Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
File: _a9B0EvGh9D_mK19QHaEdRxGyj4.mft (raw, json)
Hash identifier: 9Z59ztUznCVuA6w3qH4L1EKNj5p1pbtR5Tz695eB15k=
Subject key identifier: FA:08:3B:66:1E:0B:AE:EA:E2:77:BC:54:94:A4:6E:B3:44:B9:73:08
Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Certificate issuer: /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Certificate serial: 019CAEDA3D9B7D2CB4FEAA87B477B8558793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
Manifest number: 02DD
Signing time: Mon 02 Mar 2026 14:01:04 +0000
Manifest this update: Mon 02 Mar 2026 14:01:04 +0000
Manifest next update: Tue 03 Mar 2026 14:01:04 +0000
Files and hashes: 1: 6OMId8qLq9FNz-0vxg5RBukY9zs.roa (hash: xe2yi3J7qtfn/452oWa5yO6AXTtiMtVrNox5id3Mshk=)
2: MaydDWrUbLvw1QYZAkPLLUQxbi0.roa (hash: wvyXfigpqaIstAVGqzcAWkhhWQ5Hr2D2AHS65eJuN5U=)
3: _a9B0EvGh9D_mK19QHaEdRxGyj4.crl (hash: FtqSXj1uVRi4wnyrpM1t1Vn6M27+5LsRy+aZsAnsYVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:3d:9b:7d:2c:b4:fe:aa:87:b4:77:b8:55:87:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Validity
Not Before: Mar 2 14:01:04 2026 GMT
Not After : Mar 3 14:01:04 2026 GMT
Subject: CN=fa083b661e0baeeae277bc5494a46eb344b97308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:a2:5a:09:c4:ad:7f:09:fb:3f:5e:99:93:
83:e1:2a:a6:93:54:93:a9:bc:36:f5:f1:11:33:9c:
74:04:a8:d8:6c:3c:b8:bf:21:a9:7d:b4:7c:a0:c9:
99:32:9b:34:ff:b8:86:11:88:05:d0:5a:4c:e7:d3:
90:3c:70:86:54:df:9d:fc:92:af:27:a8:0d:76:07:
81:2c:4b:75:5e:27:21:53:32:e1:07:57:c4:c2:b8:
7d:0a:fe:1b:ec:80:09:cd:7d:d8:14:6c:06:1a:c7:
45:ce:c4:8d:99:05:91:a0:f5:f0:36:6b:a9:db:67:
ec:19:a1:1e:99:5a:98:0f:c9:6b:67:51:ba:0b:29:
3d:ed:3c:b6:2e:c5:5c:09:b4:43:bb:03:f4:64:bc:
07:fe:06:10:14:cc:25:7f:b6:8d:22:9d:f4:60:b6:
9b:ec:a9:2b:3d:fd:ec:52:1f:70:d8:c1:a4:2d:a0:
60:9b:dc:72:c4:ff:f4:31:81:e4:03:76:53:a7:07:
5f:ba:d7:3e:6c:f9:20:e2:b3:d2:b5:a5:03:96:06:
4f:80:85:98:b6:7b:fa:84:91:fb:29:c6:ee:ec:24:
48:11:0f:b5:6f:6c:df:f5:75:d7:9e:fa:64:9c:c8:
6c:ee:86:3d:dc:52:b5:c5:d5:48:e3:57:d4:98:a5:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:08:3B:66:1E:0B:AE:EA:E2:77:BC:54:94:A4:6E:B3:44:B9:73:08
X509v3 Authority Key Identifier:
keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8e:51:5b:ed:29:56:07:83:38:21:7b:c1:b5:65:91:d5:92:
0c:68:c7:af:3d:ee:df:5f:4b:2b:f1:d9:03:bc:c5:6d:f1:7d:
be:41:c4:e2:01:c4:d7:67:86:83:47:31:a4:0c:1c:1a:5c:ca:
24:15:01:c3:8e:fb:0c:df:62:ef:40:56:78:75:a9:a5:f8:bf:
3c:70:da:3e:a1:4a:13:31:d7:87:d7:eb:52:d2:65:74:f5:08:
e9:41:81:3f:48:81:cf:81:57:56:0a:0b:80:10:3f:d7:37:4e:
86:65:8a:a4:bb:71:61:22:93:a8:1e:cf:8c:64:a4:e8:58:32:
1d:51:64:af:fb:ec:fa:fe:93:9b:5f:c6:50:e4:d4:5f:25:07:
16:d5:5b:5f:8a:bb:a5:a5:8b:ef:6c:89:35:5c:c6:4a:89:9b:
3f:ad:a6:ab:b4:3f:b0:46:44:79:01:52:de:e9:4a:47:e1:05:
1b:72:9d:d1:4c:38:e8:fa:15:f2:ec:b3:32:2e:27:99:b4:2e:
8b:56:86:06:29:da:04:2b:e7:f8:b6:cb:04:2b:40:27:34:5b:
9b:b3:83:89:e1:e0:28:13:74:fd:17:6e:99:4f:fb:39:ed:c4:
b7:07:12:b2:1f:d7:00:dd:c5:ea:e9:89:5a:43:d3:83:10:16:
8f:32:1a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:07:06 2026 by rpki-client