Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier: j1BN4m+7PR9r4uv+ULGSZLu6uNV7tbyCDm4c+3TDio4=
Subject key identifier: 18:9A:A3:1C:0D:44:A9:EF:BD:81:F5:EE:C7:6F:1B:AF:C3:B4:CB:02
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019CADFE9056F8808557EBAC3487A7E55F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number: 18DE
Signing time: Mon 02 Mar 2026 10:01:07 +0000
Manifest this update: Mon 02 Mar 2026 10:01:07 +0000
Manifest next update: Tue 03 Mar 2026 10:01:07 +0000
Files and hashes: 1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
2: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=)
3: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
4: 9QOoNpd76OPVl49TOCbIH5K-Xuc.roa (hash: iHslUv59RlEtWqhiDG50P5ptUXczZiGq5UnFqrvblIU=)
5: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: 1fVEnlfn9skn4+a5226srNebtDp4SJjfm9QEyDS9pr0=)
6: Xlo2dAjL9Nrixz0iYa0SAY5SYBc.roa (hash: Bg+pB+Sxi3uvjFsg12Ez9WbynlaVnSIe2mie+DFh+2c=)
7: ih0mxzFH0MUiJNPNZCziaJJuGMU.roa (hash: Xd9Xc8lt28a42B6a+zDM/Y1fYiUSVn12an9g9QH+NKk=)
8: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
9: wUIQuE5RAl6yjUP9k5UHyxLRIPw.roa (hash: NCMtFKefqHShmwgJRWPFU+3g5xSc9WX2hSElA5v9Foo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:90:56:f8:80:85:57:eb:ac:34:87:a7:e5:5f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Mar 2 10:01:07 2026 GMT
Not After : Mar 3 10:01:07 2026 GMT
Subject: CN=189aa31c0d44a9efbd81f5eec76f1bafc3b4cb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:1d:b8:cc:6e:24:db:2f:62:ee:bf:09:d7:
89:03:35:cb:c8:3a:d1:a1:e9:bb:95:c1:5b:cc:ea:
fd:2f:d2:d5:e1:ed:23:cb:5d:3b:ca:d6:b2:10:7f:
c0:95:53:31:e6:67:88:80:92:5b:ad:3e:0c:8e:33:
15:d9:49:6a:ea:61:43:cc:b7:ca:9b:80:4c:8f:46:
b0:f0:f4:5d:33:2e:db:5c:5d:60:f5:2a:32:f6:0c:
13:25:d5:3b:94:f7:9b:92:00:22:f5:f2:c2:24:f3:
70:6a:ea:1b:e8:d2:06:6c:93:5d:11:55:fd:e8:43:
4f:13:2c:cb:17:6d:12:ce:9c:11:f3:58:bc:c3:6b:
fc:a7:5c:b8:4d:67:4f:72:60:bf:51:cb:de:df:31:
2c:2f:cb:f7:56:13:4f:04:8a:0f:f1:28:77:28:b8:
33:82:4b:8c:85:88:1d:e3:6e:fa:ce:7c:b8:e7:84:
ac:1a:db:86:d9:70:4e:c7:7d:12:17:24:82:fc:7a:
ae:00:ef:bd:51:6e:a0:74:ab:3e:1b:f1:20:19:f2:
2e:80:cf:99:45:bb:6b:68:5a:22:2c:c3:fc:f4:99:
ee:e1:ff:0a:d6:1f:4d:1d:42:db:70:fc:bc:71:54:
f2:c7:0f:a9:4d:dc:10:dc:0c:12:63:07:e5:93:cb:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9A:A3:1C:0D:44:A9:EF:BD:81:F5:EE:C7:6F:1B:AF:C3:B4:CB:02
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d3:96:22:8b:22:20:33:01:53:65:cd:28:f5:3c:e5:7c:b6:
15:42:51:b3:f7:3f:69:3c:e0:cc:fa:9b:90:d7:59:66:2d:9e:
54:47:ec:28:d3:a8:83:85:2d:34:96:5f:e6:3e:e4:c1:2f:b6:
f5:3b:c0:7f:85:7b:f1:7b:89:5f:f2:92:78:4c:49:56:42:8c:
ac:9d:9a:49:ff:b4:bf:a2:31:a2:1f:7e:7f:87:cd:4c:11:df:
4e:17:64:b7:3a:e2:2d:cd:19:c5:4b:cb:39:3f:a6:a1:46:f0:
22:28:8e:30:7f:59:49:98:65:2e:9a:1f:a4:25:12:22:7b:0c:
86:0f:91:10:40:bc:4b:86:9d:4b:50:b2:85:60:26:82:54:3c:
2a:e0:f6:43:9d:f2:c8:ab:03:e1:df:84:59:77:8d:3e:f4:04:
fd:60:3e:60:51:b8:85:8f:64:bd:11:24:d6:f8:d2:57:62:2a:
99:50:aa:1d:6d:a3:1c:63:12:eb:50:7a:36:93:33:2f:e7:9d:
3d:ff:ae:2b:94:78:33:6b:9e:99:4d:b0:2e:02:44:5a:0f:88:
87:06:39:8b:5c:da:be:20:d2:8d:9a:6b:37:85:53:18:9f:6c:
aa:cf:c8:e0:21:12:f9:69:15:a9:18:9a:60:62:34:71:68:a1:
5f:8b:be:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:41 2026 by rpki-client