Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
File: 9RDHudzJJZg-WbWGzVmrVUviWYI.mft (raw, json)
Hash identifier: r99OY9tM0xBibNv4UbdNWIbnX2HRCaFnjpiHVgsWm2k=
Subject key identifier: E7:B3:1B:43:4B:C6:9D:4E:DB:E2:1E:21:FE:16:80:9A:3B:D3:AB:E9
Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
Certificate issuer: /CN=f510c7b9dcc925983e59b586cd59ab554be25982
Certificate serial: 019CADC82CC037B9D6F85FA4C8ACF10E5C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
Manifest number: E0
Signing time: Mon 02 Mar 2026 09:01:42 +0000
Manifest this update: Mon 02 Mar 2026 09:01:42 +0000
Manifest next update: Tue 03 Mar 2026 09:01:42 +0000
Files and hashes: 1: 9RDHudzJJZg-WbWGzVmrVUviWYI.crl (hash: MzMAD2MU8cEM4ylwmBzeeImvkM13NeSLhWx711dRszs=)
2: wTA4ZoIz75kHn1WMirNEgMY65FE.roa (hash: ashXJm/A/tacrnrBady83etVIast6DpVJH2Dt/iNOM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:2c:c0:37:b9:d6:f8:5f:a4:c8:ac:f1:0e:5c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982
Validity
Not Before: Mar 2 09:01:42 2026 GMT
Not After : Mar 3 09:01:42 2026 GMT
Subject: CN=e7b31b434bc69d4edbe21e21fe16809a3bd3abe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:bf:c0:49:3d:56:5d:59:0e:96:2a:17:01:
90:48:65:00:ab:dd:ef:43:a9:6a:7d:a3:a6:4f:76:
e8:70:72:d1:f0:6c:e9:ab:b4:e3:c9:be:51:d3:ee:
cc:db:d5:3a:4a:1c:5a:14:95:8b:79:7f:fc:25:a5:
fa:19:d3:ee:ee:12:2b:f2:86:15:4a:e8:0a:77:9b:
c9:9e:7b:90:2f:46:45:99:8f:9a:22:71:d8:a5:00:
0e:9d:49:43:83:d1:e4:25:33:87:b1:d0:14:b1:a2:
ef:94:3e:56:b9:15:53:df:ac:08:be:6a:b4:28:34:
c4:61:93:29:4b:c6:32:0a:85:0d:e0:fc:fe:17:69:
d8:c8:dd:cb:ae:a5:b9:e6:78:4d:9f:c4:bb:84:30:
b7:e7:8c:7c:38:18:bd:89:fb:e4:2d:1f:75:83:88:
a9:28:3c:00:37:f0:f6:7d:e2:a8:8c:3f:53:cc:b9:
4b:d6:a7:23:ca:39:97:3b:1f:04:5f:4b:36:c3:19:
2a:0c:b8:bd:f4:52:46:36:df:79:56:3e:eb:2c:4d:
43:6e:af:64:74:03:b2:a9:e7:59:fa:6b:aa:45:98:
95:c4:9a:fc:20:c1:02:ad:f3:d8:ce:63:a4:21:11:
ca:32:c5:9c:3f:ff:18:12:b8:fd:ad:3f:77:04:db:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B3:1B:43:4B:C6:9D:4E:DB:E2:1E:21:FE:16:80:9A:3B:D3:AB:E9
X509v3 Authority Key Identifier:
keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:67:18:3a:7b:9d:a8:ab:68:13:01:72:f7:68:69:c7:2d:4a:
d7:c2:fa:9e:ca:18:ed:38:37:95:53:ed:f9:91:ba:74:9b:db:
a4:95:ce:b7:2a:03:4c:ea:39:93:e9:96:a8:d2:72:96:89:3e:
52:40:fd:1b:3b:8c:cc:d4:ca:2f:d4:f4:9a:8e:d8:7e:ae:f5:
3e:58:05:66:f1:94:83:a6:b3:86:ce:1a:e8:97:53:52:31:c3:
d6:28:5f:3a:8b:82:ed:41:f5:35:c1:ef:47:f3:eb:6b:e6:11:
ea:7d:1f:31:39:7a:83:de:4f:53:e0:3c:3a:8b:06:93:78:bd:
06:91:68:9a:92:46:69:ac:ab:5c:45:5f:79:6b:75:00:ee:48:
92:80:6f:5f:26:6f:ac:14:c5:ba:21:09:50:3e:d0:a0:6e:50:
1a:05:9c:e6:81:8e:38:2e:b1:d3:0d:30:e3:e2:a1:22:d2:c0:
02:bb:2e:37:b8:76:fe:0b:72:97:6d:39:6d:ef:1a:c8:82:db:
eb:cb:4d:aa:65:0c:8b:e3:1f:ef:e8:a8:02:9f:33:ae:cd:31:
a2:51:bb:ae:67:11:6b:2e:1f:b5:43:0e:f9:82:e4:c2:bb:ab:
45:52:54:86:21:83:3c:8b:d8:15:9d:ac:1c:52:30:ff:fa:11:
ef:c6:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:10:16 2026 by rpki-client