Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
File: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft (raw, json)
Hash identifier: EkT1QXn7Vah191koH3IicZs+rJevFQtMd99dxfyzf8s=
Subject key identifier: D4:91:25:E7:23:21:F3:B9:4A:B2:B3:8A:34:28:4A:23:38:75:DF:E3
Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Certificate serial: 019CAA8FE088D21DD82D6738CFC195B3EAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:01:21 +0000
Manifest this update: Sun 01 Mar 2026 18:01:21 +0000
Manifest next update: Mon 02 Mar 2026 18:01:21 +0000
Files and hashes: 1: apX_x1EULE6OQInOykLn4fvDEsM.roa (hash: Wg0gBA9FtZ5MGhtWvzfiZrQJ2iSQBvq5YHTLEMZVAk4=)
2: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl (hash: VplhmbtHkHwTXGkt+2SEwz/xutPKkqfSK1WQWQI/jAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e0:88:d2:1d:d8:2d:67:38:cf:c1:95:b3:ea:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Validity
Not Before: Mar 1 18:01:21 2026 GMT
Not After : Mar 2 18:01:21 2026 GMT
Subject: CN=d49125e72321f3b94ab2b38a34284a233875dfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:87:02:e9:43:ab:57:64:f2:0d:44:fc:ca:
97:2d:52:4a:1b:a9:54:57:b7:85:5a:a8:b4:c1:88:
fe:65:95:33:63:1b:0c:01:5a:d3:51:77:9c:30:36:
4c:2f:ed:8b:97:f7:f7:1c:a3:44:2c:74:7d:42:5e:
a3:fa:57:19:86:fb:a0:d5:7a:bc:1b:c3:47:5e:b9:
48:5e:05:65:6b:66:0f:f8:ed:7b:ca:d0:85:bf:79:
44:f7:cb:08:05:07:50:5e:ca:0c:f6:15:7c:c6:68:
1a:40:29:85:8c:46:89:31:55:a5:cc:d0:2b:64:e4:
95:de:c3:b5:43:93:c3:c9:d8:46:19:46:b7:d1:6c:
a3:85:f7:91:19:d3:79:27:7d:38:48:63:2e:c0:fd:
08:50:56:07:54:01:25:4b:20:78:11:03:3a:fe:b6:
a9:7f:ce:94:83:bc:34:13:c2:b7:c0:f9:d6:77:e9:
a8:51:8b:b0:6a:c1:9a:2d:45:f9:26:6c:48:aa:c3:
98:0e:df:45:e0:17:fb:33:de:45:ef:06:62:d6:b2:
63:48:86:54:51:ed:a2:36:ba:50:de:fe:3c:c3:4b:
e0:ea:1a:d9:be:d0:a5:50:25:18:ea:15:95:e0:a1:
74:2b:72:8a:cd:17:08:e0:1f:3e:a6:2e:c0:e6:9b:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:91:25:E7:23:21:F3:B9:4A:B2:B3:8A:34:28:4A:23:38:75:DF:E3
X509v3 Authority Key Identifier:
keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:41:e6:cb:69:b7:b4:1a:93:62:20:62:60:1d:35:93:b8:61:
72:f2:85:f3:8c:38:89:1f:93:2b:93:c4:bd:95:b6:48:4f:92:
21:aa:c5:f6:b5:b6:f1:05:1f:ec:1f:28:41:d1:69:6c:d1:0b:
bc:d3:2c:03:2e:3f:03:bf:67:d1:eb:0b:ef:5b:e0:a3:ef:29:
d0:16:75:12:2f:8d:25:67:9e:e5:c9:69:c8:6d:d1:a2:01:14:
c9:87:b5:db:06:2d:2a:31:e0:cc:9e:06:f8:bc:4f:44:66:1c:
90:91:cd:10:91:d2:9f:7e:cb:95:6c:66:bd:5d:2c:08:5b:eb:
b5:d1:34:fc:e6:23:e9:c9:27:1a:04:6f:c0:52:e9:21:57:47:
f1:b8:5f:4a:0c:16:d7:35:aa:fd:a1:ef:8d:3a:a3:31:8f:e6:
20:aa:0c:01:2e:38:fe:32:40:12:54:6c:3a:49:40:94:01:8b:
42:dd:4d:ee:84:e0:43:61:7a:22:12:b6:31:88:a0:8a:6c:aa:
bb:68:b4:f3:d2:5c:14:53:01:a8:f6:cf:30:5d:4e:2a:a1:c1:
ec:60:98:40:05:46:e1:8e:15:84:03:a4:6c:b3:1c:16:46:87:
e5:42:fc:46:ce:dc:d6:84:56:cc:ca:66:35:c8:3f:b9:d8:35:
56:c6:1b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:36 2026 by rpki-client