Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier: aaVfu3mz8H3RZq4rcADEJx6OPUP8giSK80gkZzEsfiI=
Subject key identifier: B1:B7:46:E4:46:BE:E7:6B:BB:1A:6A:5D:58:80:5F:29:10:A7:DC:53
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 019CABD96A8FA55C1C85D02AF840262CC45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number: 1241
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: HbtH5dk1HB86SBK5ixsVLktIugUH1wIqao1C18W5oqI=)
2: Q4ZIJI1vYpM5qyo29zUc5N-1r8k.roa (hash: 76giCIoxYSJ7Qzdp7ynPuA05qyt7r6q9BXWslTdrOTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6a:8f:a5:5c:1c:85:d0:2a:f8:40:26:2c:c4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=b1b746e446bee76bbb1a6a5d58805f2910a7dc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:90:ed:25:fb:69:71:bd:3e:a4:76:57:ed:
86:01:b9:38:28:bc:5e:be:9b:f3:ba:4c:f5:59:69:
6d:36:7d:d1:e7:11:64:50:73:3d:64:ce:f0:7e:91:
27:5a:b3:51:46:27:de:ab:fd:3e:99:4a:a9:55:23:
5d:3b:a4:8a:01:3f:7c:74:bf:71:3e:c6:05:7e:71:
ef:e0:44:5e:56:ac:3e:c0:36:50:09:4d:0a:d5:bc:
56:57:91:12:63:b0:5f:10:fb:f1:e3:aa:72:bc:e9:
72:c5:17:a2:fe:66:ba:11:04:b1:d6:f7:9c:8f:bc:
e3:75:26:99:ef:0b:95:40:98:93:1c:4a:a0:d3:97:
45:0d:6d:d1:ed:cd:34:72:88:69:54:b2:95:b1:d5:
27:d0:91:b6:5f:d5:32:01:77:2e:4e:0c:32:17:d0:
be:9f:50:dd:be:73:dd:ca:b1:b6:af:0a:f9:92:4d:
07:21:e6:cc:28:9f:09:78:96:fd:e2:74:66:e4:19:
ca:40:a8:de:4f:b8:78:5c:78:4c:7d:6d:d3:10:16:
7b:31:05:b7:b9:d2:af:bf:e6:ed:28:3c:2a:18:ab:
05:e1:5c:1e:2a:33:2a:73:29:15:3e:cf:98:4f:2d:
2c:52:3f:56:15:32:2d:c7:3e:f7:28:a2:16:23:3c:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B7:46:E4:46:BE:E7:6B:BB:1A:6A:5D:58:80:5F:29:10:A7:DC:53
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e1:4a:2e:c0:2e:37:79:b1:e8:c3:3e:4c:27:38:01:2f:68:
54:9f:42:e6:7a:60:80:4b:c7:9c:cc:db:a2:66:01:bf:64:f8:
45:39:7e:8f:92:2a:92:9c:e9:fb:c1:ca:62:9c:1f:cc:fd:79:
f2:14:e3:bc:f0:34:49:34:29:16:e1:8a:12:f9:fa:19:d3:f1:
2b:2e:6e:58:5f:0c:e9:4c:17:92:24:a5:c0:4f:a8:d5:4f:ff:
41:b5:46:2a:b2:ba:96:a8:4e:0c:3d:84:46:40:77:20:15:6e:
3d:bf:d8:a0:99:cd:58:75:8e:3a:52:f0:99:9f:ec:17:26:fe:
c9:7b:7c:d7:55:29:b3:cd:24:08:03:d6:d4:c1:2d:d2:50:7a:
8d:64:2a:1e:4e:3d:ab:09:a6:f7:5a:4f:c3:e8:81:09:a5:fb:
d8:73:87:f8:a0:be:b7:a0:b9:1d:a7:f0:99:99:79:13:3c:d8:
e3:9a:c5:4b:d1:b2:4b:2d:63:bb:eb:09:e3:48:15:8f:ec:86:
d5:9f:a0:8f:17:83:d1:21:33:1b:0d:74:2b:81:85:72:e7:66:
16:7d:00:54:bd:8d:41:9a:22:63:7b:43:b1:0c:a3:d6:58:2e:
6c:88:ef:92:ef:fe:84:f3:84:15:69:8c:0b:85:5f:16:94:29:
26:43:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:16 2026 by rpki-client