Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier: D7GPLgwoB3jecQCcDSUpWYI1/coBuMzxNQrrZm2gXdY=
Subject key identifier: 57:BA:02:21:ED:F3:C5:12:71:6B:5B:61:B7:99:A7:78:81:CA:CE:B7
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 019CAAC6B8790AFF3E0BCB67DA0BE996EE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number: 0D63
Signing time: Sun 01 Mar 2026 19:01:15 +0000
Manifest this update: Sun 01 Mar 2026 19:01:15 +0000
Manifest next update: Mon 02 Mar 2026 19:01:15 +0000
Files and hashes: 1: 5FdT73JkLCgHgzugWWXpOCrhVgc.roa (hash: oluoiDxtzFoApZrsUB2VZK/Twzibw5WYce0WItyA/mY=)
2: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: itoMyur6Tyjc2uBC20S/kONv6vbf5dx8sfLOe/It3Hs=)
3: gFVBldPsPJ9_Z3436EbOexrFKyQ.roa (hash: XpNUD5CKdNtgQ6f8YKYlS0lGIc67007/Bg5jHv80Qgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b8:79:0a:ff:3e:0b:cb:67:da:0b:e9:96:ee:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Mar 1 19:01:15 2026 GMT
Not After : Mar 2 19:01:15 2026 GMT
Subject: CN=57ba0221edf3c512716b5b61b799a77881caceb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:75:4f:08:31:18:21:55:e0:6b:c7:2b:be:
5b:e8:6d:84:1b:b3:30:2b:4f:34:a8:e2:b0:dd:46:
93:e9:f8:11:c3:68:21:0b:41:ab:9f:f6:78:00:53:
1c:70:f7:bc:1d:dd:93:2f:02:fc:ab:e4:ff:6a:08:
5c:f9:d7:1c:c3:5a:84:87:42:2d:de:95:9f:0b:41:
90:a4:29:c9:0b:79:af:cc:62:43:6a:8d:47:3e:27:
f3:02:70:9a:95:a1:16:3f:6d:ba:e4:7f:ef:a4:ea:
bc:a8:15:4f:2e:1a:7d:a4:19:6b:8c:f4:1e:08:1a:
31:73:a2:15:60:e3:08:41:43:50:5b:c7:0c:31:85:
6c:59:1b:b1:60:90:7f:8f:ff:a4:e8:4f:80:6f:a1:
f1:25:96:0c:8b:a5:84:ea:73:21:2a:0b:d0:8a:49:
21:43:9a:43:f8:99:41:b1:28:53:b6:37:70:9d:e8:
be:91:27:8b:30:f5:ce:a8:4b:95:44:28:e3:81:ec:
be:4b:5f:57:2b:07:89:53:fd:93:02:04:fc:1a:ae:
b9:bd:99:72:97:fc:0b:ce:0f:55:e9:ec:11:34:f3:
6a:79:d5:59:f2:c6:8f:d4:76:cf:50:66:70:ab:e6:
77:1b:8e:46:9e:56:10:87:9d:92:23:cf:60:87:d0:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BA:02:21:ED:F3:C5:12:71:6B:5B:61:B7:99:A7:78:81:CA:CE:B7
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:58:08:46:58:4f:d7:ed:32:cd:a9:c4:ba:31:d4:95:6f:d6:
51:49:81:d4:b9:82:d9:7b:ba:87:e1:72:f4:66:5b:79:d3:b3:
f2:48:2a:c2:25:ce:dd:4e:c1:e2:7e:24:2a:dc:2b:f5:5b:ee:
11:d3:eb:3f:52:b3:a0:68:7e:1f:f8:f4:78:1e:a9:84:28:b9:
64:5a:4c:3c:ed:9f:0f:a8:63:71:d6:88:00:1a:a8:fd:65:28:
68:b8:ea:6a:83:63:f3:f6:dc:73:fa:6e:be:fe:df:08:01:89:
22:62:3f:29:49:ec:b0:38:41:44:34:8c:d9:17:0b:b9:7e:b4:
98:2a:13:c8:df:7a:22:a8:be:b8:ab:79:18:41:72:fb:60:bb:
bd:f5:7b:7f:7d:c4:59:7c:fe:b8:63:e1:55:14:b4:88:02:86:
03:bb:cf:95:fe:26:8d:71:5a:f7:af:a1:96:c1:99:f2:9a:63:
e3:15:ef:1e:bd:38:17:6f:67:ab:8a:ec:f4:ee:5a:09:1f:26:
d2:da:17:7b:d3:fe:cb:f3:d0:44:e6:c4:ed:ca:9f:f3:f0:34:
5d:c8:d9:4c:13:ce:f2:c3:67:97:a1:3c:8f:07:da:39:9e:7a:
31:4b:ae:9c:be:97:dd:ca:1b:77:6f:9d:cb:34:b8:44:0d:09:
cf:b1:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:21 2026 by rpki-client