Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
File: 9a2pAdQIv39blDWSHkgAqPgtvas.mft (raw, json)
Hash identifier: m1FvCOTccGsl8abZqKbvh8hKz4CBsB3kA/8NbDZkOCg=
Subject key identifier: 0D:2C:53:E1:68:12:4F:C6:31:79:76:C7:37:ED:A0:B6:16:19:F8:47
Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
Certificate issuer: /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Certificate serial: 019CACB4614517A666A1FC069FACDE834A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 04:00:28 +0000
Manifest this update: Mon 02 Mar 2026 04:00:28 +0000
Manifest next update: Tue 03 Mar 2026 04:00:28 +0000
Files and hashes: 1: 9a2pAdQIv39blDWSHkgAqPgtvas.crl (hash: 3MHObLlmBbEKI1/Bi7NQSNAj0HJm6+B1eRv+stzAmE0=)
2: J6H8JSFuxVzFOSwqeVn8vTsfdVE.roa (hash: vYs9Iafl6ODvzqSPTNj74leQVCe3/0UGQl7TxkQZF/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:61:45:17:a6:66:a1:fc:06:9f:ac:de:83:4a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Validity
Not Before: Mar 2 04:00:28 2026 GMT
Not After : Mar 3 04:00:28 2026 GMT
Subject: CN=0d2c53e168124fc6317976c737eda0b61619f847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:24:28:bc:aa:e0:a1:e8:53:a0:b8:03:c4:
f0:80:36:89:ef:6d:09:54:4e:b2:bc:0f:98:74:98:
f2:f3:ce:d2:4e:b5:af:7b:17:9a:42:77:de:3b:a5:
92:85:c4:15:c0:72:33:ba:9d:6c:6c:58:7e:bd:e5:
c7:61:7f:11:60:ea:31:16:98:fd:2d:6a:60:30:e4:
2a:4e:77:91:c8:79:83:89:a9:f2:77:92:d7:f1:4c:
70:c4:17:ef:4e:01:41:70:95:ee:d6:a4:32:07:c5:
01:b5:09:ad:e4:94:63:dd:71:8f:49:00:be:24:6b:
5e:7b:1d:4d:19:fc:95:0f:d3:a9:d7:cd:9b:1f:e5:
a7:3e:02:45:33:0e:17:01:50:07:bd:dc:e3:0e:4e:
e7:f3:28:39:c7:d0:1c:78:9b:5b:fe:fe:3a:a5:40:
16:a1:cb:d4:fa:32:a5:5a:8a:87:94:c2:79:3e:37:
ab:ce:02:51:59:f4:94:b1:0d:b4:40:3f:05:9a:4a:
95:21:e0:62:e7:3a:c1:62:80:29:03:c8:dd:b0:4b:
f7:51:be:ca:f1:b4:e1:df:b3:4f:dd:ce:66:09:7c:
78:75:20:ac:88:12:ab:b2:ce:fe:6a:67:8c:c9:16:
f2:55:91:f6:7c:9f:e9:66:f1:10:11:31:00:61:20:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2C:53:E1:68:12:4F:C6:31:79:76:C7:37:ED:A0:B6:16:19:F8:47
X509v3 Authority Key Identifier:
keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2a:ff:e1:8a:23:bb:6c:fd:01:ef:42:dd:96:d5:0b:04:50:
9d:b0:29:44:ca:ad:af:3d:d9:0d:9b:ba:af:e2:70:e5:ae:10:
fe:61:58:d4:9d:37:79:56:4c:11:06:e4:ea:53:f6:fa:d3:39:
e4:fa:a5:3f:93:8d:1e:5a:99:da:a8:27:ad:69:14:fc:3a:ae:
cf:bb:98:09:ad:d7:d1:9c:8d:11:87:cb:38:fd:24:d1:0d:18:
9e:d4:8e:74:ef:e5:83:25:b0:db:e3:a9:83:b1:b9:f3:0f:01:
3f:a6:c0:a2:cf:64:6a:af:c0:d8:4a:6d:7b:60:cf:b7:86:5a:
86:fa:18:9d:e6:bb:cb:3d:7a:f1:27:84:7a:83:e8:c3:a2:f5:
38:85:02:3b:0d:de:df:84:0a:72:6f:1b:0b:66:81:d2:57:87:
75:f3:c7:69:55:61:60:04:5e:12:a4:de:ae:6a:53:0f:e4:b7:
aa:31:18:3e:b7:d3:41:0a:8d:93:be:c3:dd:b3:56:c6:4e:d4:
09:de:1c:53:3a:27:3d:93:9e:7a:b2:6d:bb:16:ef:54:f8:cc:
56:d2:77:09:5c:53:ca:34:89:76:b9:73:15:ef:22:3f:8c:cc:
67:65:ec:c2:be:2e:29:f3:0d:f2:c8:1a:99:77:7d:be:88:3a:
61:49:ab:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:34 2026 by rpki-client