Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File: 9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier: 8Zy7QF6wipumuTcXW78piNEuSYzZEv3zGVduG3g/KD8=
Subject key identifier: 06:12:3A:E8:28:B9:C7:17:D5:FF:DC:0B:02:6A:51:E6:0C:67:2D:1A
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 019CAB34000875B2E913F33ED9AFD18E0B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number: 184F
Signing time: Sun 01 Mar 2026 21:00:37 +0000
Manifest this update: Sun 01 Mar 2026 21:00:37 +0000
Manifest next update: Mon 02 Mar 2026 21:00:37 +0000
Files and hashes: 1: 0nFOG16a6la6kMeB7VFoAXR1vn0.roa (hash: zCerIqwrSJR1nVZNueTEjxajeJlDa1k8Y1Z/6ybTWvE=)
2: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: KxSqQNj/pmyTNKBD4FcmO0zmPrySpk2R1mUooQEa084=)
3: q322xaSHMZx1k4xaVe30RdNBWuo.roa (hash: DQXWLyhzw4r+tbYvkotbpHRusQgaYcOI5F7MnlMraO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:00:08:75:b2:e9:13:f3:3e:d9:af:d1:8e:0b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Mar 1 21:00:37 2026 GMT
Not After : Mar 2 21:00:37 2026 GMT
Subject: CN=06123ae828b9c717d5ffdc0b026a51e60c672d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:3b:1c:eb:53:e3:82:e6:bb:8f:86:52:e8:
fd:30:ba:cd:e9:67:00:63:42:22:bf:c3:d8:81:71:
e7:a2:56:f7:21:a9:f6:6c:44:45:d0:58:0b:b7:66:
4d:07:97:01:9b:93:e2:3e:d3:d1:d0:62:b6:45:fa:
56:c9:0e:23:8d:db:19:28:a5:d7:b7:6a:a3:ac:7d:
cc:1c:ca:6f:36:86:a0:46:b3:04:27:df:1a:9c:e4:
9c:88:3a:cb:d6:4f:0c:27:3a:68:cd:14:ab:98:d3:
d0:13:ff:40:98:12:b6:c2:99:c8:6c:ac:48:0b:45:
14:b7:75:ec:2d:d6:5e:bc:3f:8a:47:7c:8f:6c:8e:
b0:93:40:70:76:5b:c1:e9:0b:55:a0:f8:da:a7:38:
03:ec:96:08:d4:b8:2a:23:b5:fd:99:7a:d9:51:52:
b0:7d:7a:04:27:5d:f8:95:63:cc:4f:3f:2c:2e:cf:
c5:56:9a:81:6c:ce:7b:66:33:9d:e1:83:4c:52:f5:
a2:11:55:a6:0a:17:06:33:c9:34:c8:dc:42:fb:eb:
58:28:89:97:00:c0:18:eb:a8:f8:4d:f7:de:87:89:
68:b9:7d:ba:5d:b2:8e:61:ff:d8:7b:f0:bf:6a:e8:
59:58:4c:38:27:d1:e6:8c:19:d3:fc:4a:4a:86:2c:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:12:3A:E8:28:B9:C7:17:D5:FF:DC:0B:02:6A:51:E6:0C:67:2D:1A
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a7:eb:89:44:33:7e:b0:37:46:22:aa:4c:0b:b3:01:9c:0d:
20:66:45:92:46:8d:6d:b8:e4:de:92:bc:50:33:fa:e4:31:86:
ce:69:3c:8e:92:33:5e:64:67:05:15:7f:8a:fa:d0:a2:1f:19:
a3:b4:ad:fd:8a:17:9b:32:ad:d6:29:b7:63:fe:5a:2d:21:1a:
58:d5:18:e7:19:3a:49:68:a2:3a:05:fb:0c:42:d9:48:64:55:
e6:54:81:07:e9:b5:9f:4d:6c:fa:1c:21:b4:9f:03:00:e4:bd:
4f:16:38:b2:48:8e:ca:f5:74:a9:0c:15:1e:4e:d9:15:5b:68:
48:b1:c8:f5:a8:35:f4:df:ac:06:7b:40:67:0b:de:85:d2:dd:
95:e0:67:ca:55:13:4c:b4:4a:69:2f:6c:ae:87:ea:d2:96:37:
d8:65:5e:df:63:1f:c3:40:e6:1d:ed:2c:16:6e:fe:a8:39:7c:
1b:27:1b:b9:db:ce:72:4f:ef:9a:da:4a:ba:c9:22:7b:db:81:
a8:67:38:f6:3c:ef:3f:74:1b:b6:cf:89:00:be:e8:42:89:6d:
0f:22:b8:f7:57:3d:1f:1d:11:55:f9:09:8f:e2:fb:28:97:61:
c4:ac:22:64:c3:8b:31:76:a6:72:99:36:09:00:d6:a2:24:c0:
60:0d:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:01 2026 by rpki-client