Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
File: f9gGjnNZlrir5x24LODWupZcJTs.mft (raw, json)
Hash identifier: l3o9nx/8FcOpfcYrUc2+ZJ2+i4JWV2HaGcOTcgKqfMU=
Subject key identifier: EE:77:C2:AB:E4:7D:E2:63:DE:06:0A:3E:2F:5C:70:2C:38:DD:7D:13
Authority key identifier: 7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
Certificate issuer: /CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Certificate serial: 019CA9B359AC4DA4BC6ED43D4BB2399E0936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
Manifest number: 26
Signing time: Sun 01 Mar 2026 14:00:29 +0000
Manifest this update: Sun 01 Mar 2026 14:00:29 +0000
Manifest next update: Mon 02 Mar 2026 14:00:29 +0000
Files and hashes: 1: 4wayKTDL0C1-3fX0fDk8_7nVVzE.asa (hash: vPLSw9x0tUrEHh7KFV3i9yLuIjiZTpCl5KAxhMoqI9Y=)
2: FL1sqcRejDIMSh0sMhL_ZqJw4wM.roa (hash: cBRPTc3S/Wcw8/oeYxpadl2du6Hf1WSqA+6+KI3HY8o=)
3: f9gGjnNZlrir5x24LODWupZcJTs.crl (hash: T5aHw46FYzsYo2x7ZwAohpLDsXGtSve9QscEllnCkhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:59:ac:4d:a4:bc:6e:d4:3d:4b:b2:39:9e:09:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Validity
Not Before: Mar 1 14:00:29 2026 GMT
Not After : Mar 2 14:00:29 2026 GMT
Subject: CN=ee77c2abe47de263de060a3e2f5c702c38dd7d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:5f:d7:bc:a8:21:09:0c:84:60:16:49:f6:
12:03:64:6c:64:69:98:48:21:62:7b:91:63:b0:65:
47:fe:96:9f:34:cd:c8:fa:2f:7b:f3:f8:f7:b8:32:
3e:4a:4d:c5:2b:9b:d3:b4:66:77:0a:76:42:8f:8f:
af:50:17:a7:3a:36:a8:30:8e:be:8b:32:bf:fe:9a:
09:0f:03:29:b4:08:20:2c:14:2e:b9:d3:c9:f9:92:
f7:ec:4f:20:a8:31:06:b2:40:a6:1d:6d:6c:9e:08:
de:9d:4d:2a:b7:4e:bb:99:23:21:14:ce:84:02:03:
e4:04:f7:02:d9:5b:3b:62:c6:f0:85:44:e8:55:c5:
0d:d6:b0:62:c9:c2:67:c6:41:5d:73:f6:83:f7:d7:
3f:d0:29:bc:5a:45:0c:65:60:6d:da:7e:59:ab:6a:
8d:db:55:4a:a5:c2:8b:fc:b5:bb:e1:64:28:c4:a0:
a0:8c:bc:06:1f:b1:77:2c:3a:de:08:e2:c9:05:b1:
bd:bd:f6:41:6f:19:4f:4f:0b:90:ac:ea:06:0b:dd:
ab:ca:8d:73:d3:65:ea:33:71:23:0e:98:36:91:e4:
fe:5a:36:08:91:af:50:39:c1:d4:57:2a:3d:d3:1d:
96:29:9a:0e:8c:c9:d5:35:d9:83:e0:9c:02:b8:4b:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:77:C2:AB:E4:7D:E2:63:DE:06:0A:3E:2F:5C:70:2C:38:DD:7D:13
X509v3 Authority Key Identifier:
keyid:7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:55:9a:cd:0b:68:17:7c:a3:b5:aa:d4:a6:69:96:c0:47:8b:
f3:ef:f2:8b:c5:8d:cd:3a:db:e9:77:78:b8:0f:aa:9a:f5:66:
a8:9c:5b:9d:01:95:a0:7a:ee:1f:c6:49:38:fd:af:0c:c6:ef:
1d:8e:cf:19:61:3c:6c:2a:dc:d0:54:f6:be:a4:95:8b:67:41:
bb:7c:fe:39:49:d0:73:a5:87:fc:aa:d9:46:40:3a:b8:a0:99:
ba:5e:de:bf:19:dc:f5:e4:fe:8e:85:af:c4:8d:fb:b3:24:63:
d4:96:e3:e5:f2:d5:6d:a8:05:04:02:dc:9c:f2:fd:dc:8e:04:
30:f6:71:c0:fc:1f:e1:7c:fc:c7:22:6c:5f:58:f5:7f:c9:17:
9c:e9:78:a3:62:5d:de:d9:2a:2b:41:f1:7b:69:4e:f4:be:96:
fd:c0:b4:77:f1:4f:d1:bf:4c:11:f0:41:78:22:e2:7c:23:13:
4b:3a:ef:02:98:a9:d5:38:62:15:57:c5:30:0a:44:dc:95:84:
34:3a:48:21:19:df:d2:68:ad:74:93:30:e4:de:a0:7e:ba:ff:
fc:77:42:3d:24:ab:71:06:39:8e:07:82:51:7c:05:9b:3c:a1:
a8:71:bc:2f:ef:7e:ab:80:0b:04:39:bb:a6:1c:95:6c:7c:07:
ec:12:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:29 2026 by rpki-client