Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier: 1PTVt9BuhLvzUeq30GMJKjzH8Iqwp10lkwkpqHbq4Q0=
Subject key identifier: B8:02:CF:23:C8:1F:D6:44:16:E4:43:F3:E7:6B:D9:C2:EE:B8:6E:1A
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial: 019CAAC6CEC15E174A75E5D417D1D4D427CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number: 0568
Signing time: Sun 01 Mar 2026 19:01:21 +0000
Manifest this update: Sun 01 Mar 2026 19:01:21 +0000
Manifest next update: Mon 02 Mar 2026 19:01:21 +0000
Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: V8602r5YAl+GCHdFJ8eIUE3SWLQ9HeTbHm5dWmzB8Jw=)
2: YR9nbJSvjMz22hEhrLxozqfTYpM.roa (hash: gYf5CcRkkh/Fk5/cmxIrFjAzYsJs0D1iQQ35mLjqwnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ce:c1:5e:17:4a:75:e5:d4:17:d1:d4:d4:27:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
Validity
Not Before: Mar 1 19:01:21 2026 GMT
Not After : Mar 2 19:01:21 2026 GMT
Subject: CN=b802cf23c81fd64416e443f3e76bd9c2eeb86e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:92:b9:38:32:6a:5d:16:10:82:64:b2:93:
0f:16:11:30:bd:ab:83:cd:e1:74:85:17:37:25:dc:
b0:7c:cf:2d:0d:14:3d:49:e9:fe:de:d3:4d:e9:32:
7c:0b:26:5c:7a:35:ed:f6:65:8d:6c:aa:0e:a1:8b:
37:8e:79:0d:bc:7d:f9:ef:81:ce:02:7b:ba:5b:a6:
11:81:b3:c7:00:35:3a:c5:b9:2f:55:64:64:fd:b1:
34:bd:d2:38:b7:b1:27:23:4d:68:7d:ad:c0:0f:8c:
54:a4:ff:39:3f:b2:77:23:3a:0a:85:c6:6f:84:b3:
bb:d8:0e:8c:6d:aa:d4:2c:fc:38:f2:62:93:dc:38:
f5:d6:bc:47:78:19:8a:a0:79:aa:49:49:e2:ef:b8:
91:60:6e:3e:5e:ba:5b:a1:e1:5e:58:07:ba:73:95:
6d:35:df:c7:24:ac:88:02:d8:cf:af:91:c1:48:a9:
ce:7c:14:1f:ec:20:c1:1e:8c:0d:a9:35:7a:a2:2f:
00:9e:ac:a7:91:67:d4:c9:56:9a:77:01:bb:8b:aa:
1b:06:72:9f:33:51:1b:38:02:6c:98:d8:a8:eb:48:
3d:04:f4:56:50:dd:79:28:4b:c5:25:da:7a:63:04:
b1:b1:75:6c:5d:ae:4f:21:c9:08:7b:c1:4f:5a:71:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:CF:23:C8:1F:D6:44:16:E4:43:F3:E7:6B:D9:C2:EE:B8:6E:1A
X509v3 Authority Key Identifier:
keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1c:e1:c7:4a:ae:68:f6:74:d2:27:cf:68:41:cb:2a:5b:48:
8a:7c:4e:8f:50:5b:c2:71:90:2c:67:7d:db:6b:e6:59:58:f9:
cb:ec:9f:4d:66:2f:b0:f3:d2:18:31:d4:51:70:58:98:1e:f6:
f4:c2:ed:3e:52:44:c7:78:20:67:58:7e:c9:47:20:6a:4e:14:
67:97:6d:a9:ac:b5:4c:24:42:99:e1:37:c1:f6:0b:5b:c8:0b:
47:e9:e7:d1:d8:a8:ac:e0:24:a1:b8:86:0a:d0:31:37:15:4f:
87:80:83:af:94:29:03:ef:65:ca:52:52:68:75:5a:27:53:96:
a0:8c:40:7c:34:e7:41:16:a3:50:6a:18:22:52:3f:41:d5:d0:
ca:0a:11:43:c9:43:08:ca:5f:72:27:86:46:e9:78:27:6f:7f:
2c:f0:7f:fe:b6:f0:d7:c6:35:9a:83:54:dd:90:23:aa:24:d9:
70:e3:19:4a:70:dd:f1:63:2f:d5:7c:8b:5e:f4:da:a1:55:e4:
ea:49:b0:bb:89:89:6d:0e:5f:ca:ae:cb:a0:1a:33:d4:d3:d1:
28:e4:6e:bc:e9:af:7c:19:84:1a:d8:ee:02:a1:67:17:81:b9:
87:bc:55:93:0a:d5:c9:c9:88:88:77:32:55:86:37:94:b0:4f:
06:5d:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:17 2026 by rpki-client