Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: afdeuNAaHwCozIY1Uw8Zsyq59jjdM2kynJDCsx7HG18=
Subject key identifier: 42:EC:D7:AE:08:ED:37:8A:E1:1F:07:5E:54:8C:97:AD:AA:3E:96:FE
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 019CAC0FF83010562E886CF7EB2F8CC930AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0C70
Signing time: Mon 02 Mar 2026 01:00:53 +0000
Manifest this update: Mon 02 Mar 2026 01:00:53 +0000
Manifest next update: Tue 03 Mar 2026 01:00:53 +0000
Files and hashes: 1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: 1mOR0iCVcZj1pDxhDZ+i7ItBRG2v4/X39s7iXWa0EDQ=)
2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f8:30:10:56:2e:88:6c:f7:eb:2f:8c:c9:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Mar 2 01:00:53 2026 GMT
Not After : Mar 3 01:00:53 2026 GMT
Subject: CN=42ecd7ae08ed378ae11f075e548c97adaa3e96fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:f4:bf:ca:e3:7a:d8:8e:33:54:7c:54:65:
c6:ad:9b:7f:a8:df:0d:99:13:8b:f9:79:d5:9d:76:
03:c5:2c:84:91:6f:e0:ca:01:e3:e7:56:cb:ce:e5:
61:f4:7a:cf:fe:02:04:f9:08:f3:00:93:81:10:11:
c5:bd:03:29:44:4d:22:3d:ac:4c:04:bd:65:0f:3b:
eb:c5:87:76:65:27:54:3b:cb:e2:cd:ab:6a:0b:be:
1e:0e:71:93:9b:83:27:9e:55:c6:e5:c4:99:42:c1:
00:77:6c:6a:56:f3:bb:6c:ae:77:e5:8e:cb:83:ce:
99:1b:cd:71:48:a6:e3:7a:e7:58:b7:cc:d4:07:03:
62:10:9c:9e:22:5b:6f:03:a5:fe:32:60:75:4d:f6:
bf:da:86:34:d5:ed:01:fb:4d:28:67:48:7f:0d:bf:
87:95:3d:b1:df:b2:77:6e:24:11:24:5d:79:5e:87:
29:98:17:a5:1e:8a:26:0e:54:72:18:29:32:92:05:
bb:e5:95:c7:ae:d8:ec:a7:f6:27:b8:2f:46:ef:01:
8b:97:9d:65:17:f6:fc:54:b9:06:ff:be:69:95:b5:
84:9c:f3:4d:99:44:24:ee:dc:e7:a8:74:a7:37:1e:
7e:1a:8b:c2:c3:4f:79:82:f5:c6:cc:dc:7a:ad:c8:
74:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EC:D7:AE:08:ED:37:8A:E1:1F:07:5E:54:8C:97:AD:AA:3E:96:FE
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c0:b4:8b:ab:15:d3:5a:98:dd:f0:0d:bd:4e:3a:2d:dd:86:
24:af:12:82:0b:13:87:c5:03:4e:e8:8f:03:26:df:18:00:31:
31:72:03:84:fa:60:b3:da:9a:83:22:8c:5b:c2:f1:5e:34:d0:
51:69:1d:ac:23:c6:56:f1:3d:93:10:73:19:c1:18:b0:a0:91:
05:ac:3c:e5:73:e3:ba:c8:1b:ab:7f:9f:96:23:db:ab:85:6a:
f9:5e:d8:d5:00:66:9f:52:ba:95:b8:a9:5d:58:e1:d8:2f:9c:
99:29:ce:29:f0:c4:cc:a1:10:5d:2b:90:56:8c:ba:1d:3e:3d:
7e:d1:df:bd:9f:ea:35:54:fd:af:b2:42:c5:f6:90:e5:ca:c7:
ad:8c:6d:63:eb:66:55:d6:7a:c9:9b:7f:8c:c0:56:4c:cd:8d:
4c:ca:01:7e:26:6d:22:f0:77:0c:ac:4f:fa:c6:c5:5b:dc:11:
8d:b8:85:47:e4:33:e7:ab:1f:a1:a1:74:cf:a9:80:08:bd:20:
0f:0b:5d:92:a8:4e:e5:85:d7:e6:ac:b7:34:69:b6:80:f0:e4:
b2:38:32:f0:d5:2e:91:2d:6c:fe:1a:f9:ba:5f:f9:96:50:a6:
e6:89:ca:03:1f:ff:00:c8:76:0e:4b:cf:d7:89:0f:16:97:75:
76:95:45:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:20 2026 by rpki-client