Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier: ENgU/62yH3W39Ai4h3YBIYKhg1ulpO2X9C6Agnv7SWA=
Subject key identifier: 3D:0F:37:C7:85:0B:EE:9D:AA:2C:E6:51:82:71:14:3F:7D:02:70:EA
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer: /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial: 019CAD224A09683452B8337DB8467F16D8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number: 139C
Signing time: Mon 02 Mar 2026 06:00:31 +0000
Manifest this update: Mon 02 Mar 2026 06:00:31 +0000
Manifest next update: Tue 03 Mar 2026 06:00:31 +0000
Files and hashes: 1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: MrkptHH23zDcJxP/mS35uBJ53TEIfAqFz9Cyr1N2Dx0=)
2: F5y9ZOsLF94osiTAvUu_ZpYquTw.roa (hash: XwqPFonWgi2NEgeq0iK4xwmr9JNoIB6OncnPE0wX2yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:4a:09:68:34:52:b8:33:7d:b8:46:7f:16:d8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Validity
Not Before: Mar 2 06:00:31 2026 GMT
Not After : Mar 3 06:00:31 2026 GMT
Subject: CN=3d0f37c7850bee9daa2ce6518271143f7d0270ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:48:3c:36:b8:59:78:38:46:cb:74:a0:55:
5d:6d:12:d5:6b:da:57:a0:7d:ed:c0:ad:47:35:86:
a9:03:ae:23:75:88:22:91:25:94:6a:6c:eb:80:c5:
e4:1b:8e:65:50:53:80:c9:26:bd:bd:68:a0:8d:93:
28:50:6f:9f:9f:42:07:ac:c9:86:8c:ef:8b:89:25:
bd:e6:05:da:10:51:c3:18:38:b3:93:f7:48:5f:48:
d4:f2:79:a3:8f:cc:64:d4:0f:7a:36:49:5b:64:90:
63:af:4d:78:bf:f5:0e:eb:3b:da:09:08:23:55:dd:
9c:bd:a8:6f:6f:7b:e5:71:97:b1:8f:a6:f6:d5:c3:
3d:0b:1b:73:a5:d9:c7:b7:d9:cc:c9:23:54:d6:84:
f9:3d:1c:d3:17:eb:e1:26:44:d6:18:f2:b7:06:27:
99:56:03:d8:48:11:b1:3f:91:78:58:04:d9:4d:e3:
0a:e8:20:57:c3:9c:e8:e7:78:28:cf:43:85:81:d4:
e4:da:08:f4:c8:21:36:92:da:e2:70:24:4f:b4:2f:
c1:15:ec:e9:00:61:33:c4:1f:ca:4d:a6:b4:40:ce:
a9:ce:f1:51:5a:38:a4:51:dd:1b:58:6a:c7:f4:29:
f9:83:b9:e1:83:cf:e4:ad:10:56:b3:f2:48:c2:9c:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0F:37:C7:85:0B:EE:9D:AA:2C:E6:51:82:71:14:3F:7D:02:70:EA
X509v3 Authority Key Identifier:
keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fd:99:66:3a:58:c0:40:21:4f:17:97:58:a1:72:08:8a:24:
15:6c:eb:88:34:3e:c1:99:2c:be:30:e5:bd:29:64:d0:e8:51:
d3:aa:94:83:44:eb:50:3f:44:c1:e3:c6:aa:fe:4e:b3:c7:2c:
9f:75:9b:05:86:de:d7:ac:43:a7:41:41:5f:06:14:60:f9:b9:
97:6a:23:4c:4d:57:85:64:d7:9d:e5:0e:9c:a7:7d:11:7f:e8:
71:14:3a:1f:32:51:d0:29:eb:9d:01:56:05:0a:83:ba:8a:2b:
c9:2f:95:81:cf:f3:bb:36:f3:93:c3:de:3d:d9:bf:27:9b:1b:
6e:fe:b2:fe:85:f1:95:1c:bd:51:8b:49:20:da:13:03:77:2b:
a2:a3:37:de:93:4f:5d:45:0e:f3:a4:5b:13:ec:96:ad:dd:95:
91:00:6c:08:a0:0a:37:c9:8a:10:21:5a:c6:9b:46:b1:eb:f1:
5a:bd:7a:1f:be:b1:31:dd:3f:be:53:85:60:4b:a4:bb:cf:d7:
2c:3b:9b:99:45:e2:51:36:d1:12:f3:b1:87:49:11:68:f9:c2:
99:af:d2:38:2b:66:55:e1:12:6b:bf:ab:59:59:42:6c:42:11:
9d:d2:26:14:7a:89:3e:5a:4b:01:8e:ce:03:b2:2e:8e:9d:fc:
26:a1:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:17 2026 by rpki-client