Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: o4iOVTGQlseIVwEn6pXgsOl9xOL742kXEASPbrwQpDE=
Subject key identifier: 42:44:FB:8D:F7:8C:57:3B:45:C6:BB:CB:14:8F:12:5E:0A:B5:5D:6D
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 019CAB343D092E58B5B2F8C3A288AE80369D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0D17
Signing time: Sun 01 Mar 2026 21:00:53 +0000
Manifest this update: Sun 01 Mar 2026 21:00:53 +0000
Manifest next update: Mon 02 Mar 2026 21:00:53 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: 3lsYRIYSG0nQ7A5K0zD82mos6S+XQSdBvWQwerx7trg=)
2: xhDUoIsJaJCqOA6VTkyeMee_Z9s.roa (hash: bDCv1HCZJO4EbMKAw0lf46zS80bqNn1qKkmrw6hFSH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3d:09:2e:58:b5:b2:f8:c3:a2:88:ae:80:36:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Mar 1 21:00:53 2026 GMT
Not After : Mar 2 21:00:53 2026 GMT
Subject: CN=4244fb8df78c573b45c6bbcb148f125e0ab55d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:57:40:6e:4c:6d:d1:22:36:b0:1b:ab:8f:
82:12:33:ea:2d:7e:cc:75:8c:89:b3:5d:19:b5:02:
79:1d:9b:25:94:b5:4d:18:f7:dc:d0:c0:b4:99:05:
fe:55:94:eb:36:3c:45:97:4e:65:73:77:f8:88:e0:
fe:64:d7:5d:07:14:79:73:a6:54:50:b3:50:46:99:
8b:1b:5d:49:f6:32:c8:44:fa:e0:e5:9c:88:44:79:
c9:87:b2:13:30:24:4e:8f:8f:12:fc:3f:c1:a3:1c:
a0:5e:8c:16:de:0a:38:6d:bd:e4:b7:91:3b:56:03:
69:9a:74:3d:67:70:b7:15:7f:f6:6f:21:6d:d1:96:
26:62:2f:39:fd:cf:24:d4:71:f9:96:9d:60:90:b3:
4a:31:38:68:8a:c9:cc:b7:2c:13:b1:02:88:6b:78:
c9:3e:25:45:af:56:a2:3d:a1:3e:c5:a9:94:5c:cc:
a0:16:3b:75:e0:56:0a:1c:39:9b:2d:ca:14:3c:74:
ec:e2:69:c4:6a:32:3a:b7:f4:5f:65:4e:79:f8:11:
72:b7:ce:a7:66:71:6b:8d:ac:a8:8b:3f:b3:8d:f5:
f7:35:79:86:03:21:b2:32:1e:e5:8e:09:51:2a:47:
1a:fb:65:0f:7c:4f:cf:c8:25:17:4e:b9:ab:d3:67:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:44:FB:8D:F7:8C:57:3B:45:C6:BB:CB:14:8F:12:5E:0A:B5:5D:6D
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5a:96:03:fa:9d:27:4e:4f:01:e8:53:f6:c9:f8:c3:e5:5f:
a8:29:b8:b1:1d:b4:c2:10:ae:5a:b6:65:3a:52:c4:37:c7:9c:
8f:c8:bd:bb:27:bf:46:c1:70:97:40:9d:8d:e8:4f:28:d4:2e:
78:d0:67:8c:96:03:93:7e:62:ee:99:a3:c5:ae:14:32:0b:a3:
1a:1d:64:00:79:ed:c6:60:6a:5b:f7:2a:08:60:ca:6d:1b:d9:
05:5c:31:33:83:6a:51:4e:b1:7a:97:81:2f:d3:86:67:87:b7:
ab:b7:b8:0a:f4:1a:3b:a4:b3:26:99:d1:ab:bb:7b:bf:77:d5:
ef:17:50:cf:fd:6b:2e:59:23:f6:a2:35:1c:d5:56:bf:cb:c7:
e9:12:57:b3:ae:0a:30:f6:64:76:c9:a6:c3:d5:0d:87:01:22:
ac:8a:0a:c0:d9:13:c8:b8:b4:44:80:22:8f:80:0a:f6:cf:cc:
84:f4:4b:38:dd:e2:91:13:40:ae:2c:dd:c8:c7:5d:2a:23:28:
9d:a0:a3:0e:ce:cb:5b:51:57:d0:ea:f3:3f:22:3c:df:e5:c1:
c7:0a:8f:02:b4:f5:30:c5:c2:a8:31:73:1b:3b:3d:68:41:ac:
95:ad:b7:20:93:7d:1a:b7:32:24:6d:26:ce:1d:aa:f0:d2:3e:
c6:8a:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:29 2026 by rpki-client