Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: 7LWfr1E/w43/JGz2COHAXT9KbQkVO2DCrV8Wt8arvuw=
Subject key identifier: BC:C7:72:32:DF:94:96:99:80:F0:04:C2:61:5B:D6:1B:92:DA:70:19
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 019CAC468267507E430B046CF27857C24B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 07FE
Signing time: Mon 02 Mar 2026 02:00:27 +0000
Manifest this update: Mon 02 Mar 2026 02:00:27 +0000
Manifest next update: Tue 03 Mar 2026 02:00:27 +0000
Files and hashes: 1: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: 6M8mRDH47IF4+BTudkyRVpuhMx4F7GfMKqo7n9iOmBw=)
2: Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa (hash: llVgeSirYRMnxHxg+jow3ZLNY2RJpGEBaB4uInwuLpg=)
3: q7LASc7RAdvhKI2lD0l4EEgjIM4.roa (hash: Nr2UUQFi//KxEpaf+hC6t8vMKhEd7i+ElopwPR5ej6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:82:67:50:7e:43:0b:04:6c:f2:78:57:c2:4b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Mar 2 02:00:27 2026 GMT
Not After : Mar 3 02:00:27 2026 GMT
Subject: CN=bcc77232df94969980f004c2615bd61b92da7019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:c0:0b:12:c4:bd:44:29:d7:2b:3e:7e:76:
99:41:a1:99:42:6c:e3:6f:e7:78:bc:49:90:66:b4:
33:2f:1e:43:a4:b0:73:30:ff:72:d8:95:92:74:8f:
ad:ca:fb:39:ef:02:ca:15:59:62:ab:04:8d:95:b1:
54:1a:55:44:c9:4a:40:1b:a2:12:6b:4b:79:91:c7:
82:6f:12:b4:21:1b:8a:0c:6e:49:dd:09:fa:14:26:
eb:5f:61:3e:73:1c:dc:f3:a2:4d:81:85:00:76:9b:
d3:00:f5:ef:f8:9e:54:63:3e:63:91:2d:be:bf:f9:
4d:2a:fe:32:cd:32:15:cb:6d:d2:26:ff:13:22:39:
ea:a8:81:41:33:54:85:63:32:0e:0f:82:36:bc:b7:
72:6c:45:af:2f:47:4b:2a:2e:3a:35:03:cd:19:6e:
29:97:2f:b5:11:e1:bf:46:95:eb:14:0e:d3:87:a1:
43:68:7d:c8:05:29:c0:12:01:c7:ce:ee:87:66:74:
1a:2a:fa:ef:ed:a5:28:4b:51:a0:2a:02:2d:17:fa:
a6:ea:49:9f:7a:85:7c:fa:aa:b2:6c:0d:34:af:65:
a2:61:3e:38:85:fd:ff:6c:66:ff:bf:7e:20:c5:66:
1b:1a:63:29:4b:df:c5:23:15:5b:1c:34:01:29:14:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:72:32:DF:94:96:99:80:F0:04:C2:61:5B:D6:1B:92:DA:70:19
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a9:34:3b:1b:86:e8:00:79:e5:43:c1:a7:9d:58:4c:cb:25:
6c:2a:5f:f5:2c:b2:f2:5f:56:44:61:c8:2c:0c:f7:b3:d1:32:
67:d1:54:06:ab:a1:2c:6a:28:64:d6:ed:ef:eb:28:0b:26:5c:
7a:d2:f5:58:10:aa:66:f8:6e:16:55:4d:3b:f2:7b:d0:34:f0:
ff:8c:e8:01:71:49:33:bb:79:8b:62:c7:4f:7d:b5:ab:19:93:
eb:61:2a:56:d9:fc:bf:c7:ec:a1:59:dc:0b:96:92:8e:1c:96:
51:14:2d:ed:90:6c:1d:a4:f1:42:5e:43:60:23:28:b6:0e:8f:
e3:26:d7:d8:59:21:98:2f:d3:dd:f5:cf:32:67:8a:78:94:ce:
f8:9a:80:a3:f9:43:61:ec:01:56:ba:bd:59:10:ea:dc:19:35:
86:0f:9e:3b:7c:44:6b:28:c8:3d:0e:80:a1:e4:a4:df:54:9e:
1f:f7:64:17:fb:70:da:38:b5:6a:49:62:60:df:0d:a2:03:3a:
3d:a1:a4:d4:ee:65:a7:bd:2d:14:c2:56:cf:56:9e:b1:09:b8:
77:bd:93:ac:af:5b:16:88:27:ed:ab:24:d6:7c:75:15:09:1d:
2c:ab:4b:a0:83:ff:51:e7:11:75:d0:ec:32:9a:d3:10:2a:0c:
c3:9d:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:45 2026 by rpki-client