Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier: ow8zIHR+BDrAtLjZvwOP5cwXeHsY4X/P6JVvCh3DYNI=
Subject key identifier: F7:1F:3E:7F:B2:B9:EE:01:B8:27:43:87:1C:86:6C:C3:46:E2:EB:A7
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 019CAA8FAD5A043396C6CB317AC95E27F497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number: 0FFF
Signing time: Sun 01 Mar 2026 18:01:08 +0000
Manifest this update: Sun 01 Mar 2026 18:01:08 +0000
Manifest next update: Mon 02 Mar 2026 18:01:08 +0000
Files and hashes: 1: C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa (hash: 4EBK9TE3DKNE91PsZ8jPUioXBBKUno4c9ILnL/KNCRs=)
2: m0XHnqLimHCaVdrwyhH4qvYB5k4.roa (hash: AyXTFUEVIX6Aa2cN5D+zF56YX+NxzZvMWIw5F0uYaGI=)
3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: z9UMcLPH8hA5TyGozUDN7DRtkGeGHhwCMo/iBnQUGiw=)
4: uFaZ7j6WOK_rFoGA3dV4DOr3Azw.roa (hash: 7Q1qXKsYai/yvbGaDBAb/Nup5NNAKS6f69A2HPPsnRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ad:5a:04:33:96:c6:cb:31:7a:c9:5e:27:f4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Mar 1 18:01:08 2026 GMT
Not After : Mar 2 18:01:08 2026 GMT
Subject: CN=f71f3e7fb2b9ee01b82743871c866cc346e2eba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:d9:4c:a4:05:b8:99:e2:53:9a:6a:b7:e1:
fa:a7:2b:77:0b:e1:c4:b2:53:01:47:7f:a1:4f:87:
3b:a9:0f:f8:d0:e6:4a:2f:52:8c:79:58:f6:f1:e4:
d8:c5:04:f1:4a:74:a5:ad:30:b6:15:15:9e:c4:9f:
64:47:10:30:84:0d:c1:d2:46:86:78:6c:6b:1d:33:
c0:0e:b9:53:8d:7d:bf:e1:52:24:92:71:80:c9:40:
50:66:1d:cd:0f:e2:f1:56:74:7c:ae:c9:a6:34:a4:
bd:41:31:1c:28:88:71:88:5f:dc:e0:c2:36:dd:08:
27:fd:b1:02:1e:8f:76:d2:85:9b:7f:cb:98:5e:0f:
a6:92:23:b8:75:cd:28:5d:90:4e:74:8d:9e:ef:61:
38:f3:47:6c:94:6d:a8:7b:cf:20:76:5f:9f:43:d2:
70:c8:08:1b:34:ae:1a:3e:53:74:fb:ce:7c:03:c2:
48:7f:39:69:9e:2a:77:c2:f7:d0:2e:5c:03:6a:f5:
db:63:e8:9a:0f:0a:26:48:46:79:7a:c8:02:66:09:
9e:d0:8b:9b:37:09:36:74:82:7c:83:0e:b0:83:c3:
ec:1d:06:74:d4:56:7f:96:78:14:52:f1:69:c5:10:
48:d0:d9:6d:0f:bf:cb:6b:ce:26:14:dd:3e:0a:6b:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1F:3E:7F:B2:B9:EE:01:B8:27:43:87:1C:86:6C:C3:46:E2:EB:A7
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b5:31:d6:3e:6e:7b:ad:9f:15:f4:db:e7:b1:5a:1d:33:0b:
a3:b8:d5:6b:25:d4:3e:68:51:01:44:21:ad:9e:e5:80:30:3b:
3a:88:a4:e5:af:8f:6e:4d:f0:07:cb:34:9c:58:2c:67:29:b2:
0e:fa:cc:d8:65:c4:97:f7:69:93:bf:ee:25:01:b8:65:72:d8:
b9:d2:05:49:65:4a:46:b7:dd:8f:6e:90:16:2c:a4:c0:af:b3:
46:f0:a7:64:ac:09:28:b4:44:21:92:bb:ff:d1:30:25:56:e2:
bb:35:b9:91:7e:3d:22:37:32:0e:04:e6:19:f6:5c:c1:3e:08:
c1:4d:82:5a:7b:47:42:45:1e:f4:46:4a:11:40:13:d6:27:cc:
47:1f:f5:8b:3f:fe:d8:36:44:72:1f:f9:fd:5e:67:86:cd:77:
5f:aa:29:d6:d1:06:09:0a:ed:0f:27:e4:7b:03:20:ea:1f:38:
ec:cd:c2:8c:9a:e3:d3:dc:af:b8:5c:de:f4:55:4f:66:39:96:
d6:1b:79:61:b9:33:12:c7:d2:3b:16:61:6f:f0:e4:71:ed:01:
bb:ac:ed:55:a5:b0:25:af:df:d1:fe:91:f7:bc:54:66:64:fc:
29:1e:30:25:7f:35:84:76:d1:cc:f7:08:bc:5b:6a:50:47:f7:
da:25:5c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:14 2026 by rpki-client