Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: EUh2LMRjV8KzBIgPmaAGiUnS9GCCi10qOK0s2wgqbZ8=
Subject key identifier: 83:70:C0:D4:57:5F:81:80:1E:CF:CE:1D:85:18:7E:D1:13:E6:D0:2D
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 019CAAC620E6563959DF749B569223E134E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: ZdwFzV6XY5h/kZEhWxALTVoVXS+N2VwF88AeappjbPc=)
2: L3FElQgN_OK9ME85XjkPB5d4njo.roa (hash: 7fKQw9/kLDh7zT4p1MB3dQg/LI4nczVMbuMgYO277J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:20:e6:56:39:59:df:74:9b:56:92:23:e1:34:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=8370c0d4575f81801ecfce1d85187ed113e6d02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:c5:2f:e5:c3:8e:d3:fd:9b:33:94:d5:15:
d6:57:a1:04:a9:f7:a7:b6:97:3e:68:8a:a2:9d:03:
c8:f0:0c:7b:67:f5:4a:12:cf:74:06:fc:75:71:2d:
d7:26:d7:63:3c:5f:3f:83:55:3e:c4:8b:22:a4:2f:
89:7a:5b:9c:a4:c5:69:f0:5e:53:87:54:1e:f8:58:
56:6e:6c:16:62:a0:64:82:f9:fb:39:c8:05:27:75:
cf:12:41:00:5d:87:58:d8:1a:de:6a:d0:44:f0:13:
0f:87:b1:47:1c:58:36:2f:84:19:0d:31:44:05:10:
b5:28:21:17:6d:c1:34:f5:dc:03:a4:f5:43:9d:f4:
cc:0c:b4:e0:7b:88:8d:c0:ec:0e:66:88:5c:5e:22:
2a:30:9c:f5:d4:97:62:1b:90:2f:7c:5d:ba:93:71:
80:6c:9e:69:eb:ee:a0:f8:76:91:bb:e8:da:97:47:
5f:59:d9:d7:ac:cf:39:e9:3e:18:4e:94:c1:b2:f3:
05:79:33:f9:77:5c:fb:8d:52:f6:78:b6:ae:99:61:
c4:9d:4b:ef:83:62:05:bd:eb:93:fd:e1:17:6a:7f:
a8:56:19:f4:45:0c:69:92:44:9a:98:5e:67:e7:fa:
d8:e8:20:d0:ea:6f:aa:25:d8:86:92:0d:bb:e6:50:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:70:C0:D4:57:5F:81:80:1E:CF:CE:1D:85:18:7E:D1:13:E6:D0:2D
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ab:6c:35:b4:64:0f:26:f4:c0:f2:33:f0:b7:b3:93:f8:1f:
05:41:ef:03:3c:22:05:48:9d:91:b6:83:75:9c:d8:08:12:81:
50:33:db:94:35:0b:e7:07:2b:75:59:28:ac:ec:1b:d8:5b:70:
72:f8:5d:7e:12:c3:51:0f:d2:5e:8a:18:93:84:1c:f3:7a:67:
75:c1:a3:0d:59:6b:67:6f:6b:bd:04:0c:ee:62:7f:07:e5:13:
ff:c5:d2:9f:fc:02:64:e7:59:22:b8:1e:7f:39:dd:51:ce:d7:
7c:95:16:7f:c0:36:1a:b5:56:e7:8f:8a:c4:a2:b7:8d:a3:f2:
59:f8:8c:88:24:e7:fe:c0:12:74:d6:7a:54:5c:9f:48:c5:27:
02:cd:4e:b5:0e:8f:84:77:b2:cd:51:6c:a7:1d:ea:ea:d6:cd:
57:30:e5:6c:2f:49:79:4c:15:5b:f9:df:36:59:33:d9:1a:c6:
be:d0:25:ea:e7:76:68:e0:58:98:31:cc:2d:ed:85:66:1b:c1:
ff:8d:b2:90:6a:41:a4:b5:30:ec:6e:f7:3e:66:34:cf:e5:0b:
d7:d8:61:b6:4e:f4:19:ec:7a:ce:ce:08:a5:cd:77:55:27:87:
af:0b:c2:fb:07:11:d1:49:5e:96:08:63:c6:79:1f:df:a1:3e:
1b:59:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:39 2026 by rpki-client