Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: y3krw/ZuDpVhzkjfLJjgzB+jP1k3fB0uJb7sfpbv7jU=
Subject key identifier: E5:3C:53:32:7F:7F:D9:00:FB:D4:87:72:45:EB:6A:57:A5:34:53:E6
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019CADFE3BFF1DEA06B9F305B0E184888174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 10:00:45 +0000
Manifest this update: Mon 02 Mar 2026 10:00:45 +0000
Manifest next update: Tue 03 Mar 2026 10:00:45 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: YcfFDTFMD79iSLaUhjJQCZe33uWvGcjqnR0wJK1EMbc=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:3b:ff:1d:ea:06:b9:f3:05:b0:e1:84:88:81:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Mar 2 10:00:45 2026 GMT
Not After : Mar 3 10:00:45 2026 GMT
Subject: CN=e53c53327f7fd900fbd4877245eb6a57a53453e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:95:f3:6d:da:f6:a5:0b:57:8a:54:9d:94:
d7:7b:57:cb:8b:ab:e6:a8:e3:8d:f8:f5:12:f1:63:
3e:0c:4d:1d:12:16:9f:eb:2b:70:11:ce:a1:37:4b:
5f:3b:55:c9:79:fe:ef:3a:57:b4:c6:11:08:26:1a:
a8:95:68:e7:11:4c:4b:b4:44:b8:4f:4a:79:eb:8f:
19:66:98:75:76:c6:94:8c:74:76:47:02:b8:24:9a:
d7:22:11:34:07:f7:86:d8:10:a1:82:a5:c5:70:7a:
c7:ca:3e:00:86:9e:1d:78:d5:90:c8:60:d8:12:10:
cb:83:a6:3b:92:33:f1:5f:5e:38:92:27:02:4f:cc:
88:3f:36:c7:a8:90:4d:9b:1f:d6:51:13:f9:92:19:
3b:bb:bb:88:28:e1:db:4f:eb:3e:ce:9e:09:ad:f6:
2d:c1:90:95:5a:40:94:c0:37:0d:7f:c0:d1:78:29:
fb:8a:d3:51:fb:4c:fe:52:2e:bd:d6:4b:8f:5e:28:
6b:c2:61:65:12:57:93:5d:e2:f8:dd:3a:be:7e:58:
3e:09:39:11:fc:69:f4:2b:6a:88:e3:8c:46:b6:3c:
bb:f9:e3:94:2b:dc:cd:2a:ce:41:f9:5f:eb:ae:f2:
b5:71:2e:8a:8a:f5:56:1d:86:86:97:d6:dc:2a:7a:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3C:53:32:7F:7F:D9:00:FB:D4:87:72:45:EB:6A:57:A5:34:53:E6
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:20:47:62:df:c1:36:01:4e:16:1d:a8:96:1b:c9:27:62:85:
6e:61:99:18:30:4c:72:5e:24:51:ab:de:9b:b6:ef:4c:15:06:
35:71:f8:db:87:3c:46:bb:a9:5a:6e:60:e8:6c:b1:aa:d2:a4:
33:22:4d:87:a4:b5:a2:7e:06:5f:3d:cf:74:2f:71:ba:28:98:
f5:1b:7f:8f:bc:a2:57:2a:4f:88:16:70:73:7a:2e:c9:35:3e:
ba:8b:2c:ff:00:9c:72:1e:c0:3c:d9:4a:e9:a7:75:72:3e:09:
d3:3f:c2:63:87:7c:67:17:b9:ce:37:f6:f9:45:15:3c:f8:38:
bc:d2:52:3e:d4:cc:fb:2f:1a:73:eb:89:c4:54:d8:2d:34:b7:
bb:59:64:3e:8d:94:8b:42:65:3a:90:6b:d7:46:d1:18:cc:69:
cc:70:5d:e7:1b:7f:a3:1f:e4:1f:2a:04:50:9f:80:11:71:65:
3b:d7:e8:35:57:6f:12:63:4b:d9:42:5a:89:b4:29:ed:25:72:
f6:69:8e:36:3f:07:fb:d9:c9:d2:f7:5d:16:63:06:7d:7d:86:
21:df:4f:cb:e3:4f:66:c6:93:1f:34:e0:7a:c2:49:9f:a3:e8:
82:e5:63:29:81:47:86:87:1b:c2:9b:9e:47:6a:fe:be:96:97:
76:76:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:28 2026 by rpki-client