Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
File: 91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json)
Hash identifier: yrJcfhDUOl8X14AXeoosGiQH+fwzoBvN9C2pDXOJusw=
Subject key identifier: 87:84:B0:0E:A9:7D:50:6B:AD:21:05:FD:5C:3D:26:2A:76:D8:1E:D0
Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
Certificate issuer: /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Certificate serial: 019CABD96986C9A551D2BAD8BC2EADA703CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
Manifest number: 13CD
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: JmRt3YE/j3j6hA7Wq8Ym7ppGTBEywuG2JRX47R51BjA=)
2: zzK4qCAtynNjDjZWUiRCQn5dpDk.roa (hash: E6+IdS0ezqI3UKO4kCUBOk2GF16tHu1sV21TlzMQxMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:69:86:c9:a5:51:d2:ba:d8:bc:2e:ad:a7:03:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=8784b00ea97d506bad2105fd5c3d262a76d81ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:2d:18:1a:d6:d9:f5:26:7a:44:d3:29:21:
08:2d:fd:35:d4:4c:96:a8:d1:f5:94:eb:20:45:e5:
3a:43:4f:51:22:a7:91:ae:2e:52:90:a1:08:51:b3:
83:7c:c6:49:9b:68:6a:eb:d7:67:7e:69:f2:cf:8d:
5d:76:4b:5b:b7:13:ca:1b:b7:b5:ce:1b:85:65:b6:
63:8a:13:be:f0:32:0d:40:af:2d:1b:ed:85:56:cb:
0e:ca:fd:16:42:70:0c:82:26:f6:6e:2c:d1:c1:de:
a4:5f:a8:76:e4:59:c4:b7:27:74:7f:f3:89:c3:f7:
8b:ba:13:09:41:15:18:81:61:19:e9:fb:0a:a0:6c:
c8:cb:2e:b5:7b:89:1c:9e:bf:0f:af:f2:81:a4:ca:
29:02:f6:b1:8d:a2:b4:a3:ab:7b:08:24:0b:91:25:
29:84:31:56:a9:46:fd:8a:0f:b0:26:e9:a7:1d:eb:
25:c2:9f:1c:7c:d7:2b:5f:e9:09:1f:da:6e:03:08:
93:d4:7f:5c:2a:b2:84:7f:58:52:17:9e:7f:70:02:
7e:8f:e4:93:d0:e2:51:e1:de:6b:55:2e:46:18:be:
d6:fe:53:eb:6e:66:02:53:5a:10:37:51:17:c2:07:
17:bc:0f:6b:5c:7a:e1:a1:a1:6b:76:11:c6:86:43:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:84:B0:0E:A9:7D:50:6B:AD:21:05:FD:5C:3D:26:2A:76:D8:1E:D0
X509v3 Authority Key Identifier:
keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:19:94:99:8f:b3:ee:63:d9:d3:30:84:7e:92:53:62:32:
c3:9f:74:5c:a3:8e:17:18:c5:ca:de:e6:fa:bc:52:6a:b1:c1:
c1:21:17:c2:2b:3b:bb:df:90:b8:c9:a0:85:2c:d1:61:bb:26:
04:10:19:07:f1:3b:c4:1f:82:11:c7:30:b9:e3:a7:3b:24:68:
b2:e9:36:7f:4d:5c:76:00:65:92:59:eb:4e:d6:8d:0e:29:8e:
b5:a0:11:c1:4e:58:b1:bf:53:eb:fc:ac:49:23:1c:8d:08:8c:
e9:4b:9a:dc:31:ca:8b:14:a4:65:ec:8e:c0:ab:84:d6:d2:64:
7e:d6:e7:c2:f1:17:a2:50:67:b4:e2:4a:1c:43:20:ac:ab:2f:
32:1a:84:ef:ee:b8:ef:cd:98:b8:27:c7:01:41:ed:96:22:95:
2f:aa:17:f1:3a:c1:54:a1:39:1b:b1:2c:ed:5e:c2:db:9d:06:
86:e5:ce:15:59:cf:c5:ff:cf:f8:2a:bf:e5:8f:dc:16:12:6d:
81:48:62:38:d6:d6:f6:c2:2e:ce:88:f3:52:a3:08:4e:a2:c4:
75:9f:73:6e:fe:0b:e8:a5:0d:5a:4a:9c:b3:f5:14:3c:24:70:
c7:65:be:1c:cf:5c:19:4e:00:50:42:d1:2e:6b:d0:14:bb:d8:
54:34:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:25 2026 by rpki-client