Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: LeP/uZ+oSXAYDeNIqhDnSM3DGTNQOw3ZnF/xCVkwCww=
Subject key identifier: 85:3D:4A:63:58:28:CD:5A:7A:11:5A:A7:F3:16:07:71:94:84:67:E6
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019CAAFD033B57D8A24414ABCE5612F88278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0BAF
Signing time: Sun 01 Mar 2026 20:00:33 +0000
Manifest this update: Sun 01 Mar 2026 20:00:33 +0000
Manifest next update: Mon 02 Mar 2026 20:00:33 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: VwofFItFL2tH149wAntOpXYuOnwnKqMJOxUgD3QF3uM=)
2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:03:3b:57:d8:a2:44:14:ab:ce:56:12:f8:82:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Mar 1 20:00:33 2026 GMT
Not After : Mar 2 20:00:33 2026 GMT
Subject: CN=853d4a635828cd5a7a115aa7f3160771948467e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:12:2e:a0:b6:cf:59:9e:05:d6:f8:4b:80:
bb:98:a2:5e:e0:47:f0:15:db:a3:76:ea:79:0d:61:
e0:f8:dd:d6:b5:48:e4:a2:4f:8e:fa:3f:ad:9d:c5:
9a:77:da:65:4c:2e:a1:6d:a3:c8:a8:a8:8c:27:40:
14:55:1d:c6:08:29:63:71:18:7b:65:e3:f3:f1:1d:
86:e9:02:ff:11:92:ff:24:9c:e3:69:dd:0f:4d:c2:
3a:4a:48:0f:81:59:23:12:9c:27:ae:70:c7:3c:71:
07:e9:43:1a:20:e0:67:01:9e:4b:ba:fb:b0:eb:d6:
97:65:59:39:7c:8e:e1:10:d5:f4:e7:ed:6d:e7:fb:
44:fb:05:cf:6d:53:17:ad:9c:77:39:12:90:10:ed:
08:be:3d:5e:49:35:bb:b8:6e:e3:b5:fa:46:b8:60:
46:8a:91:5b:fe:f1:ea:48:24:db:16:03:f5:7c:92:
1b:11:16:3a:34:fb:e6:42:17:19:d2:0c:2d:35:92:
fd:0a:9c:0f:be:ea:af:7e:5b:59:c6:53:f8:34:01:
f0:a9:91:c2:77:f2:b3:d0:43:6d:cd:b6:af:ce:00:
89:7e:b0:d7:2b:a0:81:36:f3:6b:bd:30:c5:86:13:
43:5d:51:6f:4a:cc:2b:32:7b:2e:ec:ea:45:32:c8:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3D:4A:63:58:28:CD:5A:7A:11:5A:A7:F3:16:07:71:94:84:67:E6
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:48:92:3b:9d:a4:e0:60:f2:a2:22:81:b3:e5:02:de:66:a9:
6b:a5:1e:25:d4:f3:43:de:c5:7f:fd:ec:c9:26:46:05:43:c1:
4b:f2:dc:03:ec:cf:83:31:aa:ab:53:0e:0e:6e:68:4d:c0:bd:
2e:70:45:09:05:88:d4:78:ce:c5:3b:7b:0e:d1:10:4c:e8:76:
ab:24:a9:43:00:12:d2:4f:64:5e:56:7f:f6:f5:27:61:4c:05:
5c:27:9d:7d:a0:a6:89:03:42:c2:a7:f6:9a:b7:7c:ee:08:9a:
5a:b3:14:d8:34:fb:d9:6a:86:d2:46:d0:d4:6e:47:33:75:5b:
5e:0b:61:74:67:c2:ce:9c:c8:57:ec:33:52:31:e2:af:04:bd:
bb:d1:e1:fe:00:89:8d:da:e6:75:03:a0:71:c0:bb:90:05:e8:
66:eb:f7:fc:5b:1c:02:50:db:fc:26:06:d0:91:ba:a6:41:d0:
54:70:81:04:e5:91:ff:99:f8:cc:a6:23:2c:e1:ff:29:d6:34:
c6:bc:d9:e6:cc:93:04:7c:9b:dd:9d:45:3c:01:a9:63:d0:61:
3a:6d:52:bd:4f:47:92:42:8a:be:bf:d9:17:9a:ba:b5:af:0a:
71:a9:4b:b1:2f:dd:e3:82:aa:80:5d:74:3c:bd:b7:6b:d2:2c:
e0:ce:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:49 2026 by rpki-client