Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier: Z7KSpdoYg0PkhoCs5WwCbmM5LWTDR5crW+0BAIDMHds=
Subject key identifier: 07:7F:C5:C3:DB:E2:A1:14:4B:F1:A3:22:B3:69:FE:60:AE:E4:59:74
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 019CAAC6525622C950B9DD88E3E8356C8C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number: 0715
Signing time: Sun 01 Mar 2026 19:00:49 +0000
Manifest this update: Sun 01 Mar 2026 19:00:49 +0000
Manifest next update: Mon 02 Mar 2026 19:00:49 +0000
Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: 2cVByKR2+ec6SFUFq5aq8eZE3G2+ioA6mg2NZFcFRsg=)
2: fBJnMHALZfcjzCrh2ePgybbFbm0.roa (hash: O2YCNOyi52ka2IOCrOYs4Cry49I7H3lrzo66p5voKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:52:56:22:c9:50:b9:dd:88:e3:e8:35:6c:8c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: Mar 1 19:00:49 2026 GMT
Not After : Mar 2 19:00:49 2026 GMT
Subject: CN=077fc5c3dbe2a1144bf1a322b369fe60aee45974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:c9:1c:2d:63:e1:51:e9:e7:52:dd:09:08:
98:e9:65:ac:27:e9:f3:00:fe:c8:0f:e7:c5:3e:df:
1f:3d:60:0a:c7:83:60:df:0b:21:dc:72:b7:aa:59:
cd:69:3e:f1:17:54:39:57:3a:1d:64:33:05:01:23:
da:e8:3a:c0:b8:dc:81:03:f4:ac:d2:4c:9e:93:ec:
9f:22:29:89:53:85:a9:1c:3a:59:a4:0f:24:9c:06:
88:70:aa:dc:50:03:7b:56:3c:7a:05:8b:e7:9a:55:
9f:03:95:28:a8:b6:9c:21:8f:39:27:c8:be:88:58:
f7:ed:95:e4:78:60:f3:23:f7:ce:92:c9:a2:7d:0e:
07:65:16:c1:81:d4:3a:41:7c:04:b5:a3:3f:28:f9:
2d:fb:bc:0c:c8:0d:ab:d2:27:b9:c3:4a:8a:a5:d3:
46:3a:ef:5e:67:20:96:7d:66:cd:e8:a6:d3:41:00:
ee:75:39:c1:c8:04:30:47:37:e3:a4:e9:ca:fb:4f:
90:56:46:7e:6d:1a:14:a6:44:b4:3e:5a:87:e8:df:
bd:ff:88:c5:ef:28:dc:ba:66:1f:10:b3:99:6e:8f:
c6:33:b6:bd:77:62:be:2f:35:b4:bb:6b:d3:74:48:
14:a7:2e:f0:22:53:0f:dd:ba:a8:fd:d2:55:f9:42:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7F:C5:C3:DB:E2:A1:14:4B:F1:A3:22:B3:69:FE:60:AE:E4:59:74
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:da:d1:fe:fd:67:2d:50:8f:ca:b1:88:0c:1f:f7:ff:ce:7d:
84:d8:82:91:20:a1:1e:8b:1a:b6:aa:15:a9:d3:d8:98:7b:71:
9f:43:8f:d1:99:ef:72:e2:f7:4a:f3:87:41:80:bf:ea:ec:84:
66:8a:8f:05:71:a1:ae:4a:bf:3d:41:08:73:51:c9:5e:55:c3:
88:ac:e6:58:ff:22:37:28:fd:1f:d9:04:29:98:de:e9:ee:8d:
96:4c:92:79:65:22:c3:72:51:54:af:bb:5a:14:c9:8e:b9:52:
d9:4a:09:cc:65:ce:02:42:25:e6:37:2e:4e:1e:3d:d5:58:6d:
d0:9d:34:07:dc:3b:a9:d5:e5:c6:dc:7d:c0:03:09:29:0f:bf:
68:f6:44:68:d5:9f:19:2d:6d:a1:b8:34:10:4a:db:ba:0e:20:
07:9e:a9:33:13:92:d8:eb:38:06:a3:91:46:26:2a:c4:e1:d7:
4d:19:7f:e9:83:55:e3:6e:1a:b5:02:e2:89:40:ca:20:ad:64:
01:28:fa:d2:ba:82:be:58:83:78:db:61:96:21:e8:40:1a:e9:
6d:c6:93:68:49:98:e2:87:85:cf:93:b7:cf:59:00:74:37:2c:
64:41:e2:c1:00:dd:a1:0e:a1:76:59:03:f9:7c:5d:f1:a0:5f:
7b:fa:c7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:41 2026 by rpki-client