Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier: HwTfE+k3Dpf+/Y+uqEPjHzEAx9bSM+V2cL/qg45rYxs=
Subject key identifier: 1E:A8:47:44:0B:64:65:08:C1:2F:39:38:A1:95:02:8C:B3:29:05:67
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 019CACB5626AF919A49954C42706FA1A2AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number: 0D64
Signing time: Mon 02 Mar 2026 04:01:34 +0000
Manifest this update: Mon 02 Mar 2026 04:01:34 +0000
Manifest next update: Tue 03 Mar 2026 04:01:34 +0000
Files and hashes: 1: 5FdT73JkLCgHgzugWWXpOCrhVgc.roa (hash: oluoiDxtzFoApZrsUB2VZK/Twzibw5WYce0WItyA/mY=)
2: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: EzEAJBPPlFOHLo3xx46BzA44TILSgnLmya+uvfEiCHs=)
3: gFVBldPsPJ9_Z3436EbOexrFKyQ.roa (hash: XpNUD5CKdNtgQ6f8YKYlS0lGIc67007/Bg5jHv80Qgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:62:6a:f9:19:a4:99:54:c4:27:06:fa:1a:2a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Mar 2 04:01:34 2026 GMT
Not After : Mar 3 04:01:34 2026 GMT
Subject: CN=1ea847440b646508c12f3938a195028cb3290567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:04:14:81:f4:88:16:c4:db:7a:c6:4b:dc:
49:1f:3e:d7:09:ac:f0:39:70:fa:88:46:44:3a:ac:
90:f9:b6:39:e9:d7:4c:18:4b:5a:76:1f:f9:0a:99:
c8:32:5f:3a:6e:52:4d:7c:ab:01:37:7d:ca:e0:4c:
63:13:76:6c:66:72:a1:0d:34:7d:77:c1:c2:b2:f2:
42:9a:09:43:3f:49:92:64:06:db:2e:d6:60:17:03:
10:28:99:52:0b:71:ed:29:35:94:a2:21:76:5f:df:
01:a1:a7:29:35:a1:ae:e5:2c:42:30:4f:a2:ce:10:
ca:11:61:e1:46:62:ca:7f:25:d7:f7:0e:21:d7:b5:
57:54:97:e1:ca:d7:1a:78:34:00:d2:53:ab:0f:e8:
4c:de:78:5d:13:31:0f:49:1c:81:cf:26:1a:2a:70:
9f:5e:db:d0:8d:4a:58:d9:23:84:63:9b:9a:ab:50:
20:38:40:df:64:6e:59:98:80:46:86:42:87:94:27:
3e:dd:e8:ce:6d:50:51:49:06:43:1d:1c:13:4c:58:
aa:5a:6d:b1:79:5f:d9:37:3d:0a:8c:d5:cc:78:59:
28:f5:b2:91:09:b6:38:55:8a:e0:62:cb:4e:5c:26:
c6:1c:9d:f4:cc:70:11:f2:6a:ab:53:8e:ce:6b:11:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A8:47:44:0B:64:65:08:C1:2F:39:38:A1:95:02:8C:B3:29:05:67
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:15:46:da:0d:d2:bd:26:fd:0a:9e:bd:94:b6:ee:40:11:d6:
27:2f:ff:2a:83:73:a2:8b:ba:a4:12:ce:e7:d4:b8:98:fb:f0:
01:9e:cb:f2:32:a0:da:bb:9b:30:a0:f6:d3:a6:66:4f:99:48:
c6:d2:7e:23:c8:e3:3c:e3:03:7e:9e:ec:3f:be:88:2d:13:08:
19:db:8b:87:e5:de:e1:9f:ff:89:9c:48:bd:f3:86:45:f6:88:
6d:3f:9b:4e:7b:15:a8:30:aa:b9:1d:c4:e1:ed:57:f5:83:74:
4c:0d:df:90:ba:6a:fd:27:2e:67:56:8f:24:5c:fb:28:be:e8:
af:06:8a:f2:b9:6f:4a:cc:66:86:ea:b2:51:0f:79:61:4f:96:
16:15:28:5b:59:26:9d:2b:98:bd:ee:39:38:07:05:26:91:e9:
b9:e3:12:cb:4e:75:d6:a6:dc:c8:19:9b:5b:c4:6d:dd:95:59:
31:7b:c4:79:36:53:5d:3c:66:6a:e5:33:39:4c:ba:07:0a:a0:
cc:0a:98:a2:be:02:25:a9:6f:dd:7d:e2:cb:0a:ef:a6:51:31:
95:bc:cc:98:19:73:75:31:82:f0:c0:93:60:e0:95:10:7a:22:
92:41:57:7f:1a:ab:8e:c2:d1:f0:ad:06:d4:2a:70:fa:32:5a:
4d:cd:4f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:49 2026 by rpki-client