Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: X5A/ig0gdppcnZRtZ8zgjxAjQFyGtfBxLkZdLnrXHmQ=
Subject key identifier: 34:D3:20:15:4F:A6:90:91:56:B5:68:D6:94:B9:4A:F1:2D:E4:9A:43
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 019CAE6C4AD53CFA7091EF063C3DA36A9F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 1120
Signing time: Mon 02 Mar 2026 12:00:58 +0000
Manifest this update: Mon 02 Mar 2026 12:00:58 +0000
Manifest next update: Tue 03 Mar 2026 12:00:58 +0000
Files and hashes: 1: J_6ozcvtDoYKAmCxlhoux76Ahfg.roa (hash: lv/v7VLFA2FqHauF9FdFYvoyrCMGxHrhesLrZHX2U9c=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: Xb+A1l2iLBV/ISGqgEx6boguTLJUIWJlaVOR9Xd/CJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:4a:d5:3c:fa:70:91:ef:06:3c:3d:a3:6a:9f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Mar 2 12:00:58 2026 GMT
Not After : Mar 3 12:00:58 2026 GMT
Subject: CN=34d320154fa6909156b568d694b94af12de49a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:3c:42:18:98:a2:10:70:0c:c4:de:36:cd:
bf:ca:6c:69:58:ad:cc:17:02:a4:3b:ed:55:b4:5b:
3e:1d:ff:5f:29:a0:9a:2c:77:b6:79:64:14:c2:73:
74:4f:b3:c1:4d:42:e1:e9:09:67:c8:f2:52:ce:4a:
26:aa:f2:c8:56:cc:22:b7:a8:af:9d:29:90:1a:eb:
2b:9f:3f:78:e9:6f:08:24:46:20:23:2d:df:86:59:
de:18:e7:d9:18:2c:8d:99:8d:eb:b4:64:5b:11:40:
bf:1a:21:e4:e8:7d:71:44:77:50:36:da:68:2d:64:
9a:34:86:da:83:47:88:95:33:4c:45:53:f6:d5:f5:
4c:27:6b:6e:da:cb:ba:13:08:a4:2a:66:2a:10:18:
7f:6e:7a:0d:fc:d0:a4:27:d4:24:4f:07:8f:7a:36:
73:c2:92:6e:77:b0:e8:76:a3:06:d2:42:57:7e:5e:
3c:d8:b4:eb:b5:26:86:a4:b9:bc:5b:5a:3c:60:93:
d1:cd:31:46:db:08:66:e2:79:85:49:2f:3f:86:80:
61:1d:d9:2f:1e:90:8f:ea:26:24:7c:17:8c:20:b8:
2a:68:74:8f:c9:f5:d6:a6:98:92:d8:11:8e:9f:e0:
11:ee:89:b2:89:a0:6d:03:a0:dd:01:5b:b9:72:cd:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D3:20:15:4F:A6:90:91:56:B5:68:D6:94:B9:4A:F1:2D:E4:9A:43
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b8:1c:2d:8c:7c:65:e4:2f:2a:50:4a:f9:56:cf:63:e3:23:
90:d8:4b:84:d8:92:a1:f7:c0:51:20:7a:7c:ce:97:b0:ef:18:
4e:e5:0b:06:b3:fe:69:56:1b:b1:01:3e:80:ad:94:a9:f6:c0:
3c:d4:df:46:f5:eb:0c:5e:9f:cc:8f:44:38:16:8c:e5:f5:e7:
6a:c2:88:fb:2a:13:51:5e:d4:ad:54:52:9a:6f:56:77:1c:a2:
fa:69:71:43:d6:ce:dc:c9:a8:c8:b6:5d:77:49:75:c1:e6:06:
01:7d:bd:e1:a6:1d:9f:31:9c:31:3a:2b:93:d7:92:00:ac:32:
b1:87:8e:a8:1b:1e:0f:ed:e6:c4:2c:5a:77:87:95:b1:0b:9f:
21:3e:c9:5c:41:c1:cf:06:b6:e6:fc:b1:1d:f9:49:62:fd:45:
6a:d5:ee:66:77:b8:ea:89:cb:9b:9c:27:16:7a:41:8a:f8:ce:
f1:d0:95:59:ed:1c:96:e3:4f:68:1e:77:53:e8:b4:05:ab:7c:
92:d7:df:b8:41:d4:ee:e4:2f:2e:53:00:a9:d7:bf:17:83:be:
05:cf:4a:85:f9:a3:59:de:a5:15:25:6c:cd:76:c3:73:58:ab:
d2:91:19:20:92:40:ba:d6:f6:bb:77:22:3d:7d:73:08:6e:2e:
9b:f9:68:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:43 2026 by rpki-client