Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: GhuaofkR75famTq4fP/rOcxDpHN7xeabKmkXfdKrPmg=
Subject key identifier: DF:43:8B:65:96:2F:86:9B:F0:1D:6E:B8:65:EB:03:51:53:3E:21:69
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 019CABA219BE58E5AA3065400D2FBA58F821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 23:00:53 +0000
Manifest this update: Sun 01 Mar 2026 23:00:53 +0000
Manifest next update: Mon 02 Mar 2026 23:00:53 +0000
Files and hashes: 1: OEhJas96pDHXZgaMA_s5Lgp04cY.roa (hash: jxsNaFig0GGgXoj7CMTehSb9YCJBvykYHf4DMMEwiVs=)
2: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: 4nbrsr7aeNoxS/v1Z+TdOPLGEA3/ekb3/bQp7LPf5TA=)
3: q0hXo__MCYbBoR7iChz8rniPI6M.roa (hash: iTsszB/0K2SiC8hyLh2CRCMWHvU50TZNj9sPsIVxWo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:19:be:58:e5:aa:30:65:40:0d:2f:ba:58:f8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Mar 1 23:00:53 2026 GMT
Not After : Mar 2 23:00:53 2026 GMT
Subject: CN=df438b65962f869bf01d6eb865eb0351533e2169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:bd:56:7a:c6:8c:c5:f0:6b:03:54:6b:43:
8c:d4:fe:4c:ff:74:b2:21:35:b0:bc:75:95:1f:37:
1b:66:dc:c4:df:d6:52:81:4d:54:73:0c:03:90:dd:
21:47:ca:fe:e4:ba:63:5b:2a:28:bb:9c:7d:5a:d4:
4e:e3:42:75:73:5c:d8:a7:5c:94:46:f6:67:4c:21:
81:e6:1b:c9:9c:4b:cb:21:0d:04:df:41:c2:51:5a:
f5:3f:10:91:0a:e5:2e:23:54:6c:2e:74:d8:16:0f:
fc:10:57:8c:12:4a:e5:89:96:eb:04:d9:ec:b6:d0:
74:af:ae:80:5a:9b:86:bd:44:f6:7c:b8:fa:c9:28:
26:5d:fd:7a:01:bd:0b:07:8c:67:6f:4e:4f:73:ef:
8c:55:b6:d0:b2:38:49:eb:d2:21:72:6f:0f:ed:16:
02:05:a8:53:e1:c9:02:ca:eb:cb:62:5c:c6:c2:c5:
bc:8d:bb:de:b0:95:a0:25:2e:e9:7a:48:b1:83:41:
77:a4:9f:9b:e0:3c:e6:1f:d1:d1:38:f5:01:72:4b:
b0:ab:ce:ab:c9:e4:df:f3:0c:c8:4f:96:e5:92:c0:
ed:a3:85:7c:a7:38:39:02:fc:c2:3a:f4:ed:af:c9:
83:f8:02:9c:ca:08:5c:c3:64:11:64:68:5a:47:da:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:43:8B:65:96:2F:86:9B:F0:1D:6E:B8:65:EB:03:51:53:3E:21:69
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:dc:39:f0:6e:e7:ec:12:79:b0:65:12:05:ec:56:46:92:86:
9e:97:52:bc:6c:05:41:20:96:c3:a0:0b:e2:6a:55:16:e6:cb:
18:2a:8c:70:8a:be:68:ea:ec:97:71:97:c6:61:cc:53:90:83:
cc:9c:4e:b7:74:8b:0c:2b:35:49:1e:60:2e:6e:5b:cb:40:36:
95:6a:53:ad:f1:7e:1a:cc:2b:67:79:a6:97:51:8c:24:84:f9:
be:29:53:b7:1b:46:ff:ac:5b:73:93:48:dd:26:0e:22:3a:92:
58:6b:39:db:21:70:33:18:23:ee:29:9b:e9:5e:ee:da:b5:43:
7d:f0:34:14:12:6f:e4:ea:70:11:66:1b:73:ab:28:69:ce:53:
ad:62:5c:06:de:a5:88:6f:f9:2e:96:9f:40:57:9b:5a:b8:ee:
28:d9:9f:3f:e7:75:8f:6d:2e:9a:6d:03:ba:4f:b9:a2:bb:ea:
57:ec:7c:1a:9e:8e:9a:cf:69:81:3e:77:81:c9:66:29:8c:90:
f8:65:2e:72:0a:81:c7:32:b7:e8:97:f4:d8:1f:59:64:d3:a9:
a8:47:a0:12:b6:45:34:69:3a:f1:55:6a:4a:5e:35:2b:b1:a5:
c3:1e:7f:e5:e7:28:65:cb:af:0f:e2:a6:1d:f1:84:59:eb:bc:
c4:1d:70:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:06 2026 by rpki-client