Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier: 1Hy5P82fbo5LIok7UpBlkFf/Bh0lBMoDXUHyzJxSeW8=
Subject key identifier: C4:F6:B5:B1:E4:01:9B:8E:07:F8:83:3A:10:71:DD:AB:C0:C1:41:B2
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 019CACB47085E00E4A0F199EBDE2DBA252E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number: 17DB
Signing time: Mon 02 Mar 2026 04:00:32 +0000
Manifest this update: Mon 02 Mar 2026 04:00:32 +0000
Manifest next update: Tue 03 Mar 2026 04:00:32 +0000
Files and hashes: 1: cjkYRf3Yh9WpwKdD5YYzfaFNvWw.roa (hash: 3gq9vL58U08Go4S/2DXWUX5EoB3kYBslnaNgZp37wkE=)
2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: 3Nh5aysbndlaJLeVIXX1hGIIfvK5sNoBgnRdV8zNipg=)
3: msBIl7hzmZuQkbrJ6sui74p1Pgg.roa (hash: 1/8Tc8pewIiwrYAG9YY8GUqoXDl/4u6a8D5S98uRMyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:70:85:e0:0e:4a:0f:19:9e:bd:e2:db:a2:52:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Mar 2 04:00:32 2026 GMT
Not After : Mar 3 04:00:32 2026 GMT
Subject: CN=c4f6b5b1e4019b8e07f8833a1071ddabc0c141b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0b:c8:10:04:17:fc:8a:ee:32:a0:cd:67:4b:
84:8b:31:dd:ae:06:fc:ac:ae:ff:a2:58:dd:ef:97:
28:67:59:69:f7:d9:a7:87:9c:d0:97:60:2c:26:3a:
75:23:69:a2:f4:a2:7a:9a:40:c7:d2:d0:89:57:77:
55:a0:07:15:70:89:31:9e:04:e6:ea:3b:9f:f7:14:
96:db:e9:b3:f2:fc:9e:e2:d2:d4:49:26:ae:22:8b:
95:48:64:fb:11:79:77:8a:06:9d:11:4b:2c:b4:96:
a2:ca:57:a5:3b:b6:6d:81:66:80:6f:0a:67:e8:ae:
e5:34:e7:24:ee:43:0f:15:29:d7:cf:47:a6:5f:1b:
2e:9f:d8:57:44:75:6d:58:7d:c4:8c:4c:ba:b6:4c:
03:61:a5:32:54:73:e1:0d:bf:f8:bf:30:7c:1b:de:
ea:87:e4:d6:68:e3:e8:00:16:f1:1f:63:85:73:6a:
56:a3:4c:bf:32:03:7b:d4:ca:0e:17:de:51:2d:6d:
ab:c5:39:7b:34:f8:d9:77:76:fe:71:3e:d7:6d:ea:
6a:8e:37:90:46:b0:be:b8:59:21:be:87:03:a1:ba:
5d:1e:7b:28:10:af:e7:01:01:76:bf:0e:ee:dc:60:
c3:90:47:8e:59:7c:63:6b:d3:ca:99:73:f4:fd:f1:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F6:B5:B1:E4:01:9B:8E:07:F8:83:3A:10:71:DD:AB:C0:C1:41:B2
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:75:b7:a3:33:5b:6a:f3:4a:e4:6a:a3:a0:de:d1:8b:6e:71:
ee:1f:c3:15:cb:9c:4a:6b:5d:10:e7:2b:2e:33:d5:c2:b2:83:
54:22:49:84:de:26:44:9b:42:a6:60:67:0f:c3:d4:2f:be:86:
0a:96:85:8d:c0:34:0d:77:11:f3:0e:9a:f3:9b:e1:82:6d:38:
cf:ec:4f:60:dd:fb:49:85:74:e9:90:1b:f5:ff:86:3a:8c:01:
13:21:75:33:02:b9:34:ab:2e:41:e8:2f:2f:8b:58:ab:f4:31:
96:98:db:10:4d:d2:15:70:b1:ee:d9:3b:61:d2:36:6c:79:2e:
ff:ca:ca:5d:26:73:62:8d:2d:ec:07:65:59:9e:cd:64:66:b2:
b9:d8:12:a3:46:60:35:0f:03:de:67:cf:b8:20:f5:0d:7d:39:
a2:c2:ae:c5:c3:1c:59:ec:ef:eb:96:5f:55:6e:3c:7e:94:00:
69:9f:d6:00:25:aa:69:de:a2:af:42:d1:fb:a0:90:54:4a:e9:
50:a9:f8:1b:d0:dc:ac:d6:2f:2d:1d:23:e2:a5:d8:d8:ad:6c:
34:46:9f:09:3e:11:1e:fd:5f:82:de:ea:ac:d7:06:96:96:60:
36:c9:da:4d:95:78:1f:1c:92:e6:4c:0a:73:fe:be:dd:0f:60:
58:c3:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:45 2026 by rpki-client