Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
File: mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json)
Hash identifier: 77vTfRMPBNfMfk6d5za0LYgHKO2QR4o/rx+vlu+2Eac=
Subject key identifier: BA:3B:3F:03:B7:B7:6C:BB:AE:15:85:F5:87:6C:78:77:81:02:5C:E8
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Certificate issuer: /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial: 019CAB6B585D7A982291B3661D1D331CC867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
Manifest number: 0816
Signing time: Sun 01 Mar 2026 22:01:04 +0000
Manifest this update: Sun 01 Mar 2026 22:01:04 +0000
Manifest next update: Mon 02 Mar 2026 22:01:04 +0000
Files and hashes: 1: Xgkh2jqWshIrm_XP38KT2hJAFLI.roa (hash: HtXZbHm1lMY4MWtIUl2UqL3oGRY9eBOP4/14fbeHHSQ=)
2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: kowLS7/Euy9/WcDY64oNM7bsobyyjKeeIX49+BWkUxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:58:5d:7a:98:22:91:b3:66:1d:1d:33:1c:c8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Validity
Not Before: Mar 1 22:01:04 2026 GMT
Not After : Mar 2 22:01:04 2026 GMT
Subject: CN=ba3b3f03b7b76cbbae1585f5876c787781025ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:38:62:c4:9d:62:b8:4a:62:49:3e:fa:f0:
de:3a:37:fe:43:04:5f:48:95:ec:87:da:3f:64:a3:
2c:a4:bc:fe:a9:38:d0:b4:26:e5:2e:8d:92:39:ef:
85:6e:fe:3c:3d:9f:25:75:12:27:2f:37:50:86:54:
f8:3a:aa:66:63:a4:8b:b6:42:3f:66:10:a4:dc:d2:
b3:a2:4c:2c:25:d4:64:83:fc:7d:d6:0e:53:ca:78:
2a:7b:6c:c8:f1:a8:b3:1d:49:d8:96:09:f9:0e:9a:
8f:c7:a1:ae:c0:18:82:9a:36:fb:01:ec:88:c6:f9:
02:91:30:af:cc:d6:6a:17:1a:41:dd:27:e9:67:21:
f9:9f:95:b7:c7:f1:6b:11:72:c8:f4:53:c1:5b:1d:
be:f2:53:9f:b4:dc:a4:a5:b3:13:ba:b5:95:4f:38:
f7:67:bc:5f:5b:80:70:da:53:3a:95:7d:d7:24:22:
d4:3b:7d:be:3e:b5:ea:a2:c7:cf:81:e9:4c:e2:f9:
10:ad:f9:bc:37:29:b9:e2:06:4d:29:fd:d0:b2:b8:
99:a4:5b:72:1c:4c:f4:b4:e2:dc:da:ee:f1:41:e6:
ad:0a:28:f2:2f:f9:aa:04:8c:19:1e:04:ee:bb:80:
71:9b:6c:48:4f:c7:2a:b1:2c:f1:39:de:d2:a9:58:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3B:3F:03:B7:B7:6C:BB:AE:15:85:F5:87:6C:78:77:81:02:5C:E8
X509v3 Authority Key Identifier:
keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:63:eb:84:5a:72:ed:3b:14:49:d6:a2:d4:1e:7d:ef:4e:21:
36:c4:a7:11:af:8d:fc:bf:80:c6:84:5f:8b:ca:30:1b:82:a7:
ac:4d:9c:c7:3f:70:cb:eb:03:fd:2d:73:d6:64:75:ca:9a:6c:
54:f3:80:a1:3f:f5:95:92:1a:eb:8f:2d:90:31:a8:92:5a:90:
10:3a:56:41:5d:6e:4c:c4:88:4d:7f:e6:8b:ef:57:db:00:d1:
34:de:52:f3:ae:47:f6:2d:4f:97:bc:cf:3f:ec:a0:60:05:9b:
22:02:f4:39:c7:82:f9:82:4c:1b:6b:e4:f1:76:13:8c:bc:2c:
45:d0:17:38:8a:23:95:63:78:b1:bb:24:77:47:b9:28:23:ba:
58:51:cf:99:a3:5f:68:33:b8:26:59:01:9d:3e:ac:b5:43:cc:
40:66:a9:72:86:0a:1c:b0:52:9c:37:46:35:81:b6:d1:ab:68:
9e:04:c4:bb:d6:f2:8a:14:24:19:ac:e1:f2:25:54:88:fe:72:
6a:67:1e:cb:65:f4:a5:9a:4d:b2:77:50:11:04:ce:09:72:66:
3b:8c:a9:00:40:51:85:aa:bb:75:6a:4c:4b:e4:28:17:97:fe:
7e:60:5d:7c:05:81:8d:a1:c9:dd:12:9a:fb:c7:02:e1:3f:86:
05:ab:64:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:34 2026 by rpki-client