
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
File: RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json)
Hash identifier: qB0FW9t7+9OYQ/aTYXDNZlPahR5xcb5b/PK364MeQRM=
Subject key identifier: 4F:0C:93:BC:A8:FA:7E:3B:1B:61:3C:B6:95:FE:6F:60:10:48:56:A3
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 019CAAFD4A12197BDDB5CBB7A5901C92B2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
Manifest number: 06A2
Signing time: Sun 01 Mar 2026 20:00:52 +0000
Manifest this update: Sun 01 Mar 2026 20:00:52 +0000
Manifest next update: Mon 02 Mar 2026 20:00:52 +0000
Files and hashes: 1: 1W8oXRyVWj6B25QVlKpKqn4htFc.roa (hash: ylLKhtgKcpGFiJV81EY7Ky60StXV0M2FwWK+HE1XjRU=)
2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: cM/qdp3YhnGSthtaLdmmf5+nnA+cWDT6ncMRmgwtSk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4a:12:19:7b:dd:b5:cb:b7:a5:90:1c:92:b2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Mar 1 20:00:52 2026 GMT
Not After : Mar 2 20:00:52 2026 GMT
Subject: CN=4f0c93bca8fa7e3b1b613cb695fe6f60104856a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:bc:3e:68:e5:d4:d5:01:e3:f4:e2:bd:99:
e0:b7:bb:60:f7:8f:ca:6a:23:b9:2d:91:fe:83:c0:
a6:60:95:2a:e8:cc:35:5c:a6:52:bb:27:0b:e7:47:
d8:bf:4e:77:7a:bc:74:0d:64:41:1a:80:21:6c:6e:
a2:ae:14:39:2a:0e:98:b8:39:92:f6:0f:4a:8d:5d:
36:a9:09:32:f5:6a:b6:bf:9f:7c:25:96:46:c5:93:
37:1a:73:50:94:f1:d9:80:98:45:77:97:a8:82:63:
6c:0a:7d:24:5c:49:ce:b7:bf:9d:e6:e6:72:33:e3:
61:c3:e8:fa:d5:14:b1:13:09:7c:13:03:d7:0f:8a:
b1:52:32:e1:af:bb:b1:1e:a2:b9:d7:d3:ca:ac:e0:
6b:16:cf:00:7f:d1:db:34:49:6f:2e:ce:e2:80:d5:
ec:30:13:cf:db:8c:13:26:24:ef:0d:fd:9e:21:b9:
06:2a:d7:ca:86:a7:4c:04:87:b5:46:39:b0:36:ba:
a5:78:9e:47:95:cb:e6:5b:2f:0e:e8:1d:f9:1f:8c:
ce:43:9a:b8:ed:fb:56:ee:1c:eb:e7:7f:9e:0a:9d:
16:6a:55:ca:66:c4:3a:c8:8e:e1:cb:3a:7f:3a:ff:
5d:ec:d6:67:bc:22:42:0e:6f:2f:bd:86:fa:12:c3:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0C:93:BC:A8:FA:7E:3B:1B:61:3C:B6:95:FE:6F:60:10:48:56:A3
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:51:08:b8:39:58:8d:7c:50:95:80:95:b2:de:d8:e5:c9:45:
6f:c1:8a:2e:f9:7a:2e:10:cf:71:c6:8e:f5:0c:c7:5a:b0:75:
99:35:a7:34:3a:83:19:ba:7f:a3:4d:d4:be:c6:81:72:6d:e2:
21:f4:a7:ca:b8:f8:b5:74:00:9f:74:b6:ae:dd:26:25:08:33:
f6:78:be:12:3b:08:13:20:e3:d0:8d:77:5f:23:ab:b0:4a:43:
1e:30:2f:da:48:0e:ab:06:16:ab:36:b9:49:76:bf:a0:39:bd:
b7:72:e3:8c:8b:f1:b0:a1:6d:4b:4f:35:15:08:0e:b4:73:d9:
fe:5f:ca:4b:87:b7:b0:a0:76:c8:0f:f4:f7:65:7a:8e:2f:bb:
64:5d:11:07:95:3b:1e:dd:34:67:85:02:ce:a8:06:4e:d9:ad:
4c:71:97:35:80:3d:e7:8a:e0:21:b0:cc:d6:e3:0e:75:64:91:
f5:6c:b5:11:9f:22:4d:62:2e:16:65:da:54:9f:5f:3f:0e:a5:
7d:5f:48:76:70:65:71:87:3f:ea:72:8d:ec:af:dc:7a:8e:5d:
5b:ea:7f:ec:7b:17:ce:27:b6:68:ad:0f:f7:98:14:35:1f:ba:
a1:b1:f3:28:50:37:f5:6e:de:22:47:2d:df:4d:45:6c:3f:8d:
12:47:ce:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:13 2026 by rpki-client