Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
File: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json)
Hash identifier: 61xt7SNYtyVytJxXDgLF/oE2txkgXJd7026dntkV29o=
Subject key identifier: 97:DE:98:41:E6:EC:BE:0B:E5:69:26:84:78:28:A6:E0:92:0A:AF:74
Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47
Certificate serial: 019CAAFD5472B3193841BEE69440359F7460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
Manifest number: 061C
Signing time: Sun 01 Mar 2026 20:00:54 +0000
Manifest this update: Sun 01 Mar 2026 20:00:54 +0000
Manifest next update: Mon 02 Mar 2026 20:00:54 +0000
Files and hashes: 1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: mcxDXRTTCRBshnOA3INhoh6wxDM5EaToXOFMTRgHKcY=)
2: e6cQAttr2HmbOlTBbjKV_2JWo0Y.roa (hash: m4yGQd55Wkn8/VNQHSMkT2U4sSayeuVDo4mzhAL262I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:54:72:b3:19:38:41:be:e6:94:40:35:9f:74:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47
Validity
Not Before: Mar 1 20:00:54 2026 GMT
Not After : Mar 2 20:00:54 2026 GMT
Subject: CN=97de9841e6ecbe0be56926847828a6e0920aaf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:2e:ff:25:b9:7b:96:86:f3:e5:3f:81:66:
f3:7a:ef:e2:41:f9:17:d0:a0:22:51:ee:e6:32:4a:
dc:60:10:21:0a:47:da:05:39:ea:fa:5a:ef:cd:ea:
33:43:0d:31:33:00:bb:e3:be:72:71:b5:e2:0e:00:
f6:5a:ec:64:47:95:df:05:83:99:68:66:54:6e:2a:
d7:a8:87:8b:40:96:1c:da:e3:e3:c6:4c:92:bb:b9:
76:21:61:21:b9:c4:26:c0:a6:eb:40:47:2c:43:60:
c3:5b:3a:47:96:a7:73:a5:69:b0:82:ce:82:79:a5:
75:5d:47:ea:09:a6:0f:31:70:49:ee:df:c8:bc:fb:
17:a8:7c:00:8f:48:1e:4b:11:48:3b:f2:62:45:a1:
ea:9d:4d:3e:06:af:16:d4:a1:06:b1:dc:92:5c:ac:
9f:0c:e9:a0:e6:90:87:db:c0:39:3c:0b:ce:65:bc:
b3:7b:84:3e:96:3c:d3:fd:c4:b1:37:7b:a3:e8:92:
42:7a:1c:26:da:e6:6e:57:e7:6f:80:95:52:30:b1:
14:2b:8e:15:26:64:ae:44:a3:81:c1:cf:cf:bd:a8:
96:3b:7f:f3:7c:ad:21:c3:7d:69:a7:21:e2:18:f4:
d3:26:b6:ac:d4:b0:2a:dc:75:06:e6:6d:7b:8a:47:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:98:41:E6:EC:BE:0B:E5:69:26:84:78:28:A6:E0:92:0A:AF:74
X509v3 Authority Key Identifier:
keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:41:70:7a:99:36:68:96:0e:17:45:06:cd:97:b1:81:5c:5d:
eb:32:ea:e8:50:80:79:11:8c:26:93:ae:67:4e:5e:00:9b:bc:
e9:c4:43:a2:fe:a1:17:24:bb:94:ec:b0:cf:d0:48:93:20:61:
2d:3f:5c:2e:a1:0f:39:f7:e1:fb:00:a3:5f:51:d5:66:86:05:
9c:75:c2:a0:0d:49:73:75:1f:a9:0a:28:e0:82:f5:04:aa:c7:
a5:ca:0f:95:00:b7:00:49:2c:78:65:b4:72:19:ca:ff:45:8f:
fc:5f:32:fe:c5:35:f2:13:42:b5:12:b7:92:38:fe:15:74:e5:
de:72:dd:42:c3:c6:8f:a3:f4:05:fc:f0:5e:e1:5b:35:c8:ae:
05:87:ca:dc:f3:76:ee:fa:6c:ea:32:2b:5f:24:c5:fd:c5:12:
15:47:f5:4f:d9:ab:bf:d3:57:79:62:cc:0e:d0:74:65:3a:0c:
a1:d0:73:ab:85:cf:3c:12:8a:26:80:e9:b0:16:95:59:9b:51:
16:27:11:15:76:e2:94:a2:1b:5e:4b:d9:f5:33:10:b6:a8:60:
60:d8:16:d0:7a:22:9c:fb:c6:8b:2c:37:17:e1:96:7b:00:b8:
87:21:1a:b2:a0:e1:c2:76:f9:ae:db:e7:4a:18:14:b2:1c:d6:
f5:c5:c3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:01 2026 by rpki-client