Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
File: Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft (raw, json)
Hash identifier: /ALDA4g7vBLozBsTgEQwjzfLsZlJ2V3Ltn3W/Hsz3xM=
Subject key identifier: 84:9F:43:65:25:1D:79:15:2B:B2:33:81:59:CA:44:45:9E:AA:F7:59
Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
Certificate issuer: /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Certificate serial: 019CAA21B19A61FF171100CE9FE44B97EB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
Manifest number: 0ABD
Signing time: Sun 01 Mar 2026 16:01:00 +0000
Manifest this update: Sun 01 Mar 2026 16:01:00 +0000
Manifest next update: Mon 02 Mar 2026 16:01:00 +0000
Files and hashes: 1: Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl (hash: gKiF0tHQyWCJRNxDoC7i817uSfzh0Q2tx3GpSIPMav4=)
2: ZYcAG4aaKp4Pf1qOZOsOEwrDzjU.roa (hash: EqnSEDx6yPM3NTrcSmZ0dpmsneWx1xHj/kgiZXGmcS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:b1:9a:61:ff:17:11:00:ce:9f:e4:4b:97:eb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Validity
Not Before: Mar 1 16:01:00 2026 GMT
Not After : Mar 2 16:01:00 2026 GMT
Subject: CN=849f4365251d79152bb2338159ca44459eaaf759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:2e:3c:b9:28:8e:a1:30:a8:71:86:d2:32:
41:60:0f:8b:77:e3:a9:8a:8c:b1:a7:ba:c3:67:70:
8a:a2:6e:e5:03:06:70:2a:c9:63:83:31:1c:27:92:
5f:c9:7c:0f:31:6c:f2:37:01:27:4f:f1:3c:55:fc:
9e:15:36:3a:5f:1e:62:c4:ff:dc:7c:a3:a3:3a:15:
e9:08:1e:cd:81:2a:9b:02:32:d1:3e:18:be:48:30:
95:0a:43:0e:85:a0:ae:10:fb:c7:c4:75:91:82:93:
b6:fc:cc:95:fa:5d:e6:89:0c:e0:96:05:81:6f:6d:
69:e1:b3:07:8b:1f:80:be:6c:41:1d:63:ec:66:e6:
52:c1:4a:d8:69:71:63:08:b0:5e:28:62:cf:b1:14:
9b:e9:2b:57:7b:70:fe:fe:d9:51:5b:3c:ef:d8:a3:
5c:b4:7c:28:73:34:c8:0a:8b:97:39:73:2f:d2:ed:
58:81:4e:11:45:7a:9d:71:56:0e:20:f5:19:52:28:
0e:3e:f4:6f:f3:d9:1c:60:0a:76:b2:80:7d:c6:30:
09:32:3c:3e:13:49:4f:61:e8:1a:98:24:d5:3b:2e:
53:e4:8d:29:fd:43:94:b0:5e:98:80:c8:61:1b:52:
eb:36:ef:fd:6e:e4:af:00:e2:59:5b:11:3c:57:1e:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:43:65:25:1D:79:15:2B:B2:33:81:59:CA:44:45:9E:AA:F7:59
X509v3 Authority Key Identifier:
keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d4:66:d8:e1:70:d6:ad:59:65:a5:83:33:28:d7:ee:0a:a9:
91:42:89:9a:86:5d:16:48:c3:9a:4d:7c:68:35:c6:b4:8b:ed:
37:2a:2a:de:1a:e1:68:cf:d6:a2:2f:82:8a:e4:be:8e:9b:1e:
b0:ec:f6:ba:f0:24:5d:4d:fa:4f:6a:41:2d:d9:34:be:29:83:
0f:44:bf:8f:1c:15:fd:e7:df:68:57:8f:6c:0a:17:2b:8e:24:
5c:90:92:70:9f:a7:14:56:76:ed:dc:be:56:0f:22:d6:74:87:
23:b7:15:c5:09:46:f2:ca:d2:2e:1e:20:27:a5:82:b9:7d:df:
93:c4:8c:1e:24:a1:21:6f:8d:b9:7e:f5:cd:f4:fb:3c:34:e5:
8e:0f:b2:4c:e1:75:81:59:f8:23:9b:82:99:5b:5e:f2:98:6f:
1d:ee:ec:1a:1b:d5:87:df:5a:3c:13:03:28:62:97:5a:5e:b2:
ca:85:e9:38:26:7a:0d:6a:a7:5a:4b:bc:eb:44:89:e3:c5:c6:
fb:2d:35:b5:9e:b1:23:be:3a:c3:e3:e4:16:43:1f:cf:70:f9:
9f:57:ef:da:6a:58:df:4a:9e:7c:3e:3b:51:a8:9f:b3:be:cc:
0c:60:f7:f7:9e:24:f7:e5:ca:55:77:54:d9:9d:6c:74:86:79:
ad:00:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:33 2026 by rpki-client