Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: MKdScICZautC/D0k/IS79AlhEmxv5ROIM/edO9nn9Wc=
Subject key identifier: BF:B6:83:4B:DB:DB:E9:00:5D:A2:8E:C3:E1:4A:65:73:E8:17:38:00
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 019CAA58E0600EF9B14C1105399188398E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:17 +0000
Manifest this update: Sun 01 Mar 2026 17:01:17 +0000
Manifest next update: Mon 02 Mar 2026 17:01:17 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: pPF9k/Maax/4sZy3AdWJbQ4nrayshT4jEoT0OSglDd0=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e0:60:0e:f9:b1:4c:11:05:39:91:88:39:8e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Mar 1 17:01:17 2026 GMT
Not After : Mar 2 17:01:17 2026 GMT
Subject: CN=bfb6834bdbdbe9005da28ec3e14a6573e8173800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:05:e8:80:29:1e:47:03:11:de:b7:00:a7:d4:
06:57:04:14:fb:0e:c3:20:79:92:62:5d:8b:18:0c:
8d:cb:9f:52:1c:b4:c1:c6:c7:81:77:b4:27:f1:d8:
e0:a2:ac:fb:4c:59:d2:b2:5b:77:a2:7a:a1:37:0a:
1d:9d:a5:97:91:7d:68:d4:2a:c5:b5:26:37:ef:bb:
31:43:37:a2:47:e4:da:cc:54:31:98:aa:64:6e:06:
fa:af:19:ab:3a:15:5a:f3:1a:ab:e7:e2:22:f3:4a:
05:28:7b:42:6f:63:7b:9a:5e:c8:c1:35:a8:64:f0:
16:cd:a1:a4:72:35:1e:58:d6:5f:8f:03:43:49:59:
a1:23:3a:80:61:a8:63:45:01:b6:84:5d:56:00:9e:
5d:e9:16:ce:85:b1:cb:f7:83:d2:3b:72:46:44:04:
74:02:4f:95:b0:e7:c0:3f:e1:c4:83:6e:49:f9:a1:
01:a9:82:31:98:b2:9a:95:7d:f6:df:a7:83:ae:19:
14:92:00:47:14:b6:e9:50:4c:3f:e0:05:79:6e:00:
53:a1:15:ee:ed:e0:80:90:0e:86:09:e9:59:dd:83:
0c:67:f1:1f:32:51:7c:69:97:cf:be:56:5f:3e:33:
31:d0:a6:43:c1:91:b1:51:6e:e3:eb:18:18:31:48:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:83:4B:DB:DB:E9:00:5D:A2:8E:C3:E1:4A:65:73:E8:17:38:00
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7a:27:0f:c2:08:f8:9e:34:20:0b:ab:16:6b:63:a5:e7:f2:
57:11:82:05:8e:66:74:94:63:ae:f1:ed:da:25:55:0d:e4:d2:
2e:3e:f4:c8:f7:3e:52:1c:3e:99:f1:74:c1:c5:2e:de:51:9a:
44:17:42:0a:89:1a:76:b0:a8:e0:6c:a1:cb:95:39:7e:b8:85:
54:bf:08:dc:9d:eb:12:ab:ad:b7:9e:75:bb:13:5b:b7:cc:02:
9e:63:1d:eb:d0:6d:0b:01:e1:52:ef:c4:2e:5c:c6:c5:c8:66:
a4:b6:4a:e3:ab:c7:04:85:fe:f0:08:bd:54:7d:ae:45:56:0a:
6c:06:9d:5b:41:af:e1:09:15:24:53:9c:16:71:7c:03:72:32:
01:22:44:d9:0c:0b:79:4c:39:19:04:4b:e9:0c:6f:7a:2a:2a:
1c:75:71:5a:20:37:24:31:cc:77:37:53:84:d1:26:02:96:97:
90:ac:0f:ae:34:5e:22:9c:fa:8c:93:53:82:94:24:47:b6:1f:
87:41:77:58:ca:df:9f:4c:fd:34:36:bb:eb:2d:17:a2:a1:ce:
d1:d7:c9:63:7b:8a:2f:39:bf:9f:c1:1c:a7:c5:c9:7f:59:41:
66:90:3c:e3:05:c4:8d:ac:f5:5b:8a:87:c6:0a:3a:2f:9b:8b:
6e:1b:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:52 2026 by rpki-client