Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: N/GPZzfzHiOmCk7A0ysMeGN/12V///szkEYiAwFHKyA=
Subject key identifier: 09:00:11:A1:98:D2:85:AB:EB:DF:8D:B7:1F:8D:28:17:D8:F5:4C:59
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 019CAB6AC7C94C30860E60612CEBD6129354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:00:27 +0000
Manifest this update: Sun 01 Mar 2026 22:00:27 +0000
Manifest next update: Mon 02 Mar 2026 22:00:27 +0000
Files and hashes: 1: 4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa (hash: m7wSLBG3yMM59qxFhuh+wuLPCbDahbo3ByN0pwy2TGw=)
2: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: B1/EuSZGCWunPgvt4zc8/Umq5HwcBW/0ko3c1fFEPJU=)
3: d6fj2hsf73awFuJ9_OrVwzH3RUU.roa (hash: q5EEFAAUQDhZrlGyPfpObbd8Uk9pSouDXHiB9RSx/i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c7:c9:4c:30:86:0e:60:61:2c:eb:d6:12:93:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Mar 1 22:00:27 2026 GMT
Not After : Mar 2 22:00:27 2026 GMT
Subject: CN=090011a198d285abebdf8db71f8d2817d8f54c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:7d:1c:3d:7f:64:c9:8a:b2:12:ae:78:bf:
9c:4f:90:0b:10:b8:18:6c:a9:07:10:80:16:ef:cf:
de:3a:e1:4d:ed:55:d7:c4:4e:39:4b:ff:62:75:a4:
bc:ba:65:ac:31:25:08:9e:4c:85:38:38:d3:09:03:
b3:25:43:51:43:f0:54:d1:9f:f4:22:3c:c0:8c:1d:
41:1d:5c:ce:e6:dd:ec:cf:4a:68:58:7d:f0:bf:c2:
eb:a5:a1:2b:43:e0:69:76:54:33:ca:fe:91:eb:eb:
b0:7f:c1:fe:4c:51:d7:61:f8:9d:89:db:57:1a:af:
5c:53:9d:a7:9c:84:ea:b3:cf:0e:c1:c1:e7:c5:88:
06:bf:cb:b3:a4:1a:84:59:84:71:4f:07:a5:6e:f2:
a8:1c:93:d1:91:1e:31:df:60:23:d7:89:d7:bb:98:
b6:a5:a4:c0:0b:5b:21:93:a1:58:4f:9d:ed:15:52:
eb:bf:b6:b1:de:15:55:16:c7:9d:fd:61:72:35:7a:
3f:34:c3:b0:f2:d7:a5:8e:71:57:89:5c:7b:c8:6b:
0e:c8:82:87:ef:36:0d:f3:2b:af:a1:53:59:15:83:
f2:55:e6:ae:4f:2b:f9:b4:08:75:3a:ce:c7:4f:de:
46:f5:10:a9:b8:35:27:8f:52:16:c9:14:74:1c:d9:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:00:11:A1:98:D2:85:AB:EB:DF:8D:B7:1F:8D:28:17:D8:F5:4C:59
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6c:85:0c:8b:6e:27:40:87:60:79:7f:30:fb:a5:ae:4f:97:
d7:5d:17:1c:2c:80:a1:f6:45:50:75:f2:fc:36:84:27:31:71:
9b:ea:a7:b2:db:a5:0c:f9:ce:d4:3b:dd:a3:bb:a5:61:89:73:
d5:3e:ac:ee:a0:06:f9:43:2d:a3:6a:4e:8c:7f:c6:13:78:62:
82:dd:6c:20:1e:3b:f8:68:f5:85:38:c9:10:18:a3:5b:a0:1c:
f3:c6:58:86:fd:85:52:b4:e6:85:32:24:f4:e3:e4:e6:35:f0:
62:99:29:04:80:f5:6e:0b:75:0c:57:1f:6d:63:7e:16:03:13:
62:3c:1a:5a:84:2e:d0:00:96:2c:d2:ff:0d:19:dd:c1:bd:84:
76:9d:4d:e9:c5:ac:9a:41:7c:e6:f0:ff:34:5a:3d:6b:a5:28:
c2:b4:88:80:b6:f9:1d:25:c6:08:d0:87:f1:c6:0f:47:76:89:
8a:05:18:19:a5:41:d2:dc:54:ea:9d:28:69:44:41:03:2c:da:
d2:f9:8e:6c:a9:bd:35:b3:fc:1a:c4:88:59:d2:77:59:d0:ef:
cd:38:cd:e9:eb:52:43:bc:68:c1:a2:ee:34:74:5d:23:d0:f5:
77:6d:e0:56:32:3f:9a:88:f0:07:b6:f4:40:40:6e:f6:cc:aa:
0a:2b:a4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:29 2026 by rpki-client