Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: URM/2frEC4wX7Stc/WC/xvfmTyYN1QKtV/t+tzM/NAI=
Subject key identifier: BB:D3:DE:7E:1B:3A:77:60:EE:58:DF:2F:EA:0B:8F:D9:EB:D4:F1:48
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 019CAA5936ED9D5C70175A623480C5FF3B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 112D
Signing time: Sun 01 Mar 2026 17:01:39 +0000
Manifest this update: Sun 01 Mar 2026 17:01:39 +0000
Manifest next update: Mon 02 Mar 2026 17:01:39 +0000
Files and hashes: 1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=)
2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: TVL1cueIzo8KYMmEZIU/TIpOSSFjd52H9lDcvXKAmTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:36:ed:9d:5c:70:17:5a:62:34:80:c5:ff:3b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Mar 1 17:01:39 2026 GMT
Not After : Mar 2 17:01:39 2026 GMT
Subject: CN=bbd3de7e1b3a7760ee58df2fea0b8fd9ebd4f148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:5d:bc:93:4f:09:6b:34:c0:3a:3a:bb:46:
05:81:6d:9d:45:38:2b:44:5f:f1:ab:b3:79:fb:b7:
49:c2:54:0c:bc:66:74:c5:34:65:74:1e:f7:fd:d0:
54:a0:60:cb:8c:59:65:20:c7:82:6f:ae:4b:17:1d:
74:fd:44:2f:0d:83:aa:f2:40:31:ff:16:78:d9:96:
ae:7c:c9:22:20:56:fb:58:02:0c:70:61:e6:bc:ad:
97:e9:e0:2d:ef:71:e3:d5:11:ed:b9:78:cc:82:ba:
e7:7d:c7:b4:48:c0:da:0a:75:33:45:81:74:d0:1c:
5d:4f:8c:74:3d:6b:d4:33:bb:3b:99:81:08:7f:d3:
6a:ee:53:de:54:ae:75:2e:03:ab:8c:14:5b:4d:c7:
4c:99:3b:ad:91:6e:c3:1e:be:7a:94:ad:88:88:93:
aa:9d:84:37:d8:73:16:91:1d:68:14:5f:1d:78:fa:
8d:9a:73:ac:e0:c5:ef:59:a5:e6:49:e0:d3:ef:ef:
a3:2e:45:ce:23:80:35:c3:8e:ed:3d:7a:02:94:36:
06:e7:61:fe:e6:2b:b6:1c:47:3d:8c:a9:da:bc:99:
9a:08:a0:f5:62:11:f4:22:54:91:5f:f4:42:bc:a6:
9f:96:b8:99:89:64:fe:5a:b9:11:c1:c8:d9:8f:c5:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D3:DE:7E:1B:3A:77:60:EE:58:DF:2F:EA:0B:8F:D9:EB:D4:F1:48
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cb:2e:8b:02:74:e6:0a:8d:92:0a:fc:7b:13:c8:65:c0:99:
6e:a9:8b:ba:01:fa:71:23:77:bc:de:7b:5f:35:2f:29:14:98:
f3:f8:fc:82:c9:a8:a9:d2:c0:85:d9:54:75:8f:50:1b:6f:02:
d0:93:e8:ea:5f:1b:3c:cf:a7:93:62:31:9b:c9:a7:fd:2c:49:
17:ea:37:6c:53:17:51:43:84:44:31:74:9c:1b:8b:c5:cb:7a:
9c:a7:91:52:a8:9f:ee:01:57:62:f0:f2:23:50:09:3d:5e:9b:
e3:98:83:15:56:75:82:f1:5a:75:ce:ed:53:2e:e2:28:ea:32:
8d:e1:c9:35:67:3d:0a:92:86:ad:37:a2:ef:9e:7d:eb:77:6b:
b4:73:b8:16:49:49:cf:fc:2b:24:fa:c3:4f:40:2f:e4:b7:6c:
a1:7e:b1:b4:df:9b:4a:2e:2c:7b:fb:53:76:14:c6:fd:3f:10:
74:4c:54:8e:7c:a5:1b:5f:71:28:01:70:5d:4b:65:b2:f2:20:
1c:76:1e:e6:3b:8b:41:9c:9b:95:af:26:88:5f:2c:1e:45:1a:
8c:24:db:7b:35:7f:a8:78:7a:a8:57:97:de:9f:e6:28:f3:b2:
b7:7e:2b:35:a3:bc:c3:3f:2c:0f:ac:33:d1:a3:c9:93:08:e7:
54:71:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:24 2026 by rpki-client