Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier: fLnScNqvZK9SoJ7yQm30VfHFx65graBuTnfJFLXB8uA=
Subject key identifier: F2:6E:B9:DC:79:B3:2A:35:EB:27:5C:6B:AA:20:E2:18:67:59:0A:B5
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 019CAAFCFF2FF33A5B94BC50471DF6296EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number: 059D
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: L314PIS9EZuLIllvbYG4hWHPUco.roa (hash: oCRJ7CpfVca9XR76mJtqFGhJ4HnpliA09q5+Ns2Ex/4=)
2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: 8Ih0qwSiXyCOv/XUKTbrwGsL7CLfrfU/dNv9p2F4Ug0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ff:2f:f3:3a:5b:94:bc:50:47:1d:f6:29:6e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=f26eb9dc79b32a35eb275c6baa20e21867590ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:ca:8f:0e:8e:13:ff:d1:e2:2f:96:d3:5f:
94:dc:1e:f8:9b:68:ac:eb:5f:dc:ab:c2:5b:3b:ae:
e7:66:5f:9d:04:86:02:62:01:d4:22:ec:d7:0c:fc:
22:fb:38:50:91:58:b7:90:85:0a:f1:29:c8:81:05:
a4:a4:d7:fa:83:54:61:e5:dc:b1:3b:a4:69:5e:77:
0e:77:c8:bf:a8:a3:c0:01:1d:d4:cb:e5:52:a7:25:
16:17:24:06:b7:0e:3f:e8:62:82:bc:01:a0:4b:49:
f6:64:6c:03:b5:37:bf:d7:a0:3a:c7:39:64:3f:70:
bd:32:8c:55:6f:0f:9e:5d:4a:35:52:6e:72:11:d9:
8c:99:32:3f:4d:63:bb:20:e8:89:70:e6:e5:73:41:
f7:be:45:e3:c4:d0:83:14:2e:17:24:70:52:6c:11:
1e:83:73:9a:b1:33:52:8f:48:cf:98:48:c5:ef:e9:
a2:4e:0c:84:ae:b1:ef:9f:ad:17:e1:37:88:9c:38:
50:43:95:67:ab:90:bb:51:60:00:1a:bb:64:11:c0:
34:1b:b0:b7:81:ac:d3:88:74:75:6f:05:e0:e6:ff:
d9:75:c0:be:44:8b:6b:b2:06:0b:8b:1f:43:ce:50:
18:7d:d7:e4:73:c2:46:8e:b7:be:cd:f7:fe:f1:9e:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6E:B9:DC:79:B3:2A:35:EB:27:5C:6B:AA:20:E2:18:67:59:0A:B5
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:e0:b1:c4:e9:4d:3c:c7:a6:fa:47:a5:b5:6d:fe:50:f6:d5:
65:5d:ab:bc:32:d1:61:8a:82:41:c2:f5:02:4f:79:75:db:f3:
b0:8c:6f:00:0d:18:54:27:7b:ec:2b:2a:e7:98:f7:67:e8:8d:
0d:42:14:5a:69:1e:d2:64:02:05:ce:72:1f:e7:04:da:60:38:
b6:70:81:ed:94:48:0a:35:2b:be:45:3c:be:af:72:57:a1:77:
0c:8f:b5:6e:6d:a9:97:48:c7:9c:01:17:7e:bf:9a:75:82:29:
08:5e:59:fc:39:71:db:a5:49:1a:a7:6c:58:f0:da:33:13:70:
65:2b:09:90:07:2b:91:db:be:92:b8:63:7b:3d:7d:ce:76:da:
26:65:81:74:93:57:47:51:9b:77:04:b1:97:36:cc:8f:aa:12:
8b:d1:90:51:d7:0b:6a:39:47:73:fd:61:44:13:ca:7a:01:09:
15:af:e7:6c:5c:e5:30:20:95:ad:d5:b7:97:e0:f9:b0:ef:19:
39:14:0c:19:fd:4f:e0:a5:04:7b:ed:20:2e:67:69:3d:87:df:
13:40:fd:90:42:67:89:af:df:48:64:19:86:a1:24:02:ee:e5:
99:ee:1d:54:58:cc:c6:93:7d:03:32:89:c0:98:b1:f2:63:35:
91:66:b3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:25 2026 by rpki-client