Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: zo/n2BYF4qS/ab9Gm/6rRY/NhU1tLcZ2TF3xR53rKP0=
Subject key identifier: 47:7F:E5:80:43:8A:A5:45:0B:7F:A6:8D:59:81:DB:8E:CE:26:36:42
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 019CAD224E9BBC11AAAC7AB16293A4426768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 0725
Signing time: Mon 02 Mar 2026 06:00:32 +0000
Manifest this update: Mon 02 Mar 2026 06:00:32 +0000
Manifest next update: Tue 03 Mar 2026 06:00:32 +0000
Files and hashes: 1: NtljOaIL1JwpiXLySyyvx4z_K-w.roa (hash: bTyr7ks2Z5N+mkb97LsrPJ8BXJjMNHN+ldTmfDHr8Xw=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: e8vjUYxERLC7/J69SeswBiR2xEz/X7f8uE0nSkJfTpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:4e:9b:bc:11:aa:ac:7a:b1:62:93:a4:42:67:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: Mar 2 06:00:32 2026 GMT
Not After : Mar 3 06:00:32 2026 GMT
Subject: CN=477fe580438aa5450b7fa68d5981db8ece263642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:05:54:c9:d5:ec:e0:ea:dd:51:14:cb:c0:
c9:10:cb:e6:7c:ba:68:82:be:3e:2d:e3:90:ba:4d:
10:af:63:3d:04:d3:88:ff:90:81:6a:78:c2:e3:42:
ea:bf:41:77:4a:f2:05:08:65:68:c9:52:b4:51:05:
07:b1:53:4a:42:1e:7a:0b:59:ad:95:99:20:c3:aa:
f7:b9:40:3a:d9:a3:8c:ac:d1:a2:82:be:82:6c:ec:
11:bb:a0:e3:69:40:bd:53:79:2a:d1:be:64:20:05:
7e:9b:a0:f5:a5:60:a6:61:41:3d:7b:d9:c0:d4:8e:
bf:b2:58:39:dc:23:1c:fe:77:9c:aa:2f:f6:30:5f:
9a:74:73:5e:47:c1:97:c2:87:63:25:53:2f:a3:bb:
ba:67:aa:7e:29:e3:19:2e:6b:a9:06:e9:34:de:05:
2f:e3:fa:18:32:4e:ba:19:fc:00:7f:42:76:28:b4:
d1:72:cb:4b:32:89:b4:cf:c1:98:ae:4e:87:51:61:
80:a3:0f:c2:35:21:36:1b:41:ee:db:05:92:11:54:
da:14:54:1f:74:57:aa:f8:b4:83:85:c9:2e:75:fe:
bd:d4:1d:36:2b:61:52:05:4c:39:e0:a2:42:f5:93:
4f:b8:a9:29:8c:55:fc:38:0b:3a:91:99:c8:92:b8:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7F:E5:80:43:8A:A5:45:0B:7F:A6:8D:59:81:DB:8E:CE:26:36:42
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e5:af:25:81:b8:0a:a9:0a:f8:36:b6:8d:4f:c5:8d:ab:26:
68:e6:6c:4a:3f:e6:18:11:8a:84:40:b3:fd:8c:c6:10:47:c7:
8e:de:8c:96:65:c8:d7:22:0b:22:52:09:41:6a:91:e6:aa:f8:
ad:67:e7:93:d2:87:e0:a1:1d:a4:11:df:a1:37:c7:6a:ee:e4:
39:39:e1:48:a6:8a:c3:6d:36:12:a7:fb:f7:29:29:b8:cf:3a:
6f:52:d8:37:96:54:5d:52:30:22:5a:7c:9f:85:ca:49:9c:8d:
58:cb:f8:57:c0:13:ca:03:8f:1b:23:bc:2e:c8:f7:c0:53:51:
80:82:8a:dd:3c:1c:ba:2e:99:2d:fe:87:1c:48:1a:74:96:ae:
5f:29:b4:8d:98:ca:0c:30:40:9c:05:84:3e:98:86:a7:19:c9:
7a:b9:c8:37:8f:a8:51:e7:70:66:db:f9:44:f7:fc:db:70:cc:
aa:55:d5:de:23:0a:19:f9:82:3f:1a:9a:08:b8:22:66:7b:81:
3e:d5:9a:a6:8a:8d:35:84:b7:13:41:c0:fa:e8:bd:a4:30:57:
23:64:12:e3:21:5c:d8:ce:d9:84:84:f4:8d:e5:ee:97:45:3c:
b3:f4:e6:e1:fa:2f:aa:74:4e:f9:4e:74:12:d1:f8:f4:71:52:
80:ad:a8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:09 2026 by rpki-client