Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: F+P3msckeD88WLN1hBVaDyS50RTx/GnJSUNf7TOa/Yk=
Subject key identifier: D8:24:FC:29:F6:E0:6E:96:AC:0F:60:FB:E7:03:72:70:CB:38:3D:58
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019CAA212FB421EBD6A04826D5C0E9DF1C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 185F
Signing time: Sun 01 Mar 2026 16:00:27 +0000
Manifest this update: Sun 01 Mar 2026 16:00:27 +0000
Manifest next update: Mon 02 Mar 2026 16:00:27 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: wCvAWn91hYxV57aIZL1cQGEZSbXXNGgqDWsMOLn0yqI=)
4: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
5: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
6: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
7: wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa (hash: gQ8uNZeHK/kIii6trEwXDL6+4QDEEh4ElPmKWLgPx14=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:2f:b4:21:eb:d6:a0:48:26:d5:c0:e9:df:1c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Mar 1 16:00:27 2026 GMT
Not After : Mar 2 16:00:27 2026 GMT
Subject: CN=d824fc29f6e06e96ac0f60fbe7037270cb383d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:af:bf:e4:23:65:ef:b3:10:a0:b9:9c:d0:
2c:50:04:c4:81:f3:68:b9:07:55:e0:58:38:72:6f:
1c:be:60:fe:00:82:59:8f:25:f1:d1:f7:85:9a:bf:
26:c0:bc:a9:ea:b3:fe:5b:05:b0:bf:15:04:b2:a8:
0b:ed:35:50:bc:eb:46:24:38:9f:53:5e:da:0c:33:
53:c3:b5:b4:35:fe:2c:30:ea:ca:cb:d5:f2:7d:61:
39:af:e9:14:7a:68:a5:e3:f3:40:f7:86:86:0b:8c:
22:6b:df:6a:d6:3e:6b:fa:8d:ee:bc:a3:30:4f:a9:
43:66:be:d3:c1:58:74:5b:8e:b2:7c:09:47:c4:9b:
94:d0:f0:8e:df:12:09:e9:74:db:0b:1e:ba:7f:7c:
51:00:66:56:b4:fa:c8:bb:34:0a:86:b0:cb:d3:18:
09:a7:5b:fe:65:da:b7:a8:20:ec:36:6e:a2:3a:98:
75:65:fb:22:ae:64:f4:1c:2e:ec:6d:85:81:1b:65:
fa:9c:ff:cc:0f:3e:4a:59:0e:00:49:91:50:28:f1:
95:50:7f:b2:fe:de:aa:c1:07:19:4e:04:39:1d:a8:
2a:5f:b1:ce:4a:92:4a:12:ce:f2:b3:80:59:27:2b:
5a:05:ae:68:ad:30:39:d7:9b:19:eb:c4:29:e7:8c:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:24:FC:29:F6:E0:6E:96:AC:0F:60:FB:E7:03:72:70:CB:38:3D:58
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:62:4f:ff:4a:9a:1f:00:0d:b4:29:16:d3:3b:c1:4f:3f:50:
d2:59:c2:c1:85:3f:9e:55:8a:00:6b:05:2b:a5:41:16:3b:38:
6b:e2:75:54:20:23:60:52:2a:39:af:78:0d:be:30:24:80:fb:
b9:b6:12:fb:2b:6e:28:27:90:fe:ed:0d:10:59:b6:2b:80:8b:
db:fe:62:29:54:b7:0b:d9:5b:42:19:d1:40:c1:c7:79:e3:1d:
fa:3f:d8:fb:9a:64:68:1d:e5:49:36:1b:8f:74:6c:b7:6d:77:
74:47:2c:11:39:66:fc:49:54:4a:3e:9d:05:87:f9:48:3c:c4:
68:0a:a5:8e:2d:9f:a1:97:c7:10:59:50:dd:9c:78:af:97:49:
0f:da:90:03:de:3d:df:35:b3:43:02:fe:ae:7c:06:17:f3:65:
4d:95:59:f7:77:61:2a:80:58:93:42:38:91:72:2a:3d:e0:cd:
57:92:45:36:dd:47:11:a5:5b:7e:b1:84:6d:cb:43:c2:23:3a:
2f:40:e9:bb:5a:2f:85:f4:0e:34:88:ba:53:b5:a8:be:ef:d1:
64:4f:3f:ee:f6:2d:2d:14:27:37:d7:5b:60:d0:9f:d6:4e:79:
42:56:77:cc:e6:eb:ff:f7:25:7d:85:e6:ca:d0:3b:95:6d:fb:
a9:14:70:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:08 2026 by rpki-client