Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: BW22h28yHqJ4kmz7vOpDqeVM71jWuABGYZm5160YT1Y=
Subject key identifier: 9E:79:47:CF:04:25:5E:4F:2E:A0:17:4E:67:9E:0B:8F:98:E0:D6:C9
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 019CACEBDBAD8AB8BAEB4F1DA141AAF3A2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 0586
Signing time: Mon 02 Mar 2026 05:01:04 +0000
Manifest this update: Mon 02 Mar 2026 05:01:04 +0000
Manifest next update: Tue 03 Mar 2026 05:01:04 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: ivtZPVCLbI/JD7MT92TUBdBs38Yk2q6knGWOPvX2r5U=)
2: TrhXkCJb8q-vuCZF4exUSreBB7E.roa (hash: EGX2grrS3l79QBgl+a645PR4w0grZD/PxlFuVBj36pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:db:ad:8a:b8:ba:eb:4f:1d:a1:41:aa:f3:a2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Mar 2 05:01:04 2026 GMT
Not After : Mar 3 05:01:04 2026 GMT
Subject: CN=9e7947cf04255e4f2ea0174e679e0b8f98e0d6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:e4:5f:93:15:08:0e:50:b1:8b:94:37:83:
d6:a2:0c:c8:6b:0d:92:65:b0:92:a1:5f:99:94:c7:
6b:ca:a0:e1:04:6c:4d:7c:59:ed:a2:1a:9d:f6:6b:
be:bd:5b:c7:f8:3b:e2:04:44:45:76:62:ab:6f:e4:
f5:e7:7a:2b:1a:00:84:b3:1e:3a:cf:1a:e9:6a:0e:
cc:ea:aa:15:9f:a4:04:64:d4:aa:37:c1:71:38:e8:
7a:d7:86:22:13:08:71:fd:92:4e:2f:27:4e:ec:02:
00:c7:23:25:24:78:8a:1f:bc:0d:26:e8:b7:5e:c5:
2f:2a:f8:c5:95:f1:03:68:28:22:65:04:cb:9a:bb:
0e:00:a1:5d:a3:53:0d:2e:3c:12:13:b2:22:ef:4c:
c6:fd:76:8c:5e:c1:f9:59:c7:42:11:2f:90:c0:b6:
cd:d7:af:a6:92:63:97:46:c7:cd:0f:b4:f6:ea:ef:
9d:b9:cc:84:45:d9:c2:cd:fa:83:18:5c:ef:a0:b5:
2c:f6:e6:8c:d2:55:c3:85:04:5a:99:95:15:c7:9f:
c4:e1:83:95:61:79:31:26:3e:2e:1c:a7:08:6e:da:
27:48:98:22:1b:44:14:d7:0b:11:e9:11:e5:bf:00:
0f:f0:fb:83:5a:b6:6c:22:99:39:b9:d0:7c:45:8c:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:79:47:CF:04:25:5E:4F:2E:A0:17:4E:67:9E:0B:8F:98:E0:D6:C9
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:94:b1:ea:e6:17:fe:78:92:3c:ba:95:c7:b4:73:cf:8e:d9:
23:27:1e:0b:58:04:76:57:3e:5c:e3:7b:07:dd:89:c0:e5:6f:
a2:85:c5:87:a0:6d:6d:75:83:06:19:0d:59:9d:56:06:d7:44:
9e:7c:ae:39:a9:4f:0a:40:b0:b5:fa:aa:50:80:23:df:07:b4:
ad:af:4b:42:72:06:79:28:74:0d:b0:f1:84:d2:6b:41:58:1e:
dc:0e:41:4e:5f:ba:d8:dc:9f:e5:c9:99:6c:4f:f7:99:ac:1b:
dd:6d:4c:f2:b6:b6:d2:d2:69:f5:12:9a:6f:11:56:45:65:81:
0a:08:48:97:7c:41:1b:f6:ea:1a:ed:ba:04:54:36:41:18:9f:
a8:15:8e:a6:26:93:2e:4c:ef:1e:24:9b:4b:d3:b1:b7:10:51:
96:c9:9e:5e:fd:4b:7e:74:b7:c9:4c:11:3d:b5:f6:ab:25:d3:
4b:91:7d:a0:5a:64:3f:f7:75:d7:4b:ab:ed:90:9e:95:ab:28:
32:2a:da:42:c2:bf:b3:f8:d4:c6:49:1f:11:bd:66:a5:0d:b2:
53:c9:4a:98:d5:50:93:67:f6:e3:31:22:5f:81:e6:9c:fe:b5:
aa:17:23:85:4a:45:7d:54:74:e2:da:9e:df:96:51:31:65:9f:
71:1d:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:39 2026 by rpki-client