Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier: yb0QYkWHdq7dcGSkOTDKnCfhScTRBSBaHcM2VWn1mYk=
Subject key identifier: E8:CA:37:F7:B1:12:0B:C1:12:E9:92:13:40:53:8B:83:22:BA:1A:AA
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial: 019CABD9AE6F036A5AEFB9EA9691F9D56C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number: 01C8
Signing time: Mon 02 Mar 2026 00:01:35 +0000
Manifest this update: Mon 02 Mar 2026 00:01:35 +0000
Manifest next update: Tue 03 Mar 2026 00:01:35 +0000
Files and hashes: 1: 1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa (hash: aHfsmVZKRy+7AFPaygX163J+5qjXxNU2emyKoCQGtN0=)
2: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: 3UAaT67saF8iNGLjlAkwmCbxLVocVVIh6x4au8jWsf0=)
3: F_pPHJDcrHyVOVWzvhakia7DJiQ.roa (hash: tFJBSOLCH7tZWWFthieckptanNdtDSMnw7UCYwe6+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ae:6f:03:6a:5a:ef:b9:ea:96:91:f9:d5:6c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
Validity
Not Before: Mar 2 00:01:35 2026 GMT
Not After : Mar 3 00:01:35 2026 GMT
Subject: CN=e8ca37f7b1120bc112e9921340538b8322ba1aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:a6:f6:e3:13:70:1c:45:01:b0:ec:4c:f6:
10:95:87:31:8b:35:9f:51:aa:84:46:74:1e:e9:75:
66:2c:f3:5f:a4:08:69:44:8f:38:24:9a:c8:31:f8:
28:2c:23:67:06:b8:9e:79:89:53:9b:fe:bf:04:f3:
7c:79:e1:90:59:c8:19:41:2e:7b:f7:7f:54:7d:bb:
2e:d4:0b:03:fe:34:13:97:1c:36:17:2f:be:24:0f:
6b:1b:c5:a2:f2:2a:21:8e:10:50:3d:d8:da:59:03:
45:6f:d7:37:68:c7:8e:e6:5a:e1:9e:40:92:32:2c:
d8:63:f3:6b:fb:34:71:de:8d:05:0b:5b:f2:57:00:
4f:ba:c1:87:f6:cb:4d:c1:06:56:69:36:09:ef:de:
bb:fd:22:01:10:95:07:e1:7f:67:47:a1:98:3c:6f:
00:d1:79:65:4a:b5:93:95:1a:0a:7d:12:24:13:d1:
07:c0:a5:1f:f0:94:4e:37:bb:08:9d:7f:04:bd:bd:
bc:d6:0b:0e:8e:3c:9b:9f:a5:ac:80:2c:1a:f3:72:
9c:ad:d7:17:1e:1d:e3:48:81:1d:0b:01:51:6e:71:
ff:ab:0f:12:d0:04:75:83:73:22:05:9a:b3:b5:27:
a1:32:f7:b9:17:32:e7:3b:79:35:f8:4e:56:99:82:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:37:F7:B1:12:0B:C1:12:E9:92:13:40:53:8B:83:22:BA:1A:AA
X509v3 Authority Key Identifier:
keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d8:e9:67:ad:54:d0:40:c4:44:6f:b3:25:e5:ce:af:d5:4e:
b5:71:bf:ea:38:3e:76:9c:8b:8d:40:f9:1d:6d:66:9e:92:de:
60:70:a7:de:9b:b1:0f:4a:3a:de:27:d0:8f:25:ed:bd:38:65:
eb:9e:cd:7a:d5:2d:fa:3b:67:a4:46:8e:1f:db:92:81:94:c2:
a1:c0:b0:69:49:71:aa:30:81:0e:3b:51:b6:f0:b5:a8:9a:a7:
34:93:ac:00:ae:3f:56:81:31:26:62:76:aa:39:b6:06:4c:3c:
82:47:de:8c:8e:36:f5:17:a0:c9:9d:8a:52:d0:60:a3:09:b2:
e4:e9:8a:1c:eb:34:e5:01:9a:43:be:bf:9b:64:0e:d2:97:61:
ef:b8:d5:ce:a2:db:44:aa:8c:67:64:fa:79:72:a5:33:21:50:
7f:27:ea:c3:bf:88:f9:ca:03:6c:a4:fc:45:df:78:2b:8f:cb:
a7:80:ed:64:78:72:c2:3f:43:7e:b4:85:f7:9a:68:01:2e:02:
34:3c:18:52:e5:a9:1f:41:25:9d:bc:a4:05:5d:10:fd:5d:c4:
93:de:c6:57:9b:ea:0a:20:6a:2e:01:c9:60:33:80:f2:12:5b:
ff:d8:2b:5a:5d:d1:a0:0b:20:14:ee:d3:22:e4:50:fe:53:59:
c6:ed:be:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:57:54 2026 by rpki-client