Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft (raw, json)
Hash identifier: bQeAqxJYjpjVMmdrGwkE5hcrciA98O65NyU8c+XbYrs=
Subject key identifier: 6B:13:F9:76:D1:BA:70:0A:01:47:DA:EC:E7:62:C9:D5:58:5B:0A:F2
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 019CA90EEC5D9D9FC6811712D7764AA39BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
Manifest number: CA
Signing time: Sun 01 Mar 2026 11:00:53 +0000
Manifest this update: Sun 01 Mar 2026 11:00:53 +0000
Manifest next update: Mon 02 Mar 2026 11:00:53 +0000
Files and hashes: 1: 5JsNsuuUapw5fDgkbUkuWEzMsLk.asa (hash: RxL4Yv7FvjiasU1GewN7L6R6PTxiHwL1wYEDnRLK5b8=)
2: Sxkhw8Fa5pO8BhRGtQeTU8fdya8.roa (hash: l1dlDAqaaU0qfv4ZGVF35Fo37aw65NRWppLOtUVD5ug=)
3: ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl (hash: 1bc5mYyH7whQdiUsCUxjqIitDbWh0uQuLm/aXKm4XMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:ec:5d:9d:9f:c6:81:17:12:d7:76:4a:a3:9b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: Mar 1 11:00:53 2026 GMT
Not After : Mar 2 11:00:53 2026 GMT
Subject: CN=6b13f976d1ba700a0147daece762c9d5585b0af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:a8:c4:b8:42:70:e1:9a:77:7e:8d:4f:48:
c4:c3:ad:86:a8:7d:66:a8:2d:e1:9a:27:6d:3e:3b:
5c:6f:3e:75:f2:e7:b4:e1:b4:79:1e:7e:7b:15:a1:
3c:cc:19:c0:55:ff:95:da:97:a3:b1:ef:53:b5:2d:
b2:1f:2b:cd:20:7d:48:3e:84:c6:1a:46:93:45:7e:
18:08:5d:3a:96:4f:ea:53:e6:de:2a:28:47:b2:59:
b5:37:8d:13:2f:84:8e:37:5e:64:11:0c:11:1b:9f:
56:a3:df:5b:4c:be:85:ca:b8:33:7c:7a:5e:30:ce:
6a:9f:4b:6f:3b:7d:a2:a6:b5:e6:49:35:91:7d:25:
1a:7c:cd:be:10:fe:aa:82:9e:d9:e3:be:05:88:09:
24:01:12:15:b8:97:06:21:8c:5e:67:b7:3e:ac:13:
60:a1:31:f2:e4:83:4d:b0:0a:60:20:c9:ef:d3:70:
14:1e:18:a6:91:58:f9:17:86:e3:5b:34:1e:bb:52:
2d:c2:57:03:61:a7:19:c2:d5:b7:0e:f6:51:b1:09:
8b:24:93:47:1e:6c:ca:07:15:4b:4d:67:98:ab:bb:
39:4d:84:b7:6a:33:16:0a:41:0d:4a:2d:55:95:e2:
8b:23:2e:48:3e:a0:ae:d6:16:a4:c4:b7:0b:01:e3:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:F9:76:D1:BA:70:0A:01:47:DA:EC:E7:62:C9:D5:58:5B:0A:F2
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5e:fe:71:41:12:32:5c:17:70:22:e4:7b:b7:cd:45:81:32:
f9:01:c2:6e:1a:d7:31:25:36:62:f2:d1:f8:6f:ee:05:bb:96:
2a:2b:94:e0:ee:b9:0f:5d:b2:3d:21:15:9e:25:2d:1a:fd:26:
c7:92:f3:f3:e5:2f:34:5c:f7:67:f0:fc:d0:bf:0f:63:51:40:
56:bf:dd:85:44:2e:95:da:84:a6:d0:23:a1:40:21:b6:53:2c:
20:8a:2c:ab:76:14:cc:41:ad:9b:cd:5c:32:8d:67:ec:53:1a:
e9:1b:1b:0a:88:c9:e5:f9:a1:67:33:a9:5d:5c:aa:79:b5:0d:
82:e1:f6:a8:75:0a:a6:7a:71:ee:8a:aa:79:78:68:e5:c4:c0:
67:e1:a8:d5:06:fc:ba:0a:af:9a:2b:7d:5c:6d:89:86:9c:bb:
92:ff:37:79:ab:5d:41:c0:93:de:c2:2e:7a:0b:e6:f7:f6:fe:
3b:fd:b1:46:5e:02:7a:d8:ff:20:29:6e:14:f4:a4:5f:62:7f:
2a:8f:28:54:a4:9e:5c:fb:56:49:d9:24:de:ce:9c:62:73:ba:
32:08:e4:0a:1f:41:3c:a3:9d:d0:c1:d2:54:41:14:84:2e:36:
33:da:ee:2f:72:b0:eb:3d:a1:e3:91:12:34:73:22:87:70:2a:
8d:80:1c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:13 2026 by rpki-client