Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: 22gp9O5yC1+pd0HOmtUlinC0OddjZbmNqDENkohGPQ0=
Subject key identifier: 80:DD:25:7D:E6:82:21:6A:F9:1A:F7:66:4D:35:B5:EC:1E:9F:0D:55
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019CAA5846F6D4E5038AF8C70C64B674B007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:00:37 +0000
Manifest this update: Sun 01 Mar 2026 17:00:37 +0000
Manifest next update: Mon 02 Mar 2026 17:00:37 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: 5FiVPr8xFKXiUK95mhUtIMLyssTIjhEUddiOMmavvBc=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:46:f6:d4:e5:03:8a:f8:c7:0c:64:b6:74:b0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Mar 1 17:00:37 2026 GMT
Not After : Mar 2 17:00:37 2026 GMT
Subject: CN=80dd257de682216af91af7664d35b5ec1e9f0d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:fc:62:4d:f3:43:86:5a:a8:cb:de:bb:4e:
cf:e4:41:0d:c8:52:09:9d:39:60:5c:f5:90:48:0d:
d4:9d:b2:89:76:1a:a0:6c:0d:4a:92:17:98:84:d6:
d0:a9:e8:22:c4:d0:61:d4:5e:80:6d:79:fb:b9:c9:
30:9f:d5:2b:dd:38:e6:66:2f:94:10:70:17:0d:e9:
e4:4b:2e:c5:83:69:ac:da:bc:bc:dd:b0:3d:de:14:
88:e9:b9:50:7b:d9:4e:ca:ef:31:7e:56:00:72:a5:
8d:18:88:c5:9b:56:d7:a9:3e:b5:12:ff:3c:15:b9:
12:47:14:97:7b:68:af:b9:51:77:70:21:52:90:c6:
c8:d9:19:d2:a1:29:da:65:81:c5:31:3c:62:ea:b6:
17:1c:6e:e1:d2:fc:71:3d:47:8f:c7:93:91:a1:10:
8e:fc:90:06:c1:7c:5f:57:f4:c6:d7:21:2c:23:a3:
ff:77:64:57:a0:b8:44:e8:19:57:34:c6:66:33:b1:
70:75:3a:35:5b:ce:1a:fb:66:c5:df:8f:c1:76:cd:
20:c3:ab:ed:fc:9e:53:7c:20:1e:1e:c5:54:fe:0d:
10:4a:98:16:7c:b5:b8:20:9d:69:68:53:c0:9d:fe:
67:97:dc:d4:fc:35:1d:d2:75:1f:85:38:99:a9:fb:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DD:25:7D:E6:82:21:6A:F9:1A:F7:66:4D:35:B5:EC:1E:9F:0D:55
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d8:c0:4a:51:10:0c:bc:d3:5f:22:d2:2b:9b:68:8b:fa:67:
01:49:9f:63:34:1c:82:18:80:8a:14:d8:c9:0c:ce:76:07:88:
d5:36:a3:bd:e8:c8:be:c6:66:2f:87:9c:74:aa:c8:4e:a7:6b:
5c:c3:62:a4:11:b0:eb:46:38:ba:cb:a7:92:5d:93:00:5e:46:
2b:c3:8e:6d:6d:ea:4f:6f:2f:06:bb:66:fa:66:c8:27:4e:8e:
07:e3:ae:f4:55:6f:19:eb:90:2a:66:2d:74:17:27:c2:39:d2:
c3:20:4e:d5:88:ef:0f:49:80:55:39:1b:3d:29:18:ca:2b:9f:
46:77:93:5b:03:bc:8c:ce:e8:2d:e6:e0:ee:8c:3d:7c:97:85:
0c:2d:e0:8f:5c:10:b4:25:d8:14:dd:93:47:e9:78:e8:d1:5c:
99:96:b9:9b:5c:8b:7d:e7:e2:54:e1:0a:bf:9b:00:45:dd:bb:
cd:05:45:4a:78:e2:0c:bd:9c:b3:ea:86:62:16:fd:9b:66:3c:
17:8d:e8:f2:81:0b:94:3e:7a:7a:0d:1e:50:59:c5:5d:18:82:
bc:b2:96:33:3f:28:a5:ae:56:f8:c2:49:3b:b7:cf:1c:0a:28:
1f:88:8e:e2:01:bf:85:63:56:17:74:09:19:f9:71:44:03:c3:
ed:a4:1e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:16 2026 by rpki-client