Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: sznswrjBGU4blYeKmifGFgFv1Zyes4jxmqIWKDfTatE=
Subject key identifier: 84:B2:BC:4B:FF:49:EB:9C:37:31:4E:62:94:14:E1:F9:27:5A:E5:2F
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 019CAB6B566F8CEFC0610A4E505A4D8D0653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0A6A
Signing time: Sun 01 Mar 2026 22:01:04 +0000
Manifest this update: Sun 01 Mar 2026 22:01:04 +0000
Manifest next update: Mon 02 Mar 2026 22:01:04 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: gRkY7KjEQAvuwMRoyhd/rqVJzW68nk3buc2kT2lADIc=)
2: eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa (hash: G/mSpJ5ilGB6NcS3kOpxScz/226GTJNOO7cls8f2b0g=)
3: ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa (hash: RZTYOXGch0DUBzdLJFR6bBMusCngAipnQLe9rTFjcIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:56:6f:8c:ef:c0:61:0a:4e:50:5a:4d:8d:06:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Mar 1 22:01:04 2026 GMT
Not After : Mar 2 22:01:04 2026 GMT
Subject: CN=84b2bc4bff49eb9c37314e629414e1f9275ae52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:fe:e3:f8:e6:79:af:bd:a4:47:ff:00:60:
fa:4a:88:26:25:41:33:6d:49:15:28:01:79:22:ac:
1c:50:ac:72:cc:70:99:0d:69:d6:8a:b6:4d:54:3b:
b4:69:b1:b6:6a:6e:7f:6e:f9:54:ce:f6:00:13:a5:
12:59:4e:19:3e:61:60:e2:ec:d4:df:6f:1d:20:78:
7f:d6:67:ae:65:e1:0b:64:74:1b:b3:47:82:9f:99:
2e:b4:cb:d6:b9:5f:20:f7:fd:71:12:3a:fa:d6:50:
42:e1:8e:ea:7c:07:31:f9:c5:32:47:bc:73:8b:38:
c8:91:00:53:b5:73:5d:9e:b2:68:4e:93:1d:8a:9c:
d2:ba:f8:71:cc:2d:47:33:01:4c:a8:5f:c6:4a:a7:
27:a8:f9:94:2d:82:9e:d0:b8:30:1c:f6:2c:56:23:
4c:3c:89:a5:9f:4a:d3:68:b5:6b:a4:27:e8:4b:9b:
c3:1a:2d:f3:7b:49:c4:f4:4f:27:2e:3e:cb:f5:28:
09:7f:55:c1:c6:68:bf:85:50:67:0a:50:4f:72:76:
23:34:10:10:2a:11:78:dd:16:c7:25:db:79:b7:fe:
b5:b7:66:c4:17:f6:9e:32:bc:3e:bc:1c:2e:1c:e8:
60:79:6d:0e:34:0c:47:5c:27:88:55:6b:24:9f:50:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B2:BC:4B:FF:49:EB:9C:37:31:4E:62:94:14:E1:F9:27:5A:E5:2F
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:01:91:1d:10:58:02:b3:d0:6c:f3:e9:78:7b:48:86:68:ca:
55:2b:87:a2:67:25:d1:4d:14:f1:30:39:05:73:48:72:51:7d:
17:36:b7:7e:3c:e8:8b:59:19:c6:56:be:69:9b:64:62:8d:23:
d7:43:b1:05:11:d9:05:91:9c:89:33:8c:d1:d4:98:67:73:75:
18:c2:c5:6d:e5:cc:79:2b:23:be:23:f3:6a:b1:3a:52:35:b0:
18:16:bd:cc:be:b2:0d:de:51:99:d8:41:b3:e3:93:b6:4f:c2:
45:d0:5d:fe:a6:94:00:97:4c:ae:41:ea:b6:60:70:6b:2b:2f:
9c:c4:37:91:7c:51:7a:4c:df:de:62:64:e0:ca:c7:7d:46:d5:
43:ed:fb:bc:eb:e9:ab:a4:42:be:27:f7:f5:67:69:44:32:c9:
0a:dd:3e:6e:cd:a1:67:df:32:2d:e1:7f:c0:e6:e7:d8:25:b8:
ef:d9:fa:01:b7:b9:57:fc:8f:42:28:c3:f1:cb:97:25:ab:5d:
a5:6e:7d:6c:72:e5:f7:2d:3b:32:1c:02:03:6e:d6:91:8e:fd:
ce:bf:23:db:dd:c4:cd:10:b1:54:eb:2d:8e:a9:12:72:d8:ad:
01:26:e6:9e:75:f2:96:57:d0:23:14:cf:64:40:df:c1:07:63:
17:fc:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:35 2026 by rpki-client