Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: 2W8vXDiPntuXyunUEM+9lxO41ECqYpZvgXBp7nckdoU=
Subject key identifier: DC:EB:64:B1:89:B6:A7:78:E3:7F:8D:F1:76:6B:8B:72:1C:43:3C:0B
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019CAAC63B23911BA55EDAD856B71AA8E4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 19:00:43 +0000
Manifest this update: Sun 01 Mar 2026 19:00:43 +0000
Manifest next update: Mon 02 Mar 2026 19:00:43 +0000
Files and hashes: 1: 8gINa2lFaHAK60FtqIDDhXwZP7w.roa (hash: z1FvylnNOuEEDQQea39SZ8k3cYtqZE6bJ6wCeGonrDw=)
2: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: yyy7QQkysjSCQv7kS++j0uVl8G+ABZ1hDyzomNJ8upg=)
3: IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa (hash: NPCHrCQgVoOMqCSPlDc/hj6wxQzJAbSJUalGFEL7VEc=)
4: tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa (hash: unf/ZbmoQZ2C8O0WxuwscfoRSvADWqKnPxDoOQZPINs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3b:23:91:1b:a5:5e:da:d8:56:b7:1a:a8:e4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Mar 1 19:00:43 2026 GMT
Not After : Mar 2 19:00:43 2026 GMT
Subject: CN=dceb64b189b6a778e37f8df1766b8b721c433c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:57:1b:91:f7:c6:92:d5:a6:dd:2b:71:14:20:
5e:99:10:3e:c7:8b:f0:ca:a0:c7:d0:a0:41:b1:ab:
64:62:31:2e:12:04:d2:10:a1:bd:f7:37:96:c6:62:
eb:6f:29:ee:5b:7e:f7:b1:df:82:ba:4d:8f:80:85:
ae:a9:0f:aa:78:19:a6:ed:f8:fb:65:12:28:01:22:
f5:52:07:3c:0a:a6:d0:cc:5b:03:fd:31:1a:1f:c2:
33:b4:07:de:93:af:58:b0:6d:7f:e0:92:5d:a5:c3:
71:da:7f:9e:49:4c:e1:95:35:59:80:dd:0e:2d:d9:
99:ba:be:dd:94:c2:13:72:df:4f:80:de:41:df:fe:
65:f8:e1:be:a2:94:6c:72:68:12:f7:fa:a1:ce:47:
9f:f4:1f:2d:76:b9:af:ec:14:e6:57:e2:ea:ed:36:
d6:d3:5e:6b:b4:23:34:ab:76:75:4b:35:34:75:d5:
1d:56:3e:3b:ba:29:17:30:19:c0:e4:09:7b:b2:e7:
25:bb:33:98:6a:89:4c:fe:85:dd:62:a0:af:31:9c:
de:b9:84:76:2b:33:27:59:e3:f5:c8:72:e0:9f:7d:
77:e5:82:fa:e2:c1:6f:f1:17:6e:a4:79:ef:75:2a:
47:f2:33:42:28:a4:55:75:92:25:5f:81:80:ef:64:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:64:B1:89:B6:A7:78:E3:7F:8D:F1:76:6B:8B:72:1C:43:3C:0B
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:48:b8:b1:3c:56:0d:45:9d:b3:f1:24:96:40:4d:76:70:03:
46:6d:ca:be:ef:71:26:f3:83:90:9d:62:53:75:a6:a9:6e:5d:
49:63:1b:61:13:bf:ec:1c:11:42:3d:7f:95:ef:0f:4f:4b:31:
4e:fb:92:24:55:36:63:53:9c:b0:d2:8d:37:c3:ee:39:b9:09:
3e:fd:90:dc:b0:4c:2c:5f:bb:13:20:4e:cd:71:43:13:ec:54:
74:17:ac:96:f7:54:25:fe:fe:a2:20:c8:26:fb:b8:f5:17:6d:
f4:e6:09:df:98:b9:26:5d:f2:ad:22:b5:83:5c:9e:86:1e:62:
2d:bf:88:bf:be:14:ae:a1:20:10:63:ac:dd:bf:d2:d6:d6:28:
32:66:00:87:e0:d5:2a:aa:24:ec:52:68:cc:ed:46:e0:fb:0f:
c8:ec:14:56:64:0e:3e:11:3e:af:0a:c7:ff:27:9b:81:fd:a0:
8e:4c:e9:0f:fc:27:c5:1e:a7:c7:10:46:5c:cd:2b:98:0c:90:
a9:da:65:0e:cd:31:c4:fa:80:0f:fe:d5:b0:f9:51:36:8c:25:
29:8b:67:70:d7:aa:1e:bb:bd:9a:14:9d:d0:24:09:eb:94:ac:
e3:53:7a:05:4f:d3:b7:33:44:e8:6b:cf:a4:e0:a3:86:b9:27:
4a:21:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:56 2026 by rpki-client