Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: nCG1xRQBofIX6yLr7cMJ/Agy7/H5WeGYtBciMm0WqZI=
Subject key identifier: AA:7B:A5:D1:74:FD:14:39:43:64:89:59:55:0E:12:B0:00:39:0E:64
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 019CAE35E825640DF809C453CF86BFE8869A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0F63
Signing time: Mon 02 Mar 2026 11:01:34 +0000
Manifest this update: Mon 02 Mar 2026 11:01:34 +0000
Manifest next update: Tue 03 Mar 2026 11:01:34 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: jRKG+b15pnajnlrOVnpkWFVV6GTkkFpfCjYwzoa3zoc=)
2: i1q-5ppGHZKen0mg4iu01mYnQM0.roa (hash: sIuyBrADQrDmfb4gofoZhceJ2ljMvz5t7ov19sRqXKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:e8:25:64:0d:f8:09:c4:53:cf:86:bf:e8:86:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Mar 2 11:01:34 2026 GMT
Not After : Mar 3 11:01:34 2026 GMT
Subject: CN=aa7ba5d174fd143943648959550e12b000390e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:97:a0:6e:08:64:7b:a6:ea:fe:f4:85:fc:
bd:39:a6:27:20:57:fa:9e:e6:05:89:ac:f8:05:7d:
37:d0:3c:3e:00:ed:d9:98:2e:91:ef:d6:0b:8e:f5:
b9:cf:66:0d:1a:de:a0:d4:a6:aa:55:c1:41:1b:78:
d2:57:06:47:a5:41:24:7f:5c:ff:5c:e4:be:fb:0c:
86:ca:35:61:1f:6e:d7:5f:ff:7e:a1:71:22:ff:23:
cd:67:1f:69:ef:4a:dd:99:0a:10:91:22:de:0c:4c:
85:4a:08:36:72:62:91:89:2d:23:be:eb:41:08:04:
4a:a6:d3:b0:79:92:a6:f1:5e:81:27:d2:94:19:08:
1a:bd:bd:72:07:cd:26:c6:d5:1c:90:13:b0:6c:83:
9f:42:ea:48:b3:99:50:06:f4:6d:a3:c4:4a:e0:2f:
49:dd:99:23:b4:5f:cb:03:04:8d:d2:00:97:f2:59:
29:98:66:9b:ab:d1:fe:85:d8:db:7c:ff:51:9d:fa:
f4:17:4f:48:f3:9c:6f:f5:c8:65:56:21:eb:07:fd:
61:7e:80:0c:da:b7:37:36:23:d1:7c:1b:a0:6b:3b:
88:b4:b0:9f:94:86:c6:9a:f1:5b:80:64:77:6d:6f:
ea:c4:e6:af:e2:7c:1a:d5:14:0b:5d:dc:12:bd:83:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7B:A5:D1:74:FD:14:39:43:64:89:59:55:0E:12:B0:00:39:0E:64
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:dc:02:81:4e:48:d9:69:94:26:53:d2:43:74:0b:0c:22:49:
93:5d:fc:65:d3:12:33:1d:f6:73:9f:e0:7d:ca:5c:e2:ec:c7:
05:9d:a2:e4:3a:79:26:a2:b1:25:04:ef:f3:fd:fd:62:4e:86:
66:43:31:df:87:cf:de:7b:5f:9d:4d:56:db:5a:ee:07:8e:2e:
6d:a6:60:b4:14:29:52:53:21:65:8c:04:56:2c:0c:8f:91:6a:
50:4c:fc:41:db:d6:35:88:20:aa:c5:61:de:ca:8a:f8:65:ba:
6b:c7:32:43:8c:44:2a:22:fb:a7:cd:2c:5c:a4:26:18:7d:7c:
31:70:bf:5d:f2:ca:35:42:3a:8d:80:ea:bf:eb:6b:43:61:f1:
8e:07:d9:ed:12:9b:a4:e0:f7:c8:52:c1:88:8a:5b:b5:8b:82:
c0:33:cd:ea:47:99:13:84:a1:c8:bd:c1:df:6d:b8:56:f7:d3:
be:b1:a8:29:7d:35:ea:a1:3e:fd:a9:48:56:9f:f5:94:b5:6d:
88:82:da:d0:71:b7:20:d3:33:df:24:5c:2e:71:96:e8:f9:72:
be:2b:1b:e5:13:70:17:ef:c1:4a:4d:f4:56:0e:1a:dc:e7:79:
7b:5a:71:54:4f:81:c5:87:47:06:53:ae:63:6d:a8:63:e3:02:
26:13:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:44:56 2026 by rpki-client