Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier: VCpC4ckE4y97u681vA895lXoE3ELxPJuIQAWx8Jubj0=
Subject key identifier: A5:E4:51:A0:E2:36:69:AC:23:41:63:9E:60:F3:47:0A:D6:51:BA:65
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial: 019CADC7EAA1F2B278B44281DB1B9CBC943D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number: 0D7C
Signing time: Mon 02 Mar 2026 09:01:25 +0000
Manifest this update: Mon 02 Mar 2026 09:01:25 +0000
Manifest next update: Tue 03 Mar 2026 09:01:25 +0000
Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: kxfxVRMB6a/X+AlvHwvCBAFrH7A6vYv54Uc2Ia/rGgU=)
2: Uklboo3tG2E8bmpaNpWg7iBT500.roa (hash: 3bdk4yfdkJQ/C4ZvETpkPR6Yh1F2fFWoUHJ2qwV5MwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ea:a1:f2:b2:78:b4:42:81:db:1b:9c:bc:94:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Validity
Not Before: Mar 2 09:01:25 2026 GMT
Not After : Mar 3 09:01:25 2026 GMT
Subject: CN=a5e451a0e23669ac2341639e60f3470ad651ba65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:7c:f4:9b:41:a1:36:08:22:9e:59:bd:ce:
26:60:1b:ad:06:ca:a9:da:79:43:c5:d3:f2:dc:d9:
b2:6b:ab:bf:ea:ad:17:64:05:48:9d:ec:8d:80:ad:
19:b5:ac:91:00:c8:b1:dc:6b:41:01:22:60:d9:61:
fc:9e:3e:71:ad:f7:cf:bd:f1:c1:f9:b5:43:b3:bf:
1d:ec:37:06:5f:c0:0f:14:16:b8:3b:cc:67:81:27:
40:87:fd:3c:9e:fa:7a:84:93:47:19:f8:bf:7f:e0:
82:39:65:d7:ff:28:ed:61:7d:8d:2f:a1:2d:94:8b:
7d:18:f5:df:ca:6b:c7:4e:7d:97:3e:11:07:b2:ba:
fb:55:31:89:09:ed:f4:9a:02:bf:97:8a:6a:4a:5e:
ba:2d:f2:e9:b8:32:c3:76:a4:d5:dd:f1:f0:e3:0b:
1e:c0:a1:b6:f6:a0:a6:42:59:4a:29:fa:8d:08:b0:
95:a4:94:de:dc:f5:3d:f6:36:c0:ea:05:4f:da:73:
9f:f1:dd:6a:45:c3:a2:46:48:2b:99:0a:58:c1:07:
fd:b6:0e:32:7e:e9:9c:d3:89:b5:b4:d8:38:6e:b5:
58:53:f9:b8:8f:d2:b1:ff:74:d4:4b:1b:8d:6c:37:
6b:f9:fd:57:51:65:59:ab:95:56:94:40:7d:ae:17:
7d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E4:51:A0:E2:36:69:AC:23:41:63:9E:60:F3:47:0A:D6:51:BA:65
X509v3 Authority Key Identifier:
keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:75:53:c8:f9:5c:d3:d2:34:f3:ff:4c:13:ca:f4:97:e1:08:
4b:8c:85:ca:6b:e1:e8:80:96:70:69:86:ec:e3:1c:3d:8f:8a:
ff:ed:e5:9c:5c:a7:60:4a:b5:e0:9e:f8:0d:23:1d:b2:41:93:
db:ce:02:cf:b9:75:9a:4b:73:97:3e:07:d7:d2:c6:67:e9:a8:
30:ab:8b:c2:22:d3:56:54:a9:ee:1a:40:42:4e:48:98:c4:c9:
38:f6:77:72:f7:73:52:14:f7:66:ba:56:9b:d4:21:eb:b8:39:
8d:eb:b9:9f:dc:9c:f3:45:07:8e:e3:ab:a9:ea:70:7b:42:13:
d7:e7:ba:5b:4d:b5:86:e6:af:90:2c:b1:71:4c:92:f2:8b:10:
80:66:f7:e7:84:36:3e:11:a8:1c:83:78:91:0e:ef:c0:71:43:
6d:ec:71:18:83:48:f1:30:d4:31:d5:d6:7d:ce:0f:83:31:6a:
19:3e:7c:ae:54:a2:97:6c:85:31:cb:94:7d:fe:42:e0:f2:fd:
41:51:99:43:9c:f6:8d:a9:5e:5f:58:63:5a:82:8d:40:2b:78:
d1:39:5d:9a:3d:ed:19:d8:cf:86:7e:29:f3:e6:57:97:b9:58:
db:6f:24:35:db:0e:df:1c:74:03:21:41:3d:35:06:f4:24:ad:
2b:44:44:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:57 2026 by rpki-client