Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier: sEoij7xDJqzYBA9rIO+6qyiD9GRLPgw9x4tRmp4M/ds=
Subject key identifier: E5:BF:60:38:D1:12:2F:18:FB:66:25:3E:79:C0:11:B6:1F:0C:FA:DB
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 019CAD908F008BE5BC91A0D497C4AD1C6FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number: 1861
Signing time: Mon 02 Mar 2026 08:00:57 +0000
Manifest this update: Mon 02 Mar 2026 08:00:57 +0000
Manifest next update: Tue 03 Mar 2026 08:00:57 +0000
Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: tH66AGqINKCfS5fiyc8h2o101W10X0oekqRih2K+rhs=)
2: Q3-sU-GYPpAGQxcQjINmgHQ1wSE.roa (hash: rYj0bj0I+s315HlLhZKfLrpr9fkPJ+X9pfvhpS9BAws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:8f:00:8b:e5:bc:91:a0:d4:97:c4:ad:1c:6f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Mar 2 08:00:57 2026 GMT
Not After : Mar 3 08:00:57 2026 GMT
Subject: CN=e5bf6038d1122f18fb66253e79c011b61f0cfadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:2d:94:ba:d6:ec:aa:4d:d8:3c:dc:7b:d8:
ca:8f:d7:f2:18:54:26:59:cd:db:02:34:3b:83:5c:
98:4f:4c:8d:f8:65:14:03:b9:0e:1a:85:17:fa:95:
48:9e:4c:33:f4:f1:f5:83:91:a5:3a:ce:56:34:bb:
f9:dc:3b:b2:27:9f:16:de:17:af:b6:bc:82:82:80:
5d:7e:a1:e7:ab:7e:03:8b:f7:e8:16:b5:c9:55:92:
6c:62:0f:e2:0b:4f:a4:a7:62:0d:12:82:60:69:8a:
dc:87:1d:64:5f:01:6c:90:7a:97:ed:5e:d4:c7:9e:
c6:23:ed:63:89:2f:e0:e3:6e:04:ff:6a:94:23:f7:
23:33:29:d0:1c:a1:01:3f:98:b7:ef:41:6a:ec:d5:
8a:3b:08:3b:ec:b4:46:92:6c:b4:e4:55:2f:b3:7d:
39:a8:5a:d1:b6:3a:19:7c:9e:44:03:93:c7:0a:5a:
3f:07:8b:bf:51:68:15:c9:32:7e:6a:a3:9d:be:86:
88:a0:25:8c:19:6e:40:5d:cd:7d:27:ab:06:a8:d8:
da:3c:05:bd:d8:c6:da:40:38:f6:a8:96:02:de:4d:
bf:ba:5b:46:3c:8f:7c:c4:61:ca:43:e8:04:55:32:
7f:e7:cc:2d:7c:16:aa:bc:b2:39:e3:71:83:7d:37:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BF:60:38:D1:12:2F:18:FB:66:25:3E:79:C0:11:B6:1F:0C:FA:DB
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:77:7d:1f:0b:b5:38:75:0d:b2:83:35:ff:03:80:8f:cc:a3:
dd:63:b6:2c:c7:98:49:ff:69:d7:97:73:76:7d:77:04:2c:41:
7b:8d:7c:9a:fc:81:77:b0:10:81:87:27:5a:18:93:c5:ed:c3:
26:b2:d3:64:b4:98:d5:9e:90:62:4c:d1:8f:3f:2f:e3:66:ea:
03:05:cd:b3:76:49:a5:43:5a:58:6b:37:9c:45:95:4b:71:8d:
eb:95:1d:ca:64:80:fe:94:57:4e:30:d4:39:8e:1d:68:84:c4:
1f:21:ca:11:1e:f2:08:d7:d5:0e:2b:c6:16:df:06:b3:cf:7d:
10:ac:e8:a1:d0:48:91:39:85:53:71:2f:c2:77:6e:11:3b:ad:
90:d8:97:31:41:9a:b5:07:cd:d7:7d:47:27:de:f1:01:23:20:
ee:d7:28:c4:60:89:25:05:f4:4d:e8:3e:f9:12:a4:98:af:f6:
ea:5e:69:11:d2:e4:ea:b5:bc:aa:84:45:20:4b:b8:f1:17:b5:
78:ad:3c:54:c3:9b:93:a1:2c:eb:f9:8d:07:40:9d:3b:ed:dc:
8a:95:26:47:ae:f5:2e:4d:39:4e:68:d8:32:60:3c:4d:27:4d:
b7:74:ba:b4:07:69:26:f9:01:6a:92:db:b0:93:90:61:93:fc:
7e:1e:c8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:27 2026 by rpki-client