Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier: Gcbh9uzMZYkiSa5rQJtYuUj0+LN9UDCSONy3rVE5ihU=
Subject key identifier: A8:2E:C9:53:3C:F6:90:75:8E:F2:9B:45:E9:DB:5B:E7:15:24:06:86
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019CAB33F49158F6A62E9E1B457E81C1CA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number: 1859
Signing time: Sun 01 Mar 2026 21:00:34 +0000
Manifest this update: Sun 01 Mar 2026 21:00:34 +0000
Manifest next update: Mon 02 Mar 2026 21:00:34 +0000
Files and hashes: 1: 01ZkvNgWiFr2Xle1lgNBaYZj-X8.roa (hash: krV70iW09YOJwAzEmvYrpBPuNGdijVHEbPaa0HE/jsM=)
2: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: SjFoOqN7gycW8EuGp2H6NuYU23WjxKT5DyMT0JaGSnw=)
3: EboQ4nMXI48WwaHSZ15OkVHDyAI.roa (hash: SI3+ap2GxZORyWEjQakTcPIlhvRATeVhJTKd2WR2ixc=)
4: OYpCQdK7lNSRzIdlHHMMZTxhha0.roa (hash: hLxZ48pmO0NghpmoI7b6iic2RgENYFKFAU8pL6U0sxU=)
5: W5i7jKztK_F-7p2FjKY5IXoTWnk.roa (hash: iWzQhvpIXmrZ9hLNW88m8Yge4x5Lx0tZrSAtIzszE3o=)
6: YWQCWSs8yZA8QY3t_PyQQKGtK3k.asa (hash: S3rytmqhbZUvqszHeJsXQK+zRV9JSgSBvpP4kCVStOY=)
7: d9HTRu6eOaOYuXd9b7iVCEDddPQ.asa (hash: /iCij5LL4WBtNjhwsh6zV4snLZdM7CyjGzuB4jg4Zsg=)
8: xNSFqM7-0qNODofNrUEn4XQu4ME.roa (hash: raRCbVzrGPXhNpKnAVtwuinosdft0bdaQidRsp21paQ=)
9: xffyY7RBwYFFWdto18bFCIkAi6M.roa (hash: /wOHBg089w6pbrnt+9vXF4Wu2NJ5CjjnhokCvpVnwN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f4:91:58:f6:a6:2e:9e:1b:45:7e:81:c1:ca:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Mar 1 21:00:34 2026 GMT
Not After : Mar 2 21:00:34 2026 GMT
Subject: CN=a82ec9533cf690758ef29b45e9db5be715240686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:c5:1f:a1:f3:3f:40:82:5e:11:3e:44:45:
9a:b2:24:1e:10:f9:a3:71:7f:5d:02:b6:08:c8:77:
5d:a3:68:00:98:25:63:a7:90:a2:db:17:12:2b:87:
82:ba:a6:98:f4:85:ac:d7:2c:47:da:4b:73:18:26:
aa:21:28:2a:a7:e2:7a:69:66:0b:f1:4d:46:33:8c:
18:cf:3b:fc:82:3f:9f:1b:89:80:39:6b:f3:a8:0d:
bf:9e:ca:f1:9b:fd:e8:8d:8a:1c:62:97:c6:88:7b:
d3:01:0e:d1:d3:6d:bf:02:25:c6:63:ae:c4:b5:3c:
e2:4b:9d:98:64:69:eb:b9:1e:05:c1:49:14:09:65:
bb:ff:41:36:5c:c5:51:83:25:60:b2:58:48:7d:72:
bd:39:7c:c7:3f:33:0f:8c:a7:df:31:13:3c:7d:b0:
71:38:56:0a:71:19:3f:9e:38:fc:f6:bb:2e:f7:08:
c8:d0:e0:9a:f0:58:fa:9f:6d:12:8d:53:31:ac:f7:
7d:e8:70:07:5f:3a:9a:6b:aa:70:96:ff:41:bf:bc:
e4:ea:7f:96:37:2d:08:20:b1:2b:ec:7d:b8:fd:65:
9f:c8:05:5d:e3:40:a1:95:b5:f4:5a:8b:03:78:67:
a8:23:47:1e:24:20:4e:08:48:d2:c8:04:1c:ae:86:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2E:C9:53:3C:F6:90:75:8E:F2:9B:45:E9:DB:5B:E7:15:24:06:86
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fa:42:3c:fb:ce:b5:e1:f2:6d:8f:cf:de:e8:fc:5d:5a:57:
5f:ce:bb:9a:8a:ae:96:90:f0:de:ca:48:bb:44:74:9a:5f:9e:
93:46:1f:29:1f:89:82:dc:dc:a8:c5:11:04:f5:4a:02:4d:b4:
ae:9e:26:79:7b:9d:ef:00:e3:ea:f9:49:bc:e5:f8:95:64:89:
73:66:f0:82:e9:0b:76:7a:00:3e:30:43:f1:22:a1:db:99:c2:
f4:15:ef:2b:e5:96:a3:a4:12:33:01:cb:b1:a2:ab:97:bf:cc:
60:96:c7:52:3b:28:23:2c:49:6a:08:b7:e3:70:16:11:2e:d0:
d2:b6:01:a8:d9:b5:72:18:ff:29:c7:d9:2f:7b:8c:fc:42:98:
3a:52:7f:c7:96:76:40:7e:75:85:ff:b1:1a:e5:ea:5a:2f:22:
38:ab:d4:44:2e:65:99:7d:2e:a3:3f:db:cb:25:99:ed:27:1e:
9b:18:6b:44:b2:56:19:9d:86:06:e5:d5:c0:bf:39:08:d4:52:
39:6d:8c:6c:eb:08:19:82:27:82:13:6c:90:6e:e3:32:f4:df:
86:6e:48:de:91:bd:ce:ac:8c:7f:48:f7:0e:06:79:01:c0:5b:
ed:5b:e3:f1:00:d6:4f:52:31:55:2d:fb:6d:9a:2e:78:6b:0f:
46:05:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:18 2026 by rpki-client