Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: NEWP3rZI9VXeEvTyGSQlcBQda7ClUqthA7WOVfr/C60=
Subject key identifier: 38:89:E6:C8:E7:5F:58:B8:79:B6:4F:D3:3E:9D:74:21:19:D8:90:95
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 019CAB348A2DFBC909BF29FA48BB1660F371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 07E0
Signing time: Sun 01 Mar 2026 21:01:12 +0000
Manifest this update: Sun 01 Mar 2026 21:01:12 +0000
Manifest next update: Mon 02 Mar 2026 21:01:12 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: 9zd1IXm9WN70avxd2+aX2dzaZGR//y5cAyoN06kUd18=)
2: bOWNnQQVbM5f-UYg-QV5mDSs02I.roa (hash: ZHzPwAfR/0qTdqa3UIdlS72kIIMUcV3Y09FsBOM1tW0=)
3: c3mRC2zskUzL_6AdndC0KZP1S14.roa (hash: BCkPN8vUy3sfeplOO5KxZSim29zaECBgi+38mZOABLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8a:2d:fb:c9:09:bf:29:fa:48:bb:16:60:f3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Mar 1 21:01:12 2026 GMT
Not After : Mar 2 21:01:12 2026 GMT
Subject: CN=3889e6c8e75f58b879b64fd33e9d742119d89095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:a0:63:bb:d3:0e:6f:0e:61:62:b2:39:03:
fe:20:bb:ab:52:a7:75:d9:92:d7:11:e6:83:b7:72:
bb:33:20:25:f7:b6:4c:1c:e9:6c:58:91:6e:36:40:
94:18:9f:00:0b:64:16:ed:22:6b:5b:a4:40:1f:67:
93:04:99:dc:a4:fa:3c:12:0c:0e:21:6d:f3:94:e5:
17:37:e8:fa:44:c1:ae:6f:47:a6:8b:57:d9:a7:9f:
b2:ac:f7:cc:68:83:01:ba:06:75:ba:3e:76:23:02:
4f:f0:e1:ae:16:3e:94:0e:7d:27:c0:46:5d:a7:b8:
68:df:fb:d9:33:3d:26:1a:30:03:29:fa:9c:11:96:
8c:36:3a:44:d3:24:f1:ba:dc:80:a9:51:16:88:66:
aa:a6:9b:3f:f9:91:7e:12:58:84:18:5b:3e:eb:56:
14:4d:47:63:ed:b4:5a:2b:04:06:bc:de:da:9d:1b:
93:72:ec:89:a1:15:f3:d9:41:52:b0:84:b6:77:d3:
13:f1:d8:2e:cb:30:e0:f1:4f:47:39:c9:1b:d5:e8:
71:29:62:dc:e9:ec:9f:3a:09:5d:d5:97:c2:b6:4c:
35:a8:f3:75:ef:05:6f:d3:94:60:3e:a9:f5:f9:49:
75:b7:b6:c0:33:bc:56:4c:d4:2a:d2:a1:a2:1b:77:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:89:E6:C8:E7:5F:58:B8:79:B6:4F:D3:3E:9D:74:21:19:D8:90:95
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:72:e6:37:70:6c:ea:74:96:69:ad:da:b8:7f:cd:07:e4:42:
fe:4b:41:64:61:f3:e3:89:a7:2b:3d:63:cf:1b:34:15:72:d3:
55:eb:f2:b8:ba:dc:b6:55:61:63:89:9d:f5:54:40:df:86:96:
3f:89:79:b3:13:32:5f:59:a2:94:29:5a:f0:dc:f0:a4:84:d0:
be:17:db:31:60:ee:eb:c0:c6:e8:01:54:0d:ca:11:3b:af:a5:
f2:4b:81:43:c2:b4:95:1a:7a:cf:8c:e6:68:6c:4b:c2:d4:71:
b1:d4:02:99:2f:6f:bb:72:8a:67:1d:16:a2:c8:1b:d3:12:1b:
0f:2d:d7:e7:ce:67:e9:17:8f:2a:c8:4b:f2:3a:10:bd:b1:1b:
2a:3f:70:d1:74:0d:6e:39:18:cf:98:6a:b1:a3:4b:bb:e3:8b:
a8:ab:ce:39:1f:6d:c4:2c:9d:d9:4f:83:42:b8:fd:9d:4a:9e:
01:1c:86:14:ea:05:53:46:93:0b:0c:07:14:c5:b9:4a:09:d4:
d8:a9:6b:5d:08:ca:79:89:18:2c:c0:20:f2:97:a0:19:15:7c:
20:0e:dd:5f:af:ff:1a:e7:bd:23:df:7f:e0:4e:8d:6c:97:33:
d6:de:76:8a:0c:ab:02:32:33:e5:29:79:ee:2a:1f:1f:ea:07:
28:db:45:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:27 2026 by rpki-client