Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier: OZst4TMD/khq/LNOKXdrMQrAb0GDM+2VCOadxWmvhGE=
Subject key identifier: CF:61:80:B1:6D:43:EC:BB:4E:19:D1:FB:02:76:FB:9C:D7:66:C8:64
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial: 019CA9457B8FCBB433DBEAB96DBF36C02888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number: 0816
Signing time: Sun 01 Mar 2026 12:00:28 +0000
Manifest this update: Sun 01 Mar 2026 12:00:28 +0000
Manifest next update: Mon 02 Mar 2026 12:00:28 +0000
Files and hashes: 1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: aeb26a6z10wdCfeF9HqIxaY3xuroOlOtcEWy3v+WnJY=)
2: PBFghIae2xwjHfVkKp2B7TGOs9U.roa (hash: 6sEYt1wV5te4lrcRseI0CvT+vo353HmkjymuLozkj+U=)
3: tKmmsRGg9YbOwZD0WDnzLRT91zI.roa (hash: 1BiDxW73ZmhEDeC+jXIfDWgmKydIlt1YsSH4cXEQpzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:7b:8f:cb:b4:33:db:ea:b9:6d:bf:36:c0:28:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Validity
Not Before: Mar 1 12:00:28 2026 GMT
Not After : Mar 2 12:00:28 2026 GMT
Subject: CN=cf6180b16d43ecbb4e19d1fb0276fb9cd766c864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:fa:20:5c:8a:bd:11:48:ed:e9:dd:46:8d:
4d:5b:bf:8c:87:67:b7:b3:b5:87:c1:d8:07:67:5c:
3e:70:18:db:70:80:b6:53:c6:62:e9:6b:55:d9:1e:
27:e8:25:42:df:5b:fe:a7:f1:c5:12:00:29:d9:1c:
ad:19:9d:e0:7e:22:7f:76:ee:22:47:b7:13:de:de:
f7:38:4d:aa:a6:f4:58:f2:e9:e0:33:6f:18:68:41:
c7:55:07:3f:97:75:71:6a:6b:59:da:52:c1:0c:22:
e6:99:f4:8b:5c:d7:4a:6a:2a:92:bd:c0:11:eb:95:
a2:e5:74:b7:3f:6a:67:dc:13:a2:be:8e:e2:5b:ca:
f2:c2:0e:0a:4b:7d:e8:01:b7:44:60:c8:f8:94:21:
0e:40:de:a3:3d:1c:1a:24:67:d5:81:98:83:7b:62:
a4:a0:05:f4:9e:f2:da:2a:f1:fd:5f:f9:13:59:15:
50:e6:14:af:78:6e:45:25:55:d1:c9:82:19:12:4d:
ab:d7:79:82:07:03:90:65:ee:93:a8:b9:22:44:6b:
0d:45:3c:4e:ea:2c:38:05:7f:6b:89:f3:59:00:95:
df:24:21:03:6d:82:2f:e4:2a:b7:e9:cd:aa:0e:e7:
bb:d2:51:e8:61:91:c4:66:9c:4a:ae:70:24:12:04:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:61:80:B1:6D:43:EC:BB:4E:19:D1:FB:02:76:FB:9C:D7:66:C8:64
X509v3 Authority Key Identifier:
keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:be:9d:bc:77:9e:ad:46:c3:51:67:e9:46:ff:3b:3f:f4:e2:
de:b6:45:02:d2:4a:df:b5:7c:44:ea:a9:3e:aa:f2:51:4a:56:
cf:ba:85:33:2f:f9:df:92:39:e6:c6:ee:63:78:47:5f:d7:6f:
1c:5c:86:59:73:d5:5a:54:81:28:64:4b:d8:be:91:7a:43:df:
b3:fc:00:d0:55:7f:27:b6:db:ce:bb:fe:c1:81:7b:d9:68:51:
94:17:e2:9a:86:89:ec:e3:e6:e1:69:3f:24:88:a6:f4:ef:a1:
54:e1:27:2f:7b:56:e8:a8:d5:bc:c0:00:b6:42:6c:93:af:95:
41:32:29:03:7b:14:a3:b1:a4:5d:db:7f:52:42:0a:4a:04:0e:
42:f1:e1:65:67:29:7d:7f:84:20:7a:4b:75:e6:53:ab:92:9a:
27:16:7e:93:06:de:29:1a:d0:82:3b:a3:53:df:0d:2e:ec:da:
6a:79:a8:05:34:12:cd:f9:3b:65:40:09:49:b4:32:2c:2f:90:
3d:ae:5a:56:c6:fe:9b:d4:cd:80:bc:35:cf:0c:33:f4:79:ad:
2a:2e:fb:a6:9d:45:8c:80:39:50:e7:29:0b:bf:e9:39:7a:0a:
cf:82:49:33:e8:89:a3:41:e7:bc:dc:94:22:07:a2:33:0b:34:
fb:92:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:54 2026 by rpki-client