Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
File: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft (raw, json)
Hash identifier: AfzGlDJ/el1wNTi1HZCZJf2mm16uLCxrBqLIBwzz6V4=
Subject key identifier: 68:6B:E0:99:BD:B4:E4:7D:F8:13:94:90:AA:02:B2:7E:FC:99:61:58
Authority key identifier: 21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
Certificate issuer: /CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Certificate serial: 019CABA1D3AAD879A9C3212B9A14873F2D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
Manifest number: 0809
Signing time: Sun 01 Mar 2026 23:00:35 +0000
Manifest this update: Sun 01 Mar 2026 23:00:35 +0000
Manifest next update: Mon 02 Mar 2026 23:00:35 +0000
Files and hashes: 1: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl (hash: y22b3GSRHwN/+5le0MBFp/2HjCrFUutlPEfYU47LHjs=)
2: u4vgRPiGJN_uy7XS4Ei6ANq07Xk.roa (hash: B983HqaReMNEcqs8+hdzrl8wmUkdYz1ezJd1jwO+3yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d3:aa:d8:79:a9:c3:21:2b:9a:14:87:3f:2d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Validity
Not Before: Mar 1 23:00:35 2026 GMT
Not After : Mar 2 23:00:35 2026 GMT
Subject: CN=686be099bdb4e47df8139490aa02b27efc996158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:39:97:d9:21:86:d8:f7:4d:04:73:95:95:
c9:35:c4:e6:3f:ba:40:ff:90:7d:8c:6e:19:68:73:
9c:59:30:1e:f8:96:db:24:ac:49:40:59:74:88:67:
b7:cc:a4:fe:97:b9:1b:25:94:29:e1:7d:db:44:42:
95:67:54:28:b0:9c:06:01:d2:ef:d6:1e:85:93:5c:
b3:e9:c5:8e:11:28:c8:9a:cd:7e:98:7a:c9:ff:d4:
f2:b4:17:42:40:fd:1a:ee:12:cf:a3:db:cc:a7:d3:
d1:74:80:91:32:9f:44:84:2c:5f:98:1c:91:a6:72:
da:b3:d4:c1:19:f6:e1:3e:c0:c2:f8:ec:9c:84:d6:
ad:63:66:8b:ab:3a:dc:2d:e8:dd:7d:67:fb:c3:3b:
4c:07:2e:78:0b:12:64:b6:9f:f3:e6:e9:a6:7f:28:
2b:da:16:c0:cc:c1:3e:9b:16:e2:55:cf:85:46:81:
25:2d:37:71:72:ca:37:07:2a:df:f6:a3:55:04:b1:
a7:c6:a3:3b:b5:74:31:da:20:8e:b6:d7:03:06:de:
43:72:17:37:e0:e3:bc:79:69:5b:ab:8e:a9:cf:61:
1e:91:86:c9:ce:e2:2c:c8:9c:06:0f:60:a3:29:40:
39:6d:ab:15:ef:74:46:e8:df:ff:96:fa:3e:28:a7:
dc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6B:E0:99:BD:B4:E4:7D:F8:13:94:90:AA:02:B2:7E:FC:99:61:58
X509v3 Authority Key Identifier:
keyid:21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d5:3c:a9:49:40:c6:94:e3:ea:2c:88:12:9c:7f:fb:c4:ce:
58:ed:92:0d:24:bb:20:04:8a:7a:e2:15:36:16:b1:ee:d1:fa:
92:e6:29:85:b5:2b:b4:2a:9d:0a:d0:be:b1:22:6e:63:8d:35:
70:e9:7a:61:21:ca:2c:29:c6:c8:c3:f5:34:4f:a2:24:01:a1:
c8:d6:9e:97:07:fe:a4:40:29:42:c1:b0:50:55:8c:c2:b0:06:
0b:7e:8e:50:67:92:9f:08:48:7e:b5:f5:49:2d:f4:f2:f3:ad:
fc:cb:27:0b:a0:19:16:4f:76:dc:50:d2:f5:5a:cd:91:41:cd:
75:34:77:2a:ab:3b:cb:d1:82:8a:f8:ca:da:f0:bb:4d:a4:79:
7a:f0:ff:7d:0b:69:2b:18:bf:59:ff:af:75:c9:8c:c1:f4:06:
a7:2c:1d:76:5b:f0:b0:3b:f4:d4:c8:07:a7:f0:e5:4c:1c:8d:
21:b4:70:9a:f2:5b:5e:0b:5c:85:2e:84:4a:ce:09:64:dc:22:
4d:03:15:1a:75:2f:c0:1e:dc:26:1c:5b:78:c9:89:b2:be:ea:
34:02:9b:cb:61:5e:c6:59:ed:7e:8f:f6:e4:43:78:a4:54:3c:
96:a1:71:37:5e:86:65:2f:19:f9:69:11:37:76:18:fe:53:b3:
48:d3:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:54 2026 by rpki-client