Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
File: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json)
Hash identifier: alllPZZ0oDV2wE9CkzlibN9450+43V0fkst0PQkKpQA=
Subject key identifier: 61:6F:AE:CF:79:98:82:AF:C2:8A:5A:F8:5B:94:A5:35:1F:C2:21:09
Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Certificate issuer: /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Certificate serial: 019CAAFD3F56A23FEC74F45C0F7EC147247F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:49 +0000
Manifest this update: Sun 01 Mar 2026 20:00:49 +0000
Manifest next update: Mon 02 Mar 2026 20:00:49 +0000
Files and hashes: 1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: edrx2Rx341TG/jBlOoSS9NOGVFpKIA3o6P5h+Gp4UA8=)
2: UKATPR0b1kY7oFPVkZYEepDy3LY.roa (hash: CrwvVmRRQkszz0pHbbKO1FTUZbPyR5yvt9U+ujLmXCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3f:56:a2:3f:ec:74:f4:5c:0f:7e:c1:47:24:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Validity
Not Before: Mar 1 20:00:49 2026 GMT
Not After : Mar 2 20:00:49 2026 GMT
Subject: CN=616faecf799882afc28a5af85b94a5351fc22109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:0c:0a:9f:3d:49:3e:de:ca:6a:fd:b8:ff:
b8:c8:3a:7e:03:b4:b2:3d:6c:54:5e:cc:02:6b:fb:
a9:aa:e1:47:a2:82:ee:09:c0:51:b1:96:a4:96:3b:
a1:27:b2:20:4c:e1:2e:fe:9a:d9:d9:f3:78:99:42:
79:d0:ba:38:30:fd:e5:8e:15:7c:b0:cc:bf:b3:7f:
d3:fb:63:be:6f:0d:cc:15:de:3a:0f:45:28:21:57:
80:f0:82:5a:be:24:35:c7:98:a8:e3:1a:ac:33:b0:
64:b6:01:52:2d:1e:fc:cb:ca:36:70:d1:13:88:4b:
24:96:65:36:b0:37:76:6b:16:d2:b0:46:29:21:42:
5e:19:a3:26:1e:75:88:64:e5:d4:9f:28:d3:56:b3:
31:f5:67:60:72:a5:7b:16:06:f2:94:7d:d7:25:61:
4c:bb:48:7b:08:4a:ea:0d:1a:00:da:03:2b:04:7f:
fb:57:b4:e6:f8:be:a5:91:17:1d:83:62:8c:21:64:
1c:cd:20:bb:d5:8b:68:e3:6b:c5:b1:77:bb:09:e5:
c3:9a:d1:e2:8f:18:ff:b5:b7:ce:ab:5e:07:31:ad:
1d:46:88:01:37:a1:40:bf:37:50:ba:3b:91:f1:7d:
d2:98:fe:c9:6c:a7:d2:f4:aa:3f:f2:b5:5a:4b:1e:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6F:AE:CF:79:98:82:AF:C2:8A:5A:F8:5B:94:A5:35:1F:C2:21:09
X509v3 Authority Key Identifier:
keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7a:dd:16:33:fd:62:ac:88:4a:40:4f:46:a0:e5:89:32:a6:
22:d3:db:96:f8:ba:0d:73:94:4a:16:51:42:01:5b:2d:a5:b7:
b1:a0:b3:7f:d7:f3:36:c3:d2:ef:10:35:11:8f:e5:3e:ac:bd:
4d:93:b3:b5:19:e4:1d:5c:b2:4f:a1:81:48:f5:eb:84:f7:f3:
54:d8:f6:f0:85:6c:55:d4:8d:82:9c:a4:df:e3:0c:69:00:bc:
1a:08:01:3a:29:cf:3b:e3:db:39:c8:55:b7:95:ff:f4:3c:0d:
cf:14:d6:d4:66:33:e3:f5:c2:a1:89:7c:56:2a:fd:4c:36:3f:
02:9c:96:0b:ad:9a:9c:51:ca:70:72:76:47:0c:e1:51:08:77:
55:75:1d:68:89:f4:04:30:17:df:6e:1f:51:98:7c:42:ec:13:
45:80:d1:75:fe:5d:5c:f3:7f:af:73:c5:53:cf:43:b8:0a:82:
31:8a:3b:89:9f:32:1d:ac:7a:fc:a4:f7:5a:4a:64:eb:91:f8:
9b:6d:b0:ca:c0:e2:75:a5:3a:c2:48:e9:77:bc:51:93:ba:ce:
bd:a9:7c:b9:81:37:f0:81:91:bb:ac:a4:de:78:1f:11:31:44:
10:8c:3e:48:7b:24:98:06:71:f4:9b:b3:a0:ad:7f:94:6d:a1:
fe:31:fc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:03 2026 by rpki-client