Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
File: d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft (raw, json)
Hash identifier: U/hMVhmwniAnWCS/4xpn40BFyRO+UIYQCSN7IkYo3MA=
Subject key identifier: 92:C1:B6:82:7A:2A:39:6F:6A:8E:9E:64:A3:B2:9B:06:7A:FE:19:1C
Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F
Certificate issuer: /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
Certificate serial: 019CAAFD1967E19BF109B56D620BFF9C1033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl (hash: WN8fsaz12cpIGRGkctaN/jdLg+B01k3iSgrxsWLGxNY=)
2: iU6hqxAQY7_aR8pSYH7dfZ4of_w.roa (hash: /BCTySyoy/2YrKj9N1WqdMwnqTnHMCBKNLE8+BsWToo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:19:67:e1:9b:f1:09:b5:6d:62:0b:ff:9c:10:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=92c1b6827a2a396f6a8e9e64a3b29b067afe191c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:21:74:30:6a:0a:d1:e6:2a:cc:2b:da:d9:
4f:dc:26:4f:29:c2:81:9d:7f:29:29:4b:fb:34:24:
3c:ae:21:1d:a6:b8:a4:35:76:0a:e9:1d:89:25:15:
cb:ae:d7:f2:8c:a9:9b:38:d8:eb:01:17:5b:25:bd:
85:b7:2a:6b:89:39:67:e0:9a:07:47:44:db:4d:d3:
34:ba:ee:13:ce:74:db:68:49:54:8b:9e:a9:20:12:
49:54:03:bb:8c:36:ea:da:84:cf:19:1f:a8:ae:01:
d4:f0:cc:05:72:77:44:11:85:dc:cc:2b:b5:6b:f9:
40:39:f9:b6:bb:85:42:f1:94:aa:2b:c0:12:09:ff:
6e:75:37:af:32:84:36:22:da:6d:a9:70:dc:21:a0:
f1:29:1f:0b:46:37:13:ed:82:e4:24:21:bb:4d:db:
1f:b4:93:5b:e5:12:6a:72:83:81:c0:48:5c:ca:26:
b6:c3:44:71:7b:3e:ac:eb:16:20:4a:50:9a:88:2a:
d9:c1:a9:da:59:c7:e4:f1:e2:c1:42:1a:28:82:b2:
4a:1c:e4:3a:ca:1e:be:bf:40:a6:4a:59:1f:e7:89:
45:41:32:04:c0:b6:cc:91:57:c7:b1:b0:58:f5:54:
fb:7d:f9:0f:07:07:9b:5d:90:99:cd:69:ce:0e:64:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C1:B6:82:7A:2A:39:6F:6A:8E:9E:64:A3:B2:9B:06:7A:FE:19:1C
X509v3 Authority Key Identifier:
keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:32:78:b6:6a:c3:e0:9e:c4:64:2f:fd:83:bf:40:19:07:38:
d9:90:68:b8:da:f7:f8:35:4e:48:28:c4:a5:4d:bb:ad:ae:60:
ed:d7:9d:c0:ae:c6:16:45:a3:9d:c3:e4:27:46:8e:8b:20:42:
c1:9c:d8:d7:e6:90:ab:56:06:fe:f9:a7:42:46:42:8a:cc:8b:
ac:ff:86:a8:ef:e3:0f:ec:1c:12:5d:a4:6e:de:cc:9b:b5:7b:
a6:1f:06:ac:13:8c:ea:21:77:99:90:4b:25:96:5e:9c:92:3a:
21:99:ad:91:34:7c:85:5f:6b:62:95:a0:24:c9:0d:67:19:26:
68:74:89:37:02:45:23:4f:69:78:37:25:ed:04:07:c6:48:b6:
4b:31:43:8f:ad:f9:88:ae:76:01:92:45:7e:39:41:df:02:70:
b3:a1:9a:fd:15:a8:da:c7:bd:f0:63:6a:17:2b:ff:cd:45:cd:
4a:ec:6b:92:69:a8:e7:d9:37:4f:6b:f8:8c:79:f6:fd:19:1f:
93:ce:ad:83:7d:f6:cf:4e:87:2a:7c:ad:8f:31:35:70:c2:15:
a1:1d:4e:81:45:b6:f6:1e:03:f6:ca:3c:30:a4:e3:c5:66:61:
74:54:b4:91:d0:05:9d:65:d1:ae:5c:cb:46:97:bd:1d:2a:46:
64:55:42:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:46 2026 by rpki-client