Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier: KFc7fxdHjFdUTtTerO1tvvM4JlEc3BKD2d73gU2IB4Q=
Subject key identifier: 62:CD:0F:A1:C7:FD:43:C6:59:E9:23:D4:2D:37:95:8F:03:C1:9C:2A
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 019CAA58B697F803CB6417B174E3E53B8FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number: 1856
Signing time: Sun 01 Mar 2026 17:01:06 +0000
Manifest this update: Sun 01 Mar 2026 17:01:06 +0000
Manifest next update: Mon 02 Mar 2026 17:01:06 +0000
Files and hashes: 1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: 5nLU7nWIOh1zv/75krwioSU5zhotCY6yQjpkSoKhGfE=)
2: U5Hr7DVltimNN4exYtKNMwjtw8w.roa (hash: a1GYmzluOFIdh7d+x71WU9ozZYGhuTpIQod/AeGpY6Y=)
3: pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa (hash: fiAhIReHkKJDspHClaY6l1S5vNnjpZ4eQPqh1G/RGnQ=)
4: shwoCz68cKqwcN5qi3XrzWkO2xo.roa (hash: vsl5wyUpfTDJC2irw4CHdq3XYydWiX8/t9r4NWlOM68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b6:97:f8:03:cb:64:17:b1:74:e3:e5:3b:8f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Mar 1 17:01:06 2026 GMT
Not After : Mar 2 17:01:06 2026 GMT
Subject: CN=62cd0fa1c7fd43c659e923d42d37958f03c19c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:27:c1:20:b8:cf:6d:38:81:51:3f:52:6e:
94:4c:ee:c1:86:5c:c9:6e:d1:a4:77:fe:a0:c0:a6:
53:40:77:7e:e3:8c:df:be:85:a4:84:b5:de:2a:57:
f3:06:42:fd:fc:f7:20:0e:b6:05:06:29:0c:f1:1f:
ac:5f:96:9c:01:9e:70:8e:34:fa:05:d5:cf:fa:92:
38:ba:a5:84:f7:34:a0:0a:07:98:0d:73:24:d5:59:
dc:59:60:2d:ba:a4:7d:e9:86:67:12:c4:d5:84:91:
54:df:d1:80:a7:6e:20:3c:64:be:4f:22:a6:00:fa:
d9:ee:5b:54:62:16:38:ab:e7:bf:b9:a7:ab:a8:bb:
7a:44:7a:6d:be:b6:f4:33:d4:3b:d8:ee:aa:f0:65:
46:30:13:3f:50:0f:0a:09:fd:f1:6d:7d:ba:f8:b8:
d7:02:78:26:09:c1:a4:3e:20:38:ed:56:c7:5f:f9:
6e:fd:ef:8a:e9:71:f2:be:b3:35:ba:43:90:c4:33:
f9:5f:a3:94:62:9d:96:78:3c:54:91:4f:2b:4d:79:
41:65:ae:09:43:44:81:db:d7:f1:b0:be:9a:1e:7a:
30:7e:72:ff:44:f8:42:8f:13:65:56:f7:2c:23:b3:
46:06:6c:80:90:c8:5d:c9:51:ac:38:e2:47:6b:ad:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CD:0F:A1:C7:FD:43:C6:59:E9:23:D4:2D:37:95:8F:03:C1:9C:2A
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a0:56:cc:05:a9:76:d9:68:fa:23:2e:62:4a:54:d9:f5:ec:
62:0d:39:7d:be:a9:5b:22:84:87:d3:e2:b2:ec:82:9e:38:09:
43:5e:3f:a7:62:c0:8f:29:52:66:56:81:7d:85:68:99:6f:0f:
3c:a8:28:f7:7d:12:10:65:be:07:8a:a7:e2:a4:2b:0e:03:d3:
c3:4f:87:a6:54:13:8e:cd:04:58:8d:d7:e5:21:b9:56:2b:37:
b1:76:80:77:52:71:fd:83:dc:4e:62:9e:fc:9f:36:dd:1b:42:
16:0f:94:d3:b2:c8:ce:88:f0:4c:0c:06:af:f3:7c:74:a5:48:
ec:07:6e:ca:66:8f:6c:6b:3c:e7:e6:80:f3:ba:ea:10:ac:27:
b2:3a:98:71:b9:56:53:50:30:a4:39:c2:7e:fb:c7:bf:cc:37:
c6:b8:46:e0:b7:fa:72:09:65:37:52:4d:af:3c:7e:a3:f3:e6:
a6:a5:9a:d1:b8:e2:0f:8a:1b:10:57:c2:b0:c3:fe:b7:51:24:
fd:99:66:ea:24:25:dc:08:3a:0a:3d:fe:fb:a7:9c:dc:af:1e:
73:a4:86:67:15:fb:6d:70:70:7a:c8:6c:4c:32:c8:2e:0a:a6:
3f:54:16:a0:31:64:e9:d3:a2:08:c6:56:85:d9:54:bc:7f:d5:
b1:f3:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:42 2026 by rpki-client