Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: VdQ6c5l4Swam1KW6HQULVod/gVgEDQJcNXHLmK9WeVI=
Subject key identifier: EC:2B:EE:0E:4C:3B:7F:B9:D0:F5:F9:5C:6D:F4:B2:23:49:65:C5:1E
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019CAF1112DA579C521D231FA8F7AE62DF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 09C4
Signing time: Mon 02 Mar 2026 15:00:57 +0000
Manifest this update: Mon 02 Mar 2026 15:00:57 +0000
Manifest next update: Tue 03 Mar 2026 15:00:57 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: SUxLv03KuO0E+k01FK3XuihjXV93JtTY6E70oGBnAdc=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:12:da:57:9c:52:1d:23:1f:a8:f7:ae:62:df:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Mar 2 15:00:57 2026 GMT
Not After : Mar 3 15:00:57 2026 GMT
Subject: CN=ec2bee0e4c3b7fb9d0f5f95c6df4b2234965c51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:c7:89:5d:c8:cb:32:7c:29:05:d1:c3:c9:
0a:a6:50:90:4f:06:40:6a:b6:94:ae:b4:7e:75:0a:
49:61:d1:38:b3:ee:5e:99:83:c4:0b:79:6f:eb:38:
8a:f6:3f:d1:ee:7c:4d:46:01:e5:d7:00:c3:b3:4c:
e9:b2:7a:be:43:c7:60:d5:c8:74:d5:64:d8:8f:03:
8e:35:0d:00:bf:5f:55:09:23:31:9a:18:5d:00:47:
4f:cc:f2:89:19:81:8e:f1:23:18:e8:52:d8:87:94:
64:33:10:73:99:30:ab:65:3d:e5:23:4b:a2:e1:de:
74:81:bd:89:47:7a:04:b4:cc:10:20:dc:27:d8:66:
45:a1:d5:17:0c:bb:b9:57:e7:f0:96:8f:3f:21:82:
c5:ad:74:4b:30:e6:7d:fe:e7:82:0d:d5:17:16:c8:
d3:9f:80:e3:35:13:6d:58:c9:85:88:e6:1a:3e:cc:
80:b2:20:53:3c:5f:1b:a0:51:77:4b:37:27:56:3d:
dd:34:bb:05:58:fe:d7:8d:82:2a:06:eb:a8:75:f6:
e2:ed:b2:5c:90:1f:9a:e2:fb:51:34:49:0c:84:fa:
e4:a5:ba:2c:e5:f2:ec:d9:50:a9:3d:64:2f:e4:eb:
c2:dd:8c:5d:4b:a2:46:a9:1a:0a:38:b9:e5:90:cf:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2B:EE:0E:4C:3B:7F:B9:D0:F5:F9:5C:6D:F4:B2:23:49:65:C5:1E
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e5:72:41:bf:30:93:43:7d:72:4b:81:35:f7:e2:09:ed:b8:
d5:4b:47:09:19:93:f7:44:f7:1d:35:ce:ff:03:43:27:6a:b3:
62:69:89:03:d2:48:b5:23:3a:23:36:1b:04:c9:6c:39:b8:ce:
f6:e5:93:ab:99:1e:12:32:3a:57:56:76:38:32:10:c6:c9:dd:
9f:58:63:2a:e9:6c:19:39:73:07:f4:b9:47:4f:89:10:43:a0:
c6:62:55:f0:34:fa:4d:0d:0f:ab:a6:bb:dc:56:dc:94:a2:87:
93:70:b8:42:2a:d2:92:9f:7e:0d:ec:9e:81:fb:ab:da:59:1b:
9a:40:5f:59:ab:7f:d2:2f:7b:57:bd:3a:e8:72:80:4e:32:e4:
47:57:2e:53:22:56:37:91:71:da:2e:83:cd:54:cd:e9:32:91:
7d:82:4c:87:8c:69:66:dd:18:b8:f7:e0:6e:b8:35:79:5e:19:
5b:f8:d4:d5:f7:c6:65:77:dd:2e:9c:cb:f3:ab:87:82:2e:a2:
7d:7d:0e:9e:ee:d1:61:d6:10:ee:7a:ae:a8:18:1e:be:24:de:
68:38:e7:01:2b:1f:0e:81:dd:a4:77:b8:62:87:35:b2:05:1c:
4a:90:26:7d:e3:ef:58:3a:b4:96:3f:8a:aa:34:62:64:81:d1:
41:15:49:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:20 2026 by rpki-client