Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: BfR/ANGUr55rJBQ0sbnOkvdvPVJLP5xfBMyINRUQjMA=
Subject key identifier: B8:25:77:7E:63:0D:C9:E3:AD:2F:5A:BD:E1:21:40:45:61:D0:55:69
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 019CAC477ADCA90957F5B8C35DA947D7A9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 02:01:31 +0000
Manifest this update: Mon 02 Mar 2026 02:01:31 +0000
Manifest next update: Tue 03 Mar 2026 02:01:31 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: UFF6ZzuyxD8F8sN3Pey+aMNfOQ7MnwaN83FbG+b1D3c=)
2: HZePOmsjkPsg7dlktNrDrbvkEoQ.roa (hash: EMtZKX87wa385GEwMyBcWWCzgkUjroenf3wknZ0qOr8=)
3: feUrijd_KveyJ7eNJ1rBQYy4hhQ.roa (hash: 8ChsNr7pTk9JhrykIfRkpxl+JlzU+6lvsFJu1WkZIeY=)
4: jbQbuOumCNgoddvSeNQ0EqiLIvk.roa (hash: r2PNx4QtBVQh/b8nKhzHQVcKqAGoHRGsycMInrQsQyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:7a:dc:a9:09:57:f5:b8:c3:5d:a9:47:d7:a9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Mar 2 02:01:31 2026 GMT
Not After : Mar 3 02:01:31 2026 GMT
Subject: CN=b825777e630dc9e3ad2f5abde121404561d05569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c6:85:e2:51:b8:78:9f:9e:19:98:27:71:99:
af:ca:c8:9f:23:cf:1a:da:a7:84:f5:02:bf:43:ef:
db:07:77:51:7d:16:f2:df:66:2c:d0:75:2d:20:e6:
16:6f:e9:cf:0d:90:1a:94:f1:77:3a:69:7f:58:dd:
e7:5f:64:a2:05:70:00:67:5b:e6:30:e6:2c:f3:01:
d4:5b:1a:80:7e:9d:e9:63:e8:21:c3:d0:0e:e1:ec:
ae:9d:3f:97:77:3d:dc:05:18:80:7a:66:6d:47:73:
2e:0b:6a:69:81:f6:24:b4:34:80:32:da:b8:e4:db:
ea:aa:7a:e8:7c:e7:83:60:1b:d5:e7:7a:5b:40:a4:
c5:7c:59:64:6f:44:6c:7f:48:d9:7f:53:05:c9:e3:
2f:32:ac:3f:34:8b:7c:e1:5a:69:e4:9a:ab:b9:8b:
73:34:d6:94:1d:f8:8b:29:c0:23:aa:69:3e:d8:71:
2a:0f:8c:59:0d:a2:8e:4b:b3:f1:42:84:40:77:35:
02:01:85:f0:eb:28:19:a0:d7:0e:18:e2:dd:b2:c5:
14:89:06:f7:cd:6b:01:9a:50:5a:0a:ef:4d:f1:42:
f0:0b:c7:45:8d:6c:97:31:49:95:73:f8:b4:00:a7:
96:a1:98:79:22:5c:90:0f:db:65:02:9e:5d:25:68:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:77:7E:63:0D:C9:E3:AD:2F:5A:BD:E1:21:40:45:61:D0:55:69
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:02:eb:82:b5:45:07:36:ad:76:a5:8e:48:6e:35:ed:01:8b:
54:80:68:f2:7d:c5:9f:be:ea:69:1f:23:1e:7c:c0:f1:82:47:
38:f5:45:15:d6:cb:b3:bf:5e:2e:26:d9:48:f1:a9:3f:36:aa:
4c:b0:fe:b0:a4:0d:c0:7a:f2:e3:02:f6:41:bc:13:2b:c8:3d:
93:42:92:ad:a9:49:17:fe:39:7e:20:fa:95:6a:98:d6:00:ee:
6f:30:8f:b8:36:f6:76:bf:96:f9:2a:ca:a6:87:35:f5:e8:6f:
06:f4:1b:40:f8:68:a7:34:0b:df:44:fb:b6:32:51:77:71:06:
3b:00:52:2e:35:a8:a4:d7:12:98:ab:c0:6e:22:86:7a:2a:d1:
4f:af:d5:c9:aa:8c:43:94:0f:4a:cc:6b:5d:43:9d:7b:45:2f:
24:5c:6e:cf:8b:3c:e6:76:bc:37:46:0c:fc:d9:98:8a:35:57:
89:7d:28:9e:43:14:80:30:8c:27:1b:da:85:35:6d:65:3f:90:
0d:b4:42:b2:05:89:82:ad:db:1a:2a:b1:4a:95:8b:e8:45:4d:
6f:07:80:72:99:f3:15:83:dc:57:71:47:dd:ae:12:49:e5:1b:
0f:66:ca:62:23:76:b4:7c:29:2e:bb:64:b8:c9:ee:a6:00:a0:
f6:d6:c5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:44 2026 by rpki-client