Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: Wae7VdmchA/4R4d7oeucx+iIzqn3rovj8gP8YR3N5eY=
Subject key identifier: C6:49:01:74:9E:A0:EB:A8:07:B9:AB:31:42:9D:31:3B:FA:05:EA:2C
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 019CAB6AF1F927289930E54C8D47463D9E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0C9F
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: BdS5mfLqJe/jU4XCl1NIoWZjk0jje7dtzOGyDRCX7F4=)
2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f1:f9:27:28:99:30:e5:4c:8d:47:46:3d:9e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=c64901749ea0eba807b9ab31429d313bfa05ea2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:cd:b2:18:4d:53:99:fb:bc:d8:dd:5d:db:
c9:03:65:aa:d8:3e:1e:8a:8c:8c:0e:79:1d:42:05:
d8:4d:36:f7:11:41:26:27:2b:20:bc:c9:00:14:a1:
08:cd:a9:54:9f:08:6a:6a:a3:15:11:c3:43:4c:6a:
a2:c8:82:c4:04:66:02:25:07:47:65:82:79:cc:8c:
78:5a:0c:39:ec:a1:d9:2f:78:66:74:99:ea:b5:a1:
b9:35:0e:56:20:67:17:94:ae:ec:30:0e:48:10:fd:
36:12:ec:ac:f7:dd:c9:24:af:70:3e:78:68:7f:d1:
6c:f1:1a:93:6e:62:d6:92:34:a4:33:ce:c7:e0:97:
9d:5d:fd:c8:69:e9:09:c0:89:da:8d:f2:5c:37:a2:
d9:98:eb:71:9e:4a:4d:16:22:3b:10:8b:c8:1e:d7:
39:ab:2b:0a:78:ff:11:e5:ab:1c:ee:de:45:aa:98:
4c:9f:73:19:3d:98:9c:7e:10:ff:22:3d:0e:7d:1b:
55:e8:d0:73:8f:42:bb:cc:f8:e7:f0:f0:7b:4a:b9:
bf:0c:d1:87:fb:35:13:ab:26:af:03:84:29:29:73:
f6:5e:eb:7f:4f:6a:98:56:59:f6:f7:60:e4:93:08:
56:b6:bc:cc:8e:76:bb:03:da:b3:cf:4c:a9:34:35:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:01:74:9E:A0:EB:A8:07:B9:AB:31:42:9D:31:3B:FA:05:EA:2C
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:37:d6:2f:d9:fb:76:29:44:4e:a1:88:ea:1f:2f:4e:f1:5a:
7d:5a:99:1c:4e:8f:2d:79:d3:42:01:be:97:ff:e2:16:44:20:
5d:6a:89:61:62:79:38:2e:d3:7f:e5:0f:17:76:fd:e7:df:fc:
30:fc:c1:50:83:5d:ce:b8:97:cb:c0:6f:ab:43:db:8a:15:51:
04:46:27:e1:e4:81:b4:b3:38:88:a2:28:85:d9:eb:74:2a:02:
a1:94:3f:98:ed:36:94:6c:94:62:bb:f1:c6:72:68:88:24:cb:
74:01:f9:5f:65:57:2f:ff:e5:91:c5:85:bc:20:ce:75:ab:77:
33:12:34:24:1f:4d:3c:71:46:4b:ff:5f:c7:7c:b7:52:e0:d3:
a9:fb:ff:4a:9d:47:9e:fc:df:7c:04:2e:1b:9f:b1:3d:1d:24:
a4:a0:07:cf:33:05:7b:23:85:f5:bd:e7:58:f6:5f:f9:9a:b0:
a4:4b:b3:69:f7:4a:ac:08:71:de:2f:46:04:ab:f8:2c:13:0f:
13:39:5a:f6:d0:3b:35:b9:18:54:5f:79:83:32:a3:c8:7d:d8:
84:84:a4:04:15:4a:9c:68:60:e1:d3:2e:33:95:52:6b:07:64:
90:19:59:c5:8e:6c:aa:32:94:ed:c6:51:7d:9e:bf:8c:e4:83:
3b:37:3a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:23 2026 by rpki-client