
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File: 9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier: 2Q7iPR60cHe+sWCPoRtGEUx+9OfLcy7PhWFl3td3QCQ=
Subject key identifier: A6:6F:0E:F9:28:33:D2:31:A3:4E:6B:18:1B:7A:D6:5C:9D:BD:72:85
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer: /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial: 019CADC7D82F6837A4AFD6608C54D0B7BEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 09:01:21 +0000
Manifest this update: Mon 02 Mar 2026 09:01:21 +0000
Manifest next update: Tue 03 Mar 2026 09:01:21 +0000
Files and hashes: 1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: MbXzpxwd49xXIfaKwqWPeNsI11uSUu/7H+LVYf9YDkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:d8:2f:68:37:a4:af:d6:60:8c:54:d0:b7:be:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
Validity
Not Before: Mar 2 09:01:21 2026 GMT
Not After : Mar 3 09:01:21 2026 GMT
Subject: CN=a66f0ef92833d231a34e6b181b7ad65c9dbd7285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4c:85:3e:46:85:0c:c9:3e:02:8d:b3:94:d6:
e9:45:6d:7a:dd:b2:34:c7:dc:13:f6:7b:cf:42:46:
48:34:f2:47:49:b1:b7:b2:17:0d:54:96:85:3f:4c:
82:17:ea:98:29:be:a7:41:c0:1e:4c:ef:07:e3:32:
57:7f:e9:cf:68:c4:f0:50:26:46:d9:f3:41:d5:71:
18:c4:59:35:68:6e:60:c8:58:f4:9c:4a:2e:f7:b6:
3e:bb:04:33:5a:94:35:29:41:d8:ac:0c:10:c1:ca:
aa:63:50:2e:d6:3a:7b:14:02:cb:92:73:02:7e:77:
ea:b3:0c:ac:85:55:75:d0:a3:8d:1d:94:b7:02:7c:
2f:fe:f8:97:98:b4:20:2b:95:ad:5f:90:a4:92:de:
20:0a:f8:a3:dc:9c:fa:fa:d1:8d:e8:40:7b:4c:fb:
b2:fe:f6:a4:ee:c4:d1:30:6f:e1:8d:ed:ae:1d:e8:
8d:cd:c2:fb:0d:a5:cd:18:82:70:fa:18:bb:e1:05:
f6:10:d5:37:3f:39:e3:d9:03:44:f6:b4:91:88:46:
7c:e0:cb:c7:5d:dc:5a:e1:9f:0e:fd:03:63:fa:28:
83:de:de:63:bc:27:48:d9:2a:3f:41:8e:d8:fb:53:
ac:c5:e2:30:11:34:85:b9:5e:4a:be:2b:57:6f:60:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6F:0E:F9:28:33:D2:31:A3:4E:6B:18:1B:7A:D6:5C:9D:BD:72:85
X509v3 Authority Key Identifier:
keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ce:0c:32:67:a3:36:1c:60:ae:6d:7f:db:85:c3:fb:dc:5e:
0a:b0:30:18:05:a0:05:03:26:36:54:76:f5:a7:c5:6c:de:ac:
ca:af:ad:8c:b5:26:56:94:27:f0:49:42:52:49:44:1f:f6:da:
54:92:c6:49:89:f4:e9:bc:f9:49:94:fa:6a:57:d4:57:68:53:
b0:ed:25:44:4f:42:0a:69:b4:f7:a4:5d:5c:4e:3a:74:a3:2e:
99:22:a6:90:bd:b8:8e:af:f1:7c:fe:dc:0c:63:85:5e:ca:54:
d8:ee:a0:71:1e:ef:0c:fd:5b:75:46:94:08:63:e8:39:57:af:
41:7e:cd:49:70:5e:06:b9:67:47:12:b2:ac:38:9f:31:82:ed:
cf:b6:e0:67:7f:9b:5f:ec:1c:ab:e6:a6:8e:5e:4e:72:74:a7:
bb:e5:0c:56:20:3e:c1:14:28:f9:4f:1a:ab:f2:e9:f3:c9:e6:
3f:41:56:c7:a8:dd:a1:a9:4e:4d:51:58:8d:2b:d1:24:3b:bb:
7a:75:6a:35:41:6e:bf:f3:79:46:45:75:72:c3:f9:a0:d4:01:
6e:a2:ca:40:4e:cc:e6:33:b9:ee:8c:77:e6:ac:7f:88:93:14:
ea:3f:b7:7f:16:f3:c2:2b:0a:b7:ad:bb:71:3d:5e:2a:2f:8c:
0f:9a:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:38 2026 by rpki-client