Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier: DbgaGQE5y46fqQLya5pYAdOuY0dBZVpo6pBjSTzgB50=
Subject key identifier: 73:A2:CB:EE:27:F3:6F:11:66:7B:E7:59:52:7A:2B:DD:96:B7:25:A8
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial: 019CAB6AD580715350289B68FF285D83D659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number: 0C7F
Signing time: Sun 01 Mar 2026 22:00:31 +0000
Manifest this update: Sun 01 Mar 2026 22:00:31 +0000
Manifest next update: Mon 02 Mar 2026 22:00:31 +0000
Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: 36sqQMAFoev1kvZ/O3rj9WIouedXNyJaU0TDFQ7GIyg=)
2: d5odnptrjJaW4wbv5e-w-InznHA.roa (hash: HdS9hjcjd6FA7NCMLYoBnDJO3cACO6YPZ4nZtli4PVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d5:80:71:53:50:28:9b:68:ff:28:5d:83:d6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
Validity
Not Before: Mar 1 22:00:31 2026 GMT
Not After : Mar 2 22:00:31 2026 GMT
Subject: CN=73a2cbee27f36f11667be759527a2bdd96b725a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:00:96:fc:90:39:ca:70:a0:57:a6:67:25:
f2:7e:26:0d:56:53:21:86:4d:30:7f:b7:b0:6c:27:
e8:29:76:c3:4b:13:c0:d2:47:22:fe:a9:fd:78:9f:
1e:2e:49:36:5b:3c:0d:c2:ee:ef:4a:68:96:f1:8b:
de:c3:b2:28:21:e9:14:43:6f:da:97:ad:ae:9b:1b:
80:a0:8b:ee:62:77:57:51:51:02:01:c0:4b:93:fa:
f0:62:81:a3:cc:7a:5f:01:cd:93:20:98:ae:14:5e:
b0:69:36:37:51:8b:56:c1:a7:e1:b9:a5:4e:61:db:
6a:b9:ee:19:0f:cd:fd:13:cd:29:ab:6f:fa:fd:bf:
0d:07:3a:6b:f7:7b:ce:e1:66:2e:bd:83:12:7e:13:
f3:96:5e:6c:da:03:5a:c5:dd:d2:31:30:f5:d0:bd:
35:b1:04:8e:6d:c5:ca:c0:dc:b8:84:9c:9b:71:c1:
96:4d:b8:69:70:60:1c:69:33:1e:9d:bd:07:33:6d:
1e:d5:a1:1b:bf:d4:db:cd:b6:6a:c4:07:e0:92:40:
a5:65:14:3d:04:f3:73:0f:7a:72:5f:6d:8c:b1:1e:
93:bd:9f:ad:28:16:9b:e5:cd:c3:df:0b:cf:74:1c:
ec:56:d7:a2:5d:47:85:59:ae:10:a5:7d:e0:13:93:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A2:CB:EE:27:F3:6F:11:66:7B:E7:59:52:7A:2B:DD:96:B7:25:A8
X509v3 Authority Key Identifier:
keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:53:62:b7:59:e1:fd:0a:ee:99:54:06:a6:59:60:f3:6c:92:
c0:d8:ed:fd:21:15:5d:a8:fb:a9:f1:18:21:3d:a5:2d:fa:36:
bf:db:6c:38:74:5d:1e:6f:6f:db:43:87:48:d1:60:11:6d:85:
59:05:05:8b:25:a3:78:87:c5:7c:df:e3:95:83:43:f2:2e:99:
d1:9a:0c:7f:45:5e:55:3b:7b:b7:3f:6a:61:a5:c5:f9:70:6e:
39:9a:14:2a:0e:e3:2a:26:82:1c:bd:ac:e5:d6:92:58:58:dc:
0b:37:d9:96:2b:da:ce:4a:02:5a:3c:a0:45:1a:21:ce:a0:83:
19:80:cb:97:cb:3e:22:65:d7:f7:54:1b:28:16:e6:b5:b3:b2:
25:29:b6:03:80:e9:d7:18:1c:cc:2d:1b:48:9f:0b:5a:89:c5:
f4:53:f3:ca:f7:e8:73:0d:87:eb:fa:0e:85:8c:e7:8f:bd:24:
ef:1d:3b:34:21:9a:f9:dd:bc:6c:b8:97:cb:57:a9:38:c9:f1:
48:c2:0f:fe:17:a9:29:fc:f6:72:b2:16:4a:67:cf:9f:c7:83:
d2:74:3e:26:98:c7:0b:9f:cf:0b:8d:7c:99:b5:a6:6c:9c:27:
b1:b4:9e:2b:8e:06:ff:6a:5c:43:81:ef:03:03:63:b7:33:d8:
c2:f6:27:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:39 2026 by rpki-client