:29:b2:c9:
9a:cb:d8:95:97:09:99:94:d2:2d:ef:20:f1:14:03:
3e:32:0a:05:42:30:3d:6c:1c:a2:e8:f0:49:49:81:
02:6e:49:41:54:43:bc:31:32:07:ae:55:9e:67:5d:
9c:fe:f4:57:45:a5:9a:26:02:ba:5f:f0:d9:a1:58:
15:95:4e:c4:7d:5a:ff:fb:1c:99:14:78:ba:2b:d7:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:C8:56:37:E3:41:A4:13:05:76:B6:0B:08:CD:D9:4E:50:52:3C
X509v3 Authority Key Identifier:
keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:74:ed:4f:89:1c:06:b6:7f:7b:08:29:01:0d:10:d2:4d:95:
5f:4d:bc:7b:dd:6a:8a:ac:d1:a5:53:ea:19:30:06:70:b9:bb:
e3:03:45:91:93:75:af:48:6d:d3:7c:cf:03:de:e7:fe:af:29:
de:a8:72:6a:4e:92:9a:58:7f:1e:6a:8c:9c:fc:f3:d1:63:a7:
28:12:b5:02:c9:30:73:45:60:8c:b9:49:10:b6:f8:3a:91:aa:
2b:74:05:a0:b0:01:c5:14:21:2c:51:42:37:66:1b:9b:95:e7:
d0:3e:2d:4b:16:22:26:7a:6d:21:de:1a:7e:89:cb:4b:9f:9b:
a4:84:23:cb:bb:77:81:5d:ea:46:1f:63:f4:d5:be:58:9f:b2:
1f:58:d9:b6:59:ae:9c:65:89:9a:73:a2:b6:fe:3a:15:33:de:
8c:38:a1:23:e1:4b:64:9b:e0:42:37:f9:9b:da:24:e1:5e:2c:
ff:fe:3b:bb:c5:84:76:9b:ca:dc:eb:5f:f5:67:bf:80:ae:28:
12:1f:33:23:d1:51:87:dc:6d:a1:e2:56:37:9f:f5:ad:06:3f:
50:79:d7:e5:46:e1:2d:06:b6:5f:22:84:38:80:34:b1:56:bd:
d5:4a:9a:b7:61:ca:f9:4e:5e:88:59:72:a6:89:9f:1f:23:37:
0b:d1:75:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:38:59 2026 by rpki-client