Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
File: 9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft (raw, json)
Hash identifier: Ib/C4033aExYcQ46mPXt/hpDS2SvbTtsN2/ZebB/yg8=
Subject key identifier: A7:5A:8C:00:81:B1:5E:BD:B7:F9:85:38:36:40:54:CB:B0:7E:C7:D9
Authority key identifier: F4:DD:8F:BB:92:F9:B4:74:61:87:D9:D6:3F:E9:B9:0F:CB:5E:CA:17
Certificate issuer: /CN=f4dd8fbb92f9b4746187d9d63fe9b90fcb5eca17
Certificate serial: 019CADC81BF5D06818D60710D16315548069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
Manifest number: 5F
Signing time: Mon 02 Mar 2026 09:01:38 +0000
Manifest this update: Mon 02 Mar 2026 09:01:38 +0000
Manifest next update: Tue 03 Mar 2026 09:01:38 +0000
Files and hashes: 1: 9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl (hash: bQzbj2nWmMa2+arcgWK1YUT3j2X+/wwAy8AnMy4Gnyw=)
2: wosvCdYOBGKEXb-UprSvx0MCphs.roa (hash: tnEA6MDP3i67STNORkdr3Hyo+omI4rqXgbveiy6Se1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:1b:f5:d0:68:18:d6:07:10:d1:63:15:54:80:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dd8fbb92f9b4746187d9d63fe9b90fcb5eca17
Validity
Not Before: Mar 2 09:01:38 2026 GMT
Not After : Mar 3 09:01:38 2026 GMT
Subject: CN=a75a8c0081b15ebdb7f98538364054cbb07ec7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:7c:a0:38:c8:f2:32:08:9f:a5:25:d6:ba:
49:aa:2a:7a:06:cb:fe:2b:97:5c:a6:50:74:d7:56:
73:86:f4:5f:d4:3d:2f:65:39:4b:80:b7:91:49:97:
45:e6:64:db:35:8b:a9:0f:68:1c:fe:9f:54:e0:1d:
a4:0a:1a:22:3c:ed:a7:06:05:a9:1b:34:05:35:05:
ae:28:54:99:30:69:3e:1b:5a:db:2a:30:f5:7d:5e:
aa:7c:45:c5:cd:17:0f:e0:94:ec:7f:6b:50:52:00:
b2:03:97:6a:ce:ff:62:9a:d4:f2:4d:5c:34:cb:8d:
44:dd:0f:c0:41:55:9d:00:e1:9a:32:72:4a:e3:75:
a6:ad:b9:be:c3:f9:7b:3c:e5:e1:83:9b:8c:b3:4a:
19:9a:8f:57:30:67:ed:31:d2:c7:c4:3b:0f:99:81:
c2:03:08:48:1d:a1:cd:77:09:36:59:c7:6a:d5:db:
68:e3:e8:ee:cc:2d:ca:ed:89:00:77:c7:f3:16:f6:
02:66:8a:3e:ce:cb:ef:84:ef:3f:13:2e:ff:12:d5:
f0:3f:d6:5f:1c:00:9f:b1:50:61:3b:6a:8a:5a:61:
9a:93:89:b1:82:47:ef:c4:28:6d:9c:44:f7:e7:85:
f6:41:18:0f:7e:36:9c:9e:ca:cf:6b:f0:d4:5f:1c:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:8C:00:81:B1:5E:BD:B7:F9:85:38:36:40:54:CB:B0:7E:C7:D9
X509v3 Authority Key Identifier:
keyid:F4:DD:8F:BB:92:F9:B4:74:61:87:D9:D6:3F:E9:B9:0F:CB:5E:CA:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9d:db:04:fc:84:02:6a:a5:59:98:e9:0a:c9:06:e1:e4:fe:
89:43:9d:fb:fb:6b:2d:22:43:12:6d:e5:52:8f:d3:9d:51:b4:
cf:39:a8:14:53:9a:88:82:fc:16:fd:96:26:e2:4c:2b:ce:cf:
d6:79:90:55:6f:fa:1a:a1:92:f3:e9:05:16:4d:a3:03:bb:8f:
d8:85:43:91:44:fd:5e:b1:b9:84:04:e5:3d:e8:16:dd:48:e3:
e7:8a:ad:54:0b:c6:78:8b:e1:24:e2:f8:f4:0e:b5:d8:ba:f1:
e7:62:7b:66:a8:36:72:49:63:05:8d:c2:7d:92:e4:a7:44:01:
48:95:c2:e7:e6:63:10:ce:e2:76:ed:31:1f:60:7c:51:98:c9:
5e:9a:44:3b:60:26:d4:c1:8e:35:3b:52:7a:72:cf:1b:d9:79:
27:e6:4d:ee:ea:f1:31:16:e5:30:f8:a5:62:79:3a:1c:7a:ef:
8b:a2:c3:bb:ed:74:cc:32:93:4a:cf:91:12:87:0a:0a:84:be:
be:83:fb:ad:bb:f3:12:69:e6:a4:be:1c:73:c3:bd:2a:14:b9:
39:21:23:00:ea:02:18:ec:18:29:7b:20:72:ab:8e:f0:9a:4b:
39:ac:8c:49:f8:38:77:22:1d:30:75:f1:03:6d:18:6f:71:4a:
c6:0c:20:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:37:16 2026 by rpki-client