Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: Cjtb2q9Iqh94zwfZlgo7fiDKXFAAHQ+mt0ZMM3M6fQg=
Subject key identifier: F6:D6:48:55:FF:D4:45:EE:D0:05:C4:34:1B:BA:74:08:88:A5:D4:6D
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 019CB0921ADAE320B7C3854A13679AAEDAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 04B7
Signing time: Mon 02 Mar 2026 22:01:30 +0000
Manifest this update: Mon 02 Mar 2026 22:01:30 +0000
Manifest next update: Tue 03 Mar 2026 22:01:30 +0000
Files and hashes: 1: 682zs4Hcg3A9tAlB0aIHnZEDnoM.roa (hash: C08P14YIy9ohegdz9OY/EiQStApMK1bKQ9gOr6T/J5E=)
2: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: xsHuOhsIL+TZRk9xHA7PgGqh33HeTY/QTsXLNrwczTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:92:1a:da:e3:20:b7:c3:85:4a:13:67:9a:ae:da:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Mar 2 22:01:30 2026 GMT
Not After : Mar 3 22:01:30 2026 GMT
Subject: CN=f6d64855ffd445eed005c4341bba740888a5d46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:50:f8:f6:12:d8:55:19:ab:aa:1d:ef:e5:
4e:af:56:3b:f9:4a:9c:a4:19:e9:87:58:85:56:24:
7f:6b:e6:a5:53:15:c6:68:d7:ea:b3:5a:81:f6:4e:
40:1c:23:b3:3f:a8:60:1f:55:16:7a:91:39:d9:f6:
2b:18:a1:f4:c2:82:d2:5a:35:fb:80:1f:2d:59:69:
db:ed:e8:76:fb:dd:4a:e1:7c:ea:73:2d:4b:04:a5:
37:ab:46:6c:e9:20:c5:a0:96:8d:e3:85:16:85:15:
47:b9:8b:88:88:d6:fc:08:53:3f:97:2d:62:13:eb:
33:fa:03:f7:b6:0f:a2:0a:f6:95:5a:d5:07:82:22:
f1:ae:8b:4c:c1:0d:66:f3:03:6a:8c:e8:de:74:97:
20:28:d0:c5:7f:df:ab:ad:20:43:92:3d:73:d4:02:
8b:23:91:21:ae:3d:ee:1a:78:7a:51:1b:f5:67:2f:
2a:32:45:ba:43:be:25:b6:b2:af:7f:6c:bb:fe:33:
af:9d:96:f1:8e:57:9e:8a:ad:1a:d2:2f:3b:be:89:
59:b9:e5:22:9c:b3:a0:dd:b4:80:1e:b9:1e:ee:4f:
1a:06:94:90:a2:36:1f:47:de:79:31:f7:20:99:d2:
51:59:7a:22:fa:02:e9:cf:f9:50:13:11:2f:84:ea:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D6:48:55:FF:D4:45:EE:D0:05:C4:34:1B:BA:74:08:88:A5:D4:6D
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:12:cd:9b:6f:dc:28:9f:f3:d0:d9:a9:5a:95:24:f0:7c:3a:
a8:c3:37:de:31:90:f0:1c:e2:87:56:4d:5f:f7:8d:e2:dc:ac:
0b:2d:15:13:ff:dc:17:d3:82:43:19:c7:c1:b5:38:8c:e6:2c:
5e:d1:82:20:c2:c4:bf:78:b4:9d:6d:48:00:1f:61:0d:94:45:
20:ee:ba:7e:ee:89:5d:31:63:d8:84:0d:9e:86:f3:16:69:26:
bd:aa:6c:17:3e:b5:b1:a1:2a:fa:dd:66:14:a7:19:3d:3e:0a:
cf:73:32:2c:8d:8c:d4:c2:89:ed:10:c2:4d:9a:e7:3a:07:78:
9d:9e:47:4b:1b:87:2c:bb:f1:4c:a9:78:14:6b:2e:31:c8:47:
80:bf:89:4a:10:4b:30:4c:95:f5:5a:d1:de:7b:19:3b:7b:d6:
2d:5b:15:bc:25:b1:9f:96:dc:77:9d:fd:df:9f:e9:41:f6:9a:
82:2b:45:de:27:70:e1:df:25:71:1f:f2:92:05:5d:43:e5:5d:
b7:69:36:bf:59:d2:d3:84:ee:28:dc:28:ef:e5:6b:06:d0:6e:
9b:3c:2a:ff:59:da:f9:ca:2a:dd:cb:04:49:d9:ef:4e:0e:00:
75:61:08:5c:67:aa:1a:d0:57:9f:c1:9e:90:8d:d8:59:49:0b:
6d:b9:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:53 2026 by rpki-client