Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
File: 9jXHTatSTz72yWtovplcMCXPD-A.mft (raw, json)
Hash identifier: 6OcwuXQ5jSiMqktZQJZOVZ1PUvebJkJyIFs34EGuzb4=
Subject key identifier: 0D:7B:A3:44:DD:4C:0D:25:AE:72:08:8A:A8:60:23:36:8F:E4:2B:A7
Authority key identifier: F6:35:C7:4D:AB:52:4F:3E:F6:C9:6B:68:BE:99:5C:30:25:CF:0F:E0
Certificate issuer: /CN=f635c74dab524f3ef6c96b68be995c3025cf0fe0
Certificate serial: 019CADFDF667E345297CDC8C9BFCCA31BC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
Manifest number: 0F
Signing time: Mon 02 Mar 2026 10:00:27 +0000
Manifest this update: Mon 02 Mar 2026 10:00:27 +0000
Manifest next update: Tue 03 Mar 2026 10:00:27 +0000
Files and hashes: 1: 9jXHTatSTz72yWtovplcMCXPD-A.crl (hash: VQyDXl0IMHfjAfcFyYSFo5JzdfbbOwE8wVk6zHMmSLk=)
2: JYgzUyiaZYs05bVlx3hglGkBd1Q.roa (hash: BMikKwWOpzTQc4z6QjV3HCSDgmz4fqzntIpupmntBpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fd:f6:67:e3:45:29:7c:dc:8c:9b:fc:ca:31:bc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f635c74dab524f3ef6c96b68be995c3025cf0fe0
Validity
Not Before: Mar 2 10:00:27 2026 GMT
Not After : Mar 3 10:00:27 2026 GMT
Subject: CN=0d7ba344dd4c0d25ae72088aa86023368fe42ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5d:f1:11:ee:a7:e8:1f:2f:0d:f9:29:4f:fc:
7d:d2:2d:aa:6a:a7:aa:f7:5b:78:a0:4d:ce:a5:a5:
d1:fa:6b:51:02:b6:b4:01:ce:d3:72:ee:1d:f1:15:
70:e5:a4:37:91:7a:4e:3b:e0:ce:91:d2:57:92:2c:
ea:b1:f3:97:b4:bf:97:3a:5a:c4:24:ab:97:0a:b6:
c8:1d:68:76:2b:e0:85:42:9a:cf:be:6e:b1:44:4f:
72:9d:3f:15:23:1e:21:f3:c3:d0:32:90:03:df:ff:
d4:5d:f6:64:7f:e2:48:26:46:55:47:d8:88:c6:60:
0b:c5:73:5a:38:a9:49:a3:30:b7:4b:57:27:97:2b:
4c:c9:aa:5c:77:73:1d:40:a8:fb:b9:2d:af:69:ec:
1e:0a:ce:fe:e2:d5:4e:41:fb:01:e0:62:06:d8:31:
83:96:3a:c6:73:fd:ed:94:cf:5f:fe:85:46:84:16:
ac:95:c2:72:ee:18:6b:5e:00:a2:9b:e0:d3:ca:71:
36:13:e7:06:6a:15:d5:1f:39:1f:ab:3e:c9:45:1a:
4e:75:6f:fa:f5:06:88:56:d9:f0:81:b6:dd:3c:ee:
ee:76:32:eb:c8:3e:e5:95:62:e4:3c:ea:b4:0c:41:
a0:ff:18:ed:cc:e2:92:f2:f2:ed:28:c1:31:1b:ac:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7B:A3:44:DD:4C:0D:25:AE:72:08:8A:A8:60:23:36:8F:E4:2B:A7
X509v3 Authority Key Identifier:
keyid:F6:35:C7:4D:AB:52:4F:3E:F6:C9:6B:68:BE:99:5C:30:25:CF:0F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5c:fc:b2:70:0d:a5:49:30:a3:ba:13:3d:48:ca:89:d3:25:
87:7e:a0:43:3e:5f:44:1e:4a:d8:bb:68:96:83:fb:a6:de:88:
a8:8b:ce:54:67:d3:a1:53:70:69:67:60:f6:b0:f2:d6:73:9f:
23:33:54:9c:3f:12:cb:21:04:9e:cf:83:4c:bc:47:42:6e:f3:
9d:d6:0c:f6:0e:1f:b6:18:2b:7c:58:59:ed:33:a3:95:08:bf:
a1:a4:a8:43:5d:c1:8a:1f:9f:85:e7:df:7b:5e:14:cf:12:29:
2a:cf:73:a6:51:fb:f4:bd:ec:43:6d:58:ca:f7:6b:d4:0b:81:
71:45:dd:25:1d:aa:fd:a4:ad:0b:aa:3c:d1:81:69:af:04:c2:
6a:49:10:51:b2:37:8d:09:cd:2b:4d:e6:6b:cb:3c:e5:35:e3:
f2:e6:af:1e:c0:1c:85:7a:c8:4d:fd:01:ec:34:c6:9d:e9:e8:
ed:0b:dc:b7:98:86:b4:d3:cf:7e:8c:79:84:6f:00:cb:c3:4a:
1c:9f:7b:f6:a4:c5:f9:21:eb:e2:f7:20:04:bc:61:48:bc:b4:
bb:59:fc:d6:00:8b:da:ec:32:b2:cb:3b:66:5d:8c:6d:77:62:
ec:a5:cd:80:a3:35:53:f8:6e:0c:fd:3e:1b:83:eb:ad:9d:5e:
25:5f:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:35:23 2026 by rpki-client