Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
File: 9vojpSZFyW2w3bFNJPa08FWfvis.mft (raw, json)
Hash identifier: nkJdr7g9XUwnlMS0UQ6j1anAFWOknFPRDDZ/8O+0gn0=
Subject key identifier: 0A:5E:B6:12:BB:50:8E:F0:3D:4C:A4:24:2E:A3:40:7D:1C:2D:74:58
Authority key identifier: F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
Certificate issuer: /CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Certificate serial: 019CAF479F353E1E5584A117121F7DFD723B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
Manifest number: 48
Signing time: Mon 02 Mar 2026 16:00:32 +0000
Manifest this update: Mon 02 Mar 2026 16:00:32 +0000
Manifest next update: Tue 03 Mar 2026 16:00:32 +0000
Files and hashes: 1: 9vojpSZFyW2w3bFNJPa08FWfvis.crl (hash: OywdG5D0SQZgFJ/jKjIsevD5bQuqcHu6AlCXMh5qxjA=)
2: _24DoKc65Eo3K8s-8r6RRL6egqM.roa (hash: adFtcGa6MNyNtKQFNgClfvE2+zVf3OMdW8oYlRY9eEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:9f:35:3e:1e:55:84:a1:17:12:1f:7d:fd:72:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Validity
Not Before: Mar 2 16:00:32 2026 GMT
Not After : Mar 3 16:00:32 2026 GMT
Subject: CN=0a5eb612bb508ef03d4ca4242ea3407d1c2d7458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:eb:59:2a:88:5c:32:cd:01:3b:21:0e:10:
e0:72:ba:d0:33:56:0e:37:65:08:9e:43:9b:2f:01:
fb:cf:72:f5:33:cb:9c:e0:80:7c:ba:e9:93:9a:7e:
ca:b3:69:24:e1:04:69:b5:a4:79:c1:f9:66:2a:4f:
12:41:ca:5d:50:4c:e1:92:f0:d0:ee:9d:9a:38:13:
54:85:cb:d9:71:a0:b6:5e:9e:4e:1d:59:cd:f3:39:
d0:fa:e9:14:5b:46:c2:61:30:ce:3f:5b:c3:44:0b:
f4:2f:64:fa:77:7e:36:97:39:bc:23:b1:97:11:67:
e4:bf:be:69:df:22:b9:b2:16:b0:65:6b:29:52:54:
88:c4:2c:31:57:fb:f2:40:5d:a1:8d:99:1b:dc:ac:
88:86:11:66:22:b2:47:b2:ed:1e:85:aa:c1:52:5a:
e2:76:af:56:ca:7b:55:11:54:40:72:c1:ef:37:a0:
a3:f0:a2:47:03:fd:c5:0c:30:4d:ff:44:25:ae:d3:
02:ae:2a:f0:8d:49:78:2c:e5:23:10:1e:08:3d:76:
3b:f5:4f:d3:2e:44:8b:79:53:a7:92:20:35:24:7c:
2d:02:59:84:34:5f:30:07:7c:94:ee:e4:ae:45:91:
22:5c:20:eb:6c:87:83:0d:dd:cc:8a:a6:6c:bd:7f:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5E:B6:12:BB:50:8E:F0:3D:4C:A4:24:2E:A3:40:7D:1C:2D:74:58
X509v3 Authority Key Identifier:
keyid:F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b5:a7:ae:9d:86:80:39:05:7c:42:20:1b:1e:c7:b0:0f:a8:
d0:64:7e:3f:2e:d3:f4:38:af:74:f3:c3:e7:17:f9:39:b1:bb:
ea:e3:19:93:57:64:c9:90:db:a3:d6:aa:f0:1a:25:2b:ab:06:
4b:00:0f:4b:15:02:61:91:7a:19:0d:7b:51:af:7e:1f:11:5d:
ed:fc:9a:11:e0:e5:3b:13:2c:a8:c5:81:b0:48:2c:99:a9:1c:
77:88:72:1e:db:25:96:ef:e4:8e:76:bd:f5:94:94:ec:16:6f:
e2:fc:06:a4:0e:9f:8a:29:eb:b5:ad:0b:65:ff:6e:8e:a7:a3:
36:77:dd:e3:15:a3:b8:1a:10:56:a6:9a:e5:eb:c1:00:f4:1b:
5f:91:67:75:d8:a8:69:a1:ea:77:a1:01:dc:18:60:82:22:d8:
cf:75:9d:c8:ba:ab:6d:4d:fa:0c:57:67:9a:3f:f0:f2:b3:a8:
e7:7f:73:d0:fd:a4:a6:e8:7f:9c:54:5c:5a:4b:05:62:88:5b:
59:dc:5b:b8:fb:40:3f:cb:72:a0:3a:aa:74:80:e8:9f:b2:f8:
00:3d:6f:e7:19:5a:76:e0:a2:0f:b9:43:e6:27:cb:99:4c:59:
21:ca:b1:43:d2:80:a7:ae:95:ad:bc:2f:99:34:3a:da:6d:b7:
6a:59:bc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:19:34 2026 by rpki-client