Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
File: 9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json)
Hash identifier: 8l953ofLCD1IxBvCZVHsK/LgcE+IaoRjTmKzRH9m4MM=
Subject key identifier: 6A:36:DB:EF:E6:CF:50:B6:2B:9F:8E:7D:69:DE:3D:92:E4:99:66:E8
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial: 019CAC7E2739C586AF8EE59C4DC1EC43D86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 03:01:14 +0000
Manifest this update: Mon 02 Mar 2026 03:01:14 +0000
Manifest next update: Tue 03 Mar 2026 03:01:14 +0000
Files and hashes: 1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: VnqWqKGMG/BXDoYSuGYXuPXjRvYk7pzS1JfJUZql0JM=)
2: _nZKD9ZTGWn3ixeAqRkUR8-oFdY.roa (hash: E+dKSGK3CToMIv6bsluEab6asnsTgpRJX/4wcKUB3No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:27:39:c5:86:af:8e:e5:9c:4d:c1:ec:43:d8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Validity
Not Before: Mar 2 03:01:14 2026 GMT
Not After : Mar 3 03:01:14 2026 GMT
Subject: CN=6a36dbefe6cf50b62b9f8e7d69de3d92e49966e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:f5:eb:03:20:e0:86:d4:ef:35:9b:12:2c:
2f:88:6b:05:7b:9d:89:0f:1e:cd:c2:1c:8a:29:27:
24:98:2f:cc:5e:96:ad:b3:40:2e:7f:30:d2:aa:6c:
02:29:a6:15:07:f7:65:e4:16:22:ca:fe:7c:44:7d:
ca:12:4a:46:33:78:21:96:80:65:7b:61:0c:db:de:
a5:71:dd:2f:29:c2:9c:2c:44:ed:38:92:a5:21:d6:
4c:98:13:d4:16:16:ed:76:04:1d:9a:a5:d9:ba:3f:
0b:8d:5b:99:84:a9:5b:89:15:04:49:64:3e:fe:ce:
ca:04:33:3f:51:0e:f1:f8:3d:0e:5b:fc:b2:a2:70:
4e:25:04:d5:5a:2f:ce:fe:27:8a:b7:60:0e:5e:7c:
90:44:6c:aa:91:ef:67:b3:70:b1:58:70:e7:25:02:
da:11:81:f0:51:c1:cd:40:93:c4:06:55:5a:2a:aa:
66:8f:4b:a3:a6:9a:08:51:bf:c5:eb:6c:0c:f5:55:
ae:c8:4d:26:af:4b:b6:9d:5c:5f:49:f1:dc:96:c4:
85:ea:a6:dd:d9:41:ad:69:1b:98:db:90:62:c9:17:
05:59:78:8a:bc:06:64:9b:0d:18:7c:4d:27:54:77:
dd:86:fa:72:db:d6:45:e1:1d:95:99:6e:3b:01:81:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:36:DB:EF:E6:CF:50:B6:2B:9F:8E:7D:69:DE:3D:92:E4:99:66:E8
X509v3 Authority Key Identifier:
keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b4:aa:2b:e2:59:43:50:e7:46:7b:b7:a7:12:69:56:38:3b:
23:45:02:6f:51:ce:32:ad:1b:fb:44:59:53:e3:1f:ce:ff:5e:
3c:6d:e2:90:e4:33:c0:67:05:34:7a:56:a8:d0:bf:e9:80:75:
26:c9:67:b3:0b:d7:60:6b:f5:d9:ed:ee:ff:6b:2f:f2:f3:29:
3d:ae:cd:02:f0:bf:ac:a3:ea:6c:51:f5:4c:e3:5a:6e:39:73:
c6:1d:8e:4e:68:2e:f0:00:b7:88:91:06:ee:1e:69:e3:c0:f6:
24:05:e4:cc:11:0d:a5:0c:96:d7:a7:99:a4:23:ce:0d:27:c4:
3f:6e:13:64:83:b9:6e:76:58:bb:cc:51:7f:b3:bb:29:ef:bc:
e8:43:81:67:d6:d1:13:dd:76:26:bf:ac:5a:c3:46:e1:a0:11:
e4:0c:6f:1c:b4:ca:b4:6d:54:ed:5a:cb:53:84:a5:b7:c5:96:
99:c4:02:53:73:1f:69:52:66:4f:04:b7:77:81:28:12:d8:9e:
bc:74:06:c1:a3:96:5a:31:25:a5:37:3e:ba:53:ab:d3:68:12:
46:07:e1:27:dd:e7:82:e3:a0:02:d1:95:4a:0d:cf:f5:3c:d2:
11:7e:ea:49:de:b1:36:f6:6d:9f:80:5b:ec:c9:6e:f8:f3:6f:
e3:b7:60:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:49 2026 by rpki-client