
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
File: _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json)
Hash identifier: EEk0faVLTxeYbPnyU7a3k/qA09FW9q5QRGeIfIAZFMI=
Subject key identifier: 93:A8:F5:C4:C1:C6:E6:1B:2A:64:43:B0:0C:77:B8:79:85:E1:ED:F7
Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
Certificate issuer: /CN=ffd61ac8c56e38fdf61238036c73547270034631
Certificate serial: 019CAA900D9515938F7BCC8DAD92A1B738E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 18:01:33 +0000
Manifest this update: Sun 01 Mar 2026 18:01:33 +0000
Manifest next update: Mon 02 Mar 2026 18:01:33 +0000
Files and hashes: 1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: SPMLIrEVlQvWNAtIqS2g57QSVi8LYQh/RyLzC2oAZM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:0d:95:15:93:8f:7b:cc:8d:ad:92:a1:b7:38:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631
Validity
Not Before: Mar 1 18:01:33 2026 GMT
Not After : Mar 2 18:01:33 2026 GMT
Subject: CN=93a8f5c4c1c6e61b2a6443b00c77b87985e1edf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:dc:1d:cf:04:6a:09:2b:a1:96:85:1d:20:
c7:fd:87:ba:70:ec:ac:19:fb:76:b5:e8:13:ec:7f:
4c:04:2d:8a:e7:64:9a:fa:bd:95:a0:38:a8:e2:0a:
40:44:2f:18:89:53:9d:70:d3:85:2f:f8:9d:18:f3:
7d:06:ba:fa:83:a7:f2:0f:af:d2:fd:03:37:0d:0b:
c9:d4:af:0e:1b:57:33:a3:3c:95:4d:2c:2c:0d:af:
a2:f5:d3:f5:32:26:02:5a:75:1d:23:a4:2e:0f:3d:
53:02:77:f9:98:8b:6a:b1:bd:d2:a5:41:89:6c:c7:
0f:5f:5f:e9:c9:7a:81:7d:89:c3:fe:df:8c:f0:4e:
f4:86:3e:63:ce:1d:7c:68:78:f4:71:bc:ea:42:ad:
ce:d6:dc:bc:2b:d5:f4:18:24:7a:f2:62:47:53:0c:
99:f9:74:26:d3:33:7e:62:ca:ad:87:0a:74:f4:47:
86:3b:40:ec:e6:a9:9b:2d:cd:f7:bb:9f:11:ce:95:
99:1d:53:26:11:86:43:b4:89:94:12:96:8a:35:ab:
41:db:ae:b8:4c:1e:b2:07:07:a5:b7:c9:bb:91:0b:
29:23:a9:a0:9a:03:78:ab:21:85:01:2d:6d:c6:f0:
bf:22:54:3a:24:b5:a9:97:1b:05:26:b6:76:60:b6:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:F5:C4:C1:C6:E6:1B:2A:64:43:B0:0C:77:B8:79:85:E1:ED:F7
X509v3 Authority Key Identifier:
keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:48:8f:ee:87:42:11:83:e5:57:86:96:fc:99:48:35:c2:cb:
35:31:2e:be:d4:53:f3:a6:b0:2b:e8:77:61:6e:42:f0:df:67:
02:17:70:3b:37:bd:2d:43:d2:58:9d:c6:22:64:4a:f1:53:eb:
fa:46:e3:c2:e8:37:f8:e5:0c:81:4b:b3:b0:7b:ab:f8:7c:3e:
3d:e7:f9:7a:d7:99:e9:0c:6c:ee:f9:10:33:14:8e:02:3b:b7:
82:50:f5:23:d7:e0:52:50:8e:9c:be:f0:d5:55:1e:fc:ed:61:
bb:05:f9:44:6c:76:49:14:ed:30:55:8f:14:0f:38:51:0c:d3:
30:0a:de:48:61:55:f0:86:a4:6f:f8:29:b3:69:e3:4b:9e:38:
2a:c4:b4:77:75:8a:5a:de:c2:98:96:ce:d5:4c:99:ae:c2:19:
aa:e1:02:0d:00:7c:80:79:e0:11:1d:f0:06:7b:1a:10:51:08:
63:b0:c1:d1:b2:cf:b3:53:97:d1:6d:e5:24:bb:9e:97:6a:48:
bf:1d:54:f2:c6:13:45:4d:48:fe:db:a3:b3:85:4b:f6:33:5a:
03:57:8b:8c:d2:d1:bc:a4:ee:26:a6:c1:fc:9f:6a:66:b6:22:
de:7a:68:02:e0:c9:f8:5a:b2:18:ce:5e:b9:f2:4b:b0:dd:0e:
d6:67:ac:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:33 2026 by rpki-client