Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier: SYT4jEjztsxNmcLrsY/LlZeBvrvIKisnmXMvzIUVlC4=
Subject key identifier: 8F:B9:60:E4:B8:8D:20:67:87:05:78:86:56:3E:6E:E3:2F:EC:C0:77
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 019CAC7E6ED2C88228D91A82A99DA3A8E064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number: 1000
Signing time: Mon 02 Mar 2026 03:01:32 +0000
Manifest this update: Mon 02 Mar 2026 03:01:32 +0000
Manifest next update: Tue 03 Mar 2026 03:01:32 +0000
Files and hashes: 1: C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa (hash: 4EBK9TE3DKNE91PsZ8jPUioXBBKUno4c9ILnL/KNCRs=)
2: m0XHnqLimHCaVdrwyhH4qvYB5k4.roa (hash: AyXTFUEVIX6Aa2cN5D+zF56YX+NxzZvMWIw5F0uYaGI=)
3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: Qfe5zqfkq5XmE3rNDWswd8c65qyKzkNi9/Dyww48oys=)
4: uFaZ7j6WOK_rFoGA3dV4DOr3Azw.roa (hash: 7Q1qXKsYai/yvbGaDBAb/Nup5NNAKS6f69A2HPPsnRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:6e:d2:c8:82:28:d9:1a:82:a9:9d:a3:a8:e0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Mar 2 03:01:32 2026 GMT
Not After : Mar 3 03:01:32 2026 GMT
Subject: CN=8fb960e4b88d206787057886563e6ee32fecc077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:3e:ff:bf:6e:51:5d:33:07:3a:0f:9f:d8:
e6:0f:c3:58:06:d8:ff:54:ab:18:9b:02:68:53:9d:
1c:35:40:1f:d3:fd:26:76:19:5c:ac:a3:84:f2:ef:
73:44:0d:4c:50:1c:52:06:28:8a:6d:bc:cf:34:b3:
1d:ee:79:20:e9:b3:ac:98:35:46:bd:86:61:ec:ad:
c5:7d:c1:a6:66:01:ae:ed:d0:d3:10:c7:ba:81:cf:
68:dc:48:9a:55:89:c2:86:4c:01:c0:64:83:60:6b:
ba:f0:55:f2:c8:6f:6a:da:67:c7:60:b0:76:5e:86:
79:1b:28:2c:b1:f2:db:f5:f5:f7:06:37:67:52:46:
30:f4:b1:e0:e3:64:f3:58:10:8b:9e:e8:02:54:5b:
a6:ee:f6:eb:10:a9:db:e8:60:e7:b3:2f:2f:2e:eb:
07:f4:e1:85:85:80:6e:c3:19:a7:43:b2:7f:43:1e:
27:9a:f4:4c:b0:00:a7:f8:51:09:f6:7d:5d:8a:ad:
fe:99:c1:fd:c1:3b:21:70:29:6d:0d:05:f5:23:39:
d9:9b:31:2e:29:26:73:d0:2b:d0:f2:e2:89:76:71:
e3:06:c3:4c:a5:91:d3:0d:b3:f2:31:1b:ff:2c:2b:
a6:9f:ea:d8:d4:b3:1b:97:14:ad:3e:b6:13:33:f8:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B9:60:E4:B8:8D:20:67:87:05:78:86:56:3E:6E:E3:2F:EC:C0:77
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ba:05:c2:46:cd:40:39:97:67:3a:96:a7:eb:f9:14:f9:d9:
01:33:ae:e2:9f:cd:47:cc:9f:2c:0d:5f:85:55:c9:91:8f:11:
fc:28:0d:9c:31:1e:a5:12:94:77:51:c0:c7:b6:bb:ad:f5:93:
5a:7e:4d:24:26:38:2a:de:9e:48:f2:f0:df:98:1d:5f:ee:dd:
fe:e4:90:59:47:ca:6d:02:b3:b0:6e:bd:93:08:8f:3e:4b:19:
f6:75:9e:2b:12:6d:54:b8:e8:5f:45:9d:3e:fb:14:08:73:5c:
12:0d:06:31:51:20:4a:d7:8b:99:34:24:2d:71:3e:11:a8:d4:
27:b2:89:ca:d5:70:be:8e:98:5b:7e:01:5a:9d:ca:88:ec:f1:
40:39:f4:da:36:d8:0b:e2:c9:98:38:76:50:d9:a3:4c:fa:32:
b8:95:8d:03:db:16:21:eb:77:ba:9f:e9:d1:1d:95:3d:59:e5:
55:27:1c:93:af:77:ea:ad:87:5f:02:d2:be:e4:cc:da:43:6a:
18:3c:82:66:71:e7:d1:81:5e:a4:55:57:23:c7:cf:15:0b:1c:
fd:f3:47:45:c2:81:85:55:60:44:af:4a:ba:7f:58:54:ed:8f:
60:2a:1b:86:67:c1:68:97:19:9a:88:89:d7:8b:8a:58:98:07:
27:0b:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:14 2026 by rpki-client