Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: EDs+Cj3Ga7S7Fe7XiQpZIK4AcVtjUEdI9GeHZolHIq8=
Subject key identifier: A3:06:42:5F:C4:22:0F:B4:40:7E:DC:2F:97:61:CB:51:49:C3:0F:50
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019CA8D7D6799F9B0A90270857CA263620F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 10:00:43 +0000
Manifest this update: Sun 01 Mar 2026 10:00:43 +0000
Manifest next update: Mon 02 Mar 2026 10:00:43 +0000
Files and hashes: 1: 8gINa2lFaHAK60FtqIDDhXwZP7w.roa (hash: z1FvylnNOuEEDQQea39SZ8k3cYtqZE6bJ6wCeGonrDw=)
2: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: lfKkBSHQIQtNf4AjxDC7vvBKOic7ZAB7sN6bJ/xjPuM=)
3: IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa (hash: NPCHrCQgVoOMqCSPlDc/hj6wxQzJAbSJUalGFEL7VEc=)
4: tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa (hash: unf/ZbmoQZ2C8O0WxuwscfoRSvADWqKnPxDoOQZPINs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:d6:79:9f:9b:0a:90:27:08:57:ca:26:36:20:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Mar 1 10:00:43 2026 GMT
Not After : Mar 2 10:00:43 2026 GMT
Subject: CN=a306425fc4220fb4407edc2f9761cb5149c30f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:93:b7:e6:a7:50:e6:dd:63:5e:e2:f3:bc:
37:ef:8a:ca:9e:3e:33:32:93:1c:ef:13:96:35:01:
b7:ea:5c:66:d7:47:0f:60:0d:87:ad:d5:63:2e:1a:
50:4f:83:6d:fe:12:11:61:81:38:4d:c0:4b:2e:d9:
8f:a0:36:57:44:69:dd:65:e9:8b:e3:8b:d0:1d:07:
f7:fb:c6:83:28:00:f2:be:e0:eb:93:6a:99:2d:cd:
fc:21:2d:57:93:f0:61:72:66:b0:1a:05:0d:96:d9:
37:f9:f1:60:0d:67:8a:da:02:5d:51:45:88:d2:7b:
72:82:6a:36:a5:e8:70:8b:32:7d:40:9e:a8:1a:32:
d0:a5:db:17:ba:f6:9c:10:6f:37:0e:b1:fa:ea:12:
84:73:3b:6c:9c:07:81:86:82:30:cc:df:ea:56:4a:
98:ec:bc:d4:d1:da:49:67:03:4a:d6:55:7d:69:63:
02:ad:2b:7e:ba:71:64:8c:8d:c1:27:cc:56:53:76:
ea:d5:d1:4d:9d:74:40:bf:36:68:60:59:83:69:0a:
f4:eb:e8:95:31:d9:cf:2e:95:a3:77:ea:90:16:44:
a6:1c:df:85:74:a7:71:db:b7:2e:9e:25:53:fc:0f:
c0:9f:a5:91:ca:21:8b:74:de:8e:07:6b:41:2a:41:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:06:42:5F:C4:22:0F:B4:40:7E:DC:2F:97:61:CB:51:49:C3:0F:50
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:76:f7:19:dd:33:53:3f:42:9e:e6:8e:bb:aa:1c:c3:c4:22:
99:74:1b:35:9e:b8:ca:13:34:8b:4a:77:7f:eb:b7:2d:73:b6:
4b:16:2f:28:48:2f:b5:65:51:b9:f5:5f:df:52:fe:e4:11:17:
12:d1:f0:e9:d8:3e:0e:4a:ae:ff:33:31:94:e9:9e:24:4d:c5:
ea:46:f7:55:f7:39:da:5f:40:32:e6:1c:92:24:ed:ce:72:32:
e4:ae:3d:32:51:e1:5c:28:4c:e0:a5:4d:c1:5a:37:81:96:a1:
a6:4d:77:5e:60:92:7f:07:b9:45:6c:51:26:01:22:7f:a9:0e:
c9:a9:f2:f9:a8:33:12:4c:f2:01:2e:89:60:4b:85:55:67:62:
e7:fd:5f:49:22:d4:3d:47:e0:af:84:6a:18:e8:7d:04:8c:b4:
b0:d8:51:16:bc:0e:cf:14:dc:26:6c:1c:ca:3a:46:38:d9:1b:
fa:4b:c9:f7:08:51:de:89:08:e5:78:00:fe:86:a8:bb:01:a1:
12:c4:59:0b:c3:19:55:3e:fd:14:49:f2:5d:2e:10:0a:b0:f8:
32:04:26:25:3d:69:05:75:2c:5b:0b:3e:4a:94:07:51:e2:f7:
da:46:a2:4b:89:94:ec:7d:eb:ea:06:3e:79:a5:de:19:66:bf:
a1:d7:f8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:46 2026 by rpki-client